Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135322e302f32322d3234203d3e203532353732.roa
File:                     3137372e38362e3135322e302f32322d3234203d3e203532353732.roa (raw, json)
Hash identifier:          YlcyGuS0qOZub5DaGtWwIemEL85dBOeTTmSZhMbxSPg=
Subject key identifier:   BC:4A:1C:0C:8C:9B:E6:CD:77:3D:BB:EF:1B:5D:42:B4:5E:D2:1C:24
Certificate issuer:       /CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
Certificate serial:       6C8527DFB951C34144B5E27FB30F13E75B64B881
Authority key identifier: C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135322e302f32322d3234203d3e203532353732.roa
Signing time:             Thu 23 Sep 2021 14:44:51 +0000
ROA not before:           Thu 23 Sep 2021 14:39:51 +0000
ROA not after:            Thu 22 Sep 2022 14:44:51 +0000
asID:                     52572
IP address blocks:        177.86.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:85:27:df:b9:51:c3:41:44:b5:e2:7f:b3:0f:13:e7:5b:64:b8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
        Validity
            Not Before: Sep 23 14:39:51 2021 GMT
            Not After : Sep 22 14:44:51 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:27:a6:f1:b3:27:1f:f1:f9:ad:56:f7:f1:
                    5d:d9:d4:dd:ff:d0:bb:44:5e:ac:5e:53:ae:51:cc:
                    d3:20:d1:c4:b3:64:ee:46:60:22:1d:21:36:7d:7c:
                    9b:07:49:b7:2c:8c:a7:3e:10:cf:cd:7d:1f:00:7d:
                    52:39:a1:f2:c4:9a:bc:88:d7:21:fa:ce:9e:ea:20:
                    43:44:f5:ce:bd:24:66:50:b7:84:a6:15:21:f9:c5:
                    09:39:f4:bb:63:37:26:f7:d2:f4:46:af:1f:29:ad:
                    51:40:b1:76:79:89:e5:14:de:28:85:ce:57:b7:86:
                    f4:64:4c:f8:65:b1:9d:0b:c6:f5:1e:23:4e:73:47:
                    6c:8d:88:70:56:b0:d9:52:d6:b7:50:bb:74:84:45:
                    c8:43:c4:2e:e0:8c:9d:12:74:32:4a:a9:d2:b9:7e:
                    20:d6:9d:2f:c7:20:f6:e1:f7:f7:6f:8b:32:ad:ef:
                    bb:71:b6:c3:27:6c:de:23:20:fc:e8:87:0b:ab:31:
                    18:0b:c8:a7:77:be:da:31:ac:89:b2:99:84:28:de:
                    4a:99:59:6d:78:db:34:fc:4e:47:71:14:18:76:7a:
                    4e:8e:d4:3c:ce:f0:19:63:7e:4d:44:c1:e3:e8:4a:
                    2d:a7:48:9e:f9:28:e0:e6:bc:91:11:4f:59:c9:11:
                    62:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4A:1C:0C:8C:9B:E6:CD:77:3D:BB:EF:1B:5D:42:B4:5E:D2:1C:24
            X509v3 Authority Key Identifier:
                keyid:C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135322e302f32322d3234203d3e203532353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:6e:81:2a:c9:e5:5f:d5:83:90:75:5c:fe:f1:e4:70:0d:b0:
         9e:af:45:ae:64:58:26:fe:f6:fd:22:63:23:f3:44:d3:23:4b:
         5c:ce:1f:79:37:4c:51:fe:98:14:df:52:80:75:7e:58:6a:d9:
         50:3f:92:e0:11:74:ce:b7:c0:b9:37:af:3a:0e:7b:cb:7d:b8:
         0f:09:f3:44:e8:f2:43:50:e2:fb:4a:3c:03:a1:d0:c4:c6:22:
         e5:14:a8:87:21:d6:11:df:5e:6b:98:71:97:65:dc:33:7b:68:
         c8:d2:c8:76:ea:b3:89:6c:9a:b4:ea:25:a1:8d:5b:8c:5b:53:
         30:d7:89:08:0c:82:f3:b5:ee:96:e5:1e:5b:35:a7:fc:03:98:
         14:2e:c9:f2:fb:05:91:a3:e7:86:b3:92:38:ab:d5:ce:f1:85:
         64:fd:51:20:9e:d5:94:ce:c2:d4:a2:c1:a4:12:02:e4:86:bf:
         0b:08:f8:09:0c:ce:1d:40:6b:12:3a:22:77:3a:0a:b9:48:1f:
         29:9f:58:d9:ff:a2:56:85:ef:44:3d:17:8f:f6:56:94:52:77:
         25:0e:9c:f9:89:f4:d9:db:66:59:35:33:e8:62:b3:0a:7e:2a:
         e2:8a:a6:d3:09:3f:7d:61:b4:13:e8:90:c5:98:91:30:5b:03:
         4e:19:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org