Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/3137372e35322e3137342e302f32332d3332203d3e203532383230.roa
File:                     3137372e35322e3137342e302f32332d3332203d3e203532383230.roa (raw, json)
Hash identifier:          kKywH/UOqDuKOGXw6nKCHkBaW+HXac7Vj2kyguQr7II=
Subject key identifier:   B2:9A:D5:47:95:5B:7B:4D:FE:A9:AA:71:68:B4:4E:B2:EB:2B:19:DC
Certificate issuer:       /CN=ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC
Certificate serial:       07C5F1AB55BB51C874D248EDD843D624F9C1E7B2
Authority key identifier: AB:E9:B1:1D:B9:D8:E8:D8:E8:0E:57:F6:4B:F8:7F:41:C9:0C:F8:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/3137372e35322e3137342e302f32332d3332203d3e203532383230.roa
Signing time:             Thu 04 Apr 2024 09:44:33 +0000
ROA not before:           Thu 04 Apr 2024 09:39:33 +0000
ROA not after:            Thu 03 Apr 2025 09:44:33 +0000
asID:                     52820
IP address blocks:        177.52.174.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c5:f1:ab:55:bb:51:c8:74:d2:48:ed:d8:43:d6:24:f9:c1:e7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC
        Validity
            Not Before: Apr  4 09:39:33 2024 GMT
            Not After : Apr  3 09:44:33 2025 GMT
        Subject: CN=B29AD547955B7B4DFEA9AA7168B44EB2EB2B19DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:ce:f7:75:94:91:e4:7a:6f:e1:ad:96:f7:
                    5c:42:01:cc:67:d3:47:87:75:20:53:dc:1e:0c:79:
                    02:bf:3b:70:8f:65:59:1d:cd:bb:fa:6f:34:35:24:
                    40:a6:16:fb:d9:96:e3:fc:44:2d:e8:7a:e4:b7:b8:
                    f7:26:15:2e:67:93:50:87:43:a8:01:97:69:3b:92:
                    52:94:ea:bf:50:0a:da:9f:fb:b2:0b:dc:7d:89:d1:
                    6b:4b:b3:3b:61:fc:4f:9c:cd:8a:97:10:fb:4c:94:
                    c8:d6:c3:e8:bb:95:79:ac:b6:95:a3:9c:5a:71:10:
                    f2:aa:d6:cb:02:1f:9c:4c:ec:7d:0e:ab:88:22:61:
                    82:0a:e2:16:58:8e:f3:07:92:f8:c5:8d:72:0e:d5:
                    f7:02:ea:80:ee:f4:68:a0:ce:31:85:b0:5b:64:a5:
                    b3:aa:a0:4f:fb:85:65:4b:2f:72:e7:b9:ca:c3:f1:
                    aa:8c:0c:46:25:92:4f:72:01:c1:d6:b3:ac:79:c5:
                    a7:22:28:2c:f6:83:dc:f5:15:29:53:05:d6:ea:45:
                    9c:c9:ef:69:75:19:15:cd:85:00:76:29:e3:00:dd:
                    3c:b1:85:76:9e:fb:7e:cf:2f:96:cd:c6:3f:9d:a5:
                    4f:78:76:da:7d:25:be:e4:50:d7:0f:12:80:61:be:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9A:D5:47:95:5B:7B:4D:FE:A9:AA:71:68:B4:4E:B2:EB:2B:19:DC
            X509v3 Authority Key Identifier:
                keyid:AB:E9:B1:1D:B9:D8:E8:D8:E8:0E:57:F6:4B:F8:7F:41:C9:0C:F8:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE9B11DB9D8E8D8E80E57F64BF87F41C90CF8BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CCNkuwuyEE3tRLdEwTK7i5k7xz5s4J3MxT4ev4JQXS1/1/3137372e35322e3137342e302f32332d3332203d3e203532383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:6a:82:50:13:13:a6:b4:be:01:e4:da:58:b7:44:2b:bb:91:
         86:eb:33:7c:61:1a:39:ed:d2:64:7e:81:da:a4:41:16:01:58:
         5b:9d:39:99:6c:af:77:22:dd:f6:90:10:2d:b5:21:c1:7a:1b:
         de:e3:3e:4b:09:08:a0:97:d9:a1:c2:b9:32:b5:cd:91:48:07:
         f3:bc:67:1f:00:c2:84:fa:d5:bc:da:a9:3e:f9:93:de:ac:d6:
         98:5c:19:24:a5:65:8a:76:8b:55:fb:b3:e6:7a:6f:70:d2:2b:
         30:34:68:27:f0:4e:fe:3b:b0:ec:19:0d:4b:c8:c1:0b:94:3c:
         8d:7c:65:53:04:82:07:9c:06:06:fd:79:6d:a1:9a:5c:9e:eb:
         e1:2d:c6:74:ee:d5:8b:57:e9:88:28:73:b8:d5:b2:9d:e6:c7:
         61:58:9e:bd:2a:55:e5:bb:a1:93:b3:a4:56:e4:26:37:0f:c5:
         10:6b:b5:d9:1b:01:ea:d7:b9:ac:d7:bd:c5:3b:ac:e1:87:41:
         29:9d:bb:99:70:61:b7:d6:3b:50:45:d2:fc:4f:c7:34:c4:75:
         ea:11:1a:a4:16:be:24:e7:2e:3f:45:ca:f0:23:62:e7:af:c6:
         61:9e:ce:3c:50:09:4a:17:d0:02:5c:a5:b1:70:63:0e:d5:20:
         80:86:c2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 15:47:27 2024 by rpki-client on console-ams.rpki-client.org