Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/3137372e35322e3137342e302f32332d3332203d3e203532383230.roa
File:                     3137372e35322e3137342e302f32332d3332203d3e203532383230.roa (raw, json)
Hash identifier:          J6/YnXoWmIt6OpZHBxx1xbm1RWDBlFZcU4rf5xvzWFc=
Subject key identifier:   5D:38:14:64:40:77:6A:82:8E:1D:A3:FF:29:F0:B7:D6:EA:86:12:DB
Certificate issuer:       /CN=9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF
Certificate serial:       61A977C9330808E405C2FB18BAB82DE54B3B32A7
Authority key identifier: 9A:D8:9A:5E:B2:A0:7E:57:A9:B7:06:C1:E6:AE:2A:D9:32:7E:F3:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/3137372e35322e3137342e302f32332d3332203d3e203532383230.roa
Signing time:             Wed 14 Feb 2024 12:54:23 +0000
ROA not before:           Wed 14 Feb 2024 12:49:23 +0000
ROA not after:            Wed 12 Feb 2025 12:54:23 +0000
asID:                     52820
IP address blocks:        177.52.174.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a9:77:c9:33:08:08:e4:05:c2:fb:18:ba:b8:2d:e5:4b:3b:32:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF
        Validity
            Not Before: Feb 14 12:49:23 2024 GMT
            Not After : Feb 12 12:54:23 2025 GMT
        Subject: CN=5D38146440776A828E1DA3FF29F0B7D6EA8612DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:c7:d7:c7:eb:8e:61:a9:37:3b:c3:51:d3:
                    04:ab:b7:de:a5:da:34:ee:f8:39:59:36:a6:15:16:
                    7d:21:7b:3d:a7:32:5f:00:38:1a:22:6d:6b:39:8c:
                    e0:f6:48:06:06:fd:1a:66:d4:a9:29:72:81:8c:89:
                    a9:ef:85:96:44:48:0c:43:af:0a:11:e8:f3:93:3f:
                    62:52:bb:8d:49:85:69:7c:80:be:9a:eb:a6:22:d8:
                    c5:7b:db:96:e7:92:26:be:cb:fa:0b:22:1a:b2:da:
                    57:45:4c:77:e0:de:6f:d0:43:db:63:c4:4d:de:ac:
                    94:3b:9c:96:6e:9d:29:50:68:6c:7f:6a:e0:f5:02:
                    7e:8d:6e:0c:a8:55:78:27:b8:5d:87:e2:81:e2:f6:
                    30:78:36:1b:15:86:c4:06:e5:c2:b8:f9:d7:8d:5c:
                    1a:39:ff:21:15:03:26:85:e7:09:76:fb:6d:36:45:
                    00:c8:19:d0:a5:ef:e0:fb:53:dd:2b:b5:66:8d:a8:
                    63:79:9e:3e:17:49:7c:28:08:3f:e1:7d:96:8e:ce:
                    dc:82:03:db:cc:ca:3e:98:c0:36:8a:6d:e1:e9:d3:
                    dd:4e:65:76:c4:49:45:b9:60:d9:9c:12:de:f3:72:
                    bb:a1:44:7a:45:a0:3c:a0:7d:d3:80:20:02:a2:b4:
                    3c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:38:14:64:40:77:6A:82:8E:1D:A3:FF:29:F0:B7:D6:EA:86:12:DB
            X509v3 Authority Key Identifier:
                keyid:9A:D8:9A:5E:B2:A0:7E:57:A9:B7:06:C1:E6:AE:2A:D9:32:7E:F3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AD89A5EB2A07E57A9B706C1E6AE2AD9327EF3EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/0/3137372e35322e3137342e302f32332d3332203d3e203532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:cd:d7:07:8a:cc:e6:9d:99:ca:43:99:15:61:46:15:bb:2d:
         59:d5:4f:b0:16:bd:ef:e6:a3:ae:86:4f:d2:32:0d:e4:f0:12:
         78:a5:d3:e0:b8:d0:22:f2:48:7f:a3:24:b9:e8:25:d4:0f:6f:
         6d:73:9d:f7:b9:9b:bf:37:94:ad:73:ce:7e:4e:aa:59:c9:73:
         b8:60:c1:af:4e:ac:dd:c2:27:0f:21:e4:b4:b2:40:9c:9b:2f:
         32:3d:9b:a7:b4:5b:43:43:9d:c8:4f:89:10:f3:0f:8e:e7:63:
         87:de:e2:d2:d7:d7:74:09:4d:32:a4:22:c5:3b:42:1d:75:c1:
         0c:f6:2b:fe:17:d6:7a:a4:dc:50:e8:1d:e8:19:44:18:35:8c:
         1f:11:0c:e8:0a:2d:db:3b:cb:a4:fc:96:a7:a9:82:67:0b:3e:
         56:12:32:50:24:17:23:98:93:30:1b:9f:5d:25:1a:44:71:fb:
         8d:3e:74:72:37:72:a4:62:3f:56:11:df:83:81:85:4c:ac:c3:
         73:60:86:6d:ad:92:85:08:b1:4d:e0:d7:0a:c3:e9:e4:d2:d0:
         4d:c7:e0:10:50:11:0b:54:ab:83:02:3a:d7:ad:8d:eb:fd:ec:
         ea:0e:0e:6b:d9:93:10:04:7d:89:9a:de:47:2a:47:fc:79:0d:
         71:f7:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org