Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3137372e33382e3131322e302f32312d3234203d3e203532393638.roa
File:                     3137372e33382e3131322e302f32312d3234203d3e203532393638.roa (raw, json)
Hash identifier:          moW3Uj29T6pxLuFPaMp11YN761uS0lXUiYMG/KME3ak=
Subject key identifier:   2E:5F:B6:02:87:5E:A4:5E:9D:E3:71:62:6F:9A:EE:ED:0D:24:C4:A6
Certificate issuer:       /CN=2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA
Certificate serial:       64E5B463B4CF92D54ABEE8C594E6F8D42FB8C49A
Authority key identifier: 2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3137372e33382e3131322e302f32312d3234203d3e203532393638.roa
Signing time:             Mon 04 Mar 2024 14:20:29 +0000
ROA not before:           Mon 04 Mar 2024 14:15:29 +0000
ROA not after:            Mon 03 Mar 2025 14:20:29 +0000
asID:                     52968
IP address blocks:        177.38.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e5:b4:63:b4:cf:92:d5:4a:be:e8:c5:94:e6:f8:d4:2f:b8:c4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA
        Validity
            Not Before: Mar  4 14:15:29 2024 GMT
            Not After : Mar  3 14:20:29 2025 GMT
        Subject: CN=2E5FB602875EA45E9DE371626F9AEEED0D24C4A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d8:42:59:8f:c1:4d:38:4d:56:44:bc:3f:05:
                    74:b8:6f:cd:71:c0:7e:77:91:3e:2a:99:21:3f:fa:
                    4d:85:09:06:ca:0e:65:94:30:a3:ce:f4:97:f6:51:
                    16:cd:07:64:e7:0e:a0:5e:f4:35:e7:6c:0c:7c:51:
                    22:a6:41:22:53:47:4b:a9:c2:03:55:7b:52:9a:20:
                    bd:e4:6f:4c:79:22:f3:7f:7b:f0:cc:30:5f:03:c4:
                    03:c4:e1:1a:21:b9:7f:84:7f:7f:2e:94:01:bb:55:
                    ea:3d:4f:97:83:e9:e1:e1:35:21:45:a6:3f:d0:ef:
                    7c:db:1a:b1:28:5e:4d:c7:43:f9:8b:da:e8:93:6b:
                    7f:59:f3:d0:9b:21:d1:6a:02:17:31:cc:1a:01:f8:
                    16:16:b8:f5:50:85:e5:d4:9c:d1:16:e5:81:80:08:
                    fe:c9:3b:59:a9:90:1d:48:16:af:4f:da:ff:dd:e5:
                    0b:80:77:81:71:5c:34:1b:ea:9b:1c:fa:89:5a:35:
                    ef:24:23:a3:52:42:21:f1:5d:a3:50:e4:8a:ef:71:
                    9a:ef:ac:64:5a:52:e2:68:06:37:b7:93:d4:b3:80:
                    ff:37:14:37:59:08:51:9a:1d:55:32:00:12:72:e7:
                    69:d1:9f:31:a1:a6:78:5c:12:95:74:1e:83:1f:f9:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5F:B6:02:87:5E:A4:5E:9D:E3:71:62:6F:9A:EE:ED:0D:24:C4:A6
            X509v3 Authority Key Identifier:
                keyid:2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3137372e33382e3131322e302f32312d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:38:52:ac:f8:bd:bb:4e:f1:b6:98:10:e2:57:46:fd:c9:fe:
         53:b4:29:f2:b0:17:4d:80:5d:66:71:8f:a7:f2:a0:97:21:1b:
         4c:71:66:70:cb:e5:12:18:18:f8:6e:65:92:32:9e:2f:32:52:
         29:01:70:ce:02:5d:ee:74:37:3b:36:10:ce:c9:8a:b5:6a:1b:
         6c:c8:02:0c:3f:43:4e:ad:b5:1c:6f:96:b5:e5:1c:d3:bb:09:
         90:45:b5:63:b0:ae:51:e0:5c:52:fb:24:79:db:b3:32:bb:b9:
         b2:06:b8:08:4b:e3:ae:3f:dd:72:c9:bf:8c:5b:c8:7c:bf:74:
         2c:70:bf:3d:4d:7f:4e:e7:b9:6a:39:5d:d5:1c:02:27:ab:04:
         b4:fb:e8:6c:fb:78:b8:fe:9f:a0:5c:82:42:91:63:f9:db:b2:
         60:1e:f0:5c:44:cd:e9:e3:44:fa:a3:3b:9b:88:d2:48:91:23:
         02:b2:c1:49:c3:59:af:9a:d7:2a:62:58:82:f3:3c:0a:13:72:
         4c:f9:62:aa:c9:52:85:e4:de:bf:f2:03:a5:78:7a:5d:a5:84:
         d3:ad:ab:27:77:1e:8e:67:31:5e:23:b6:8e:40:9e:6d:6b:a2:
         b7:68:e4:2e:12:92:bf:0f:7f:85:c9:52:ae:d6:c4:d4:71:37:
         13:e8:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org