Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135322e302f32342d3234203d3e203532353732.roa
File:                     3137372e38362e3135322e302f32342d3234203d3e203532353732.roa (raw, json)
Hash identifier:          w6Fu26wypkrL21sNzxUFS+Tz/h9nc4W9TSM/yuaFdeA=
Subject key identifier:   28:A8:A9:C1:AB:03:BE:F8:0D:23:1C:99:43:1A:D6:63:50:1A:09:0F
Certificate issuer:       /CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
Certificate serial:       2626A68DB8FADA0BFAE2BBE636DDFD6836287ACA
Authority key identifier: C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135322e302f32342d3234203d3e203532353732.roa
Signing time:             Tue 07 Jun 2022 12:32:34 +0000
ROA not before:           Tue 07 Jun 2022 12:27:34 +0000
ROA not after:            Tue 06 Jun 2023 12:32:34 +0000
asID:                     52572
IP address blocks:        177.86.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:26:a6:8d:b8:fa:da:0b:fa:e2:bb:e6:36:dd:fd:68:36:28:7a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B
        Validity
            Not Before: Jun  7 12:27:34 2022 GMT
            Not After : Jun  6 12:32:34 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4a:cb:d0:4c:d0:e8:6a:1e:e8:e6:1a:0d:51:
                    33:58:b5:89:76:17:08:53:cd:86:6e:ab:18:d2:4c:
                    6e:c7:af:6c:1d:9f:cf:3e:85:70:31:41:fa:c9:bf:
                    5a:54:30:1a:2d:98:7c:c5:d2:4c:a6:b6:c6:e0:e9:
                    bc:5e:af:2c:1d:74:a8:a7:17:73:8b:ed:70:15:8e:
                    35:5f:3a:c0:7f:98:fa:82:a8:26:37:15:f8:81:fe:
                    de:27:5f:e1:78:69:9d:df:88:22:90:40:9e:c0:ee:
                    4b:dc:29:cd:48:2a:61:a9:9e:a9:f4:f8:57:98:c1:
                    5a:1d:86:ca:92:cb:e7:b3:61:35:fd:16:01:d8:c4:
                    74:87:d5:88:26:a3:e0:18:a0:8f:b2:e4:9a:72:2d:
                    8c:55:50:2d:01:bb:35:c1:24:24:99:9e:c2:81:09:
                    3a:e6:6d:f4:6f:07:90:4b:c0:ab:f7:34:34:da:df:
                    0d:82:62:36:7e:cc:f9:96:9f:d0:c7:8f:b7:73:9d:
                    ba:03:14:8f:28:54:3b:af:78:7f:ec:b7:34:63:3d:
                    91:dc:c1:08:31:8a:48:6c:98:83:7c:35:68:26:f6:
                    ad:c4:0c:98:97:f6:79:5a:59:94:ed:cf:7e:9f:3e:
                    4a:e5:93:10:ae:11:21:9a:43:25:3c:06:50:09:a2:
                    23:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A8:A9:C1:AB:03:BE:F8:0D:23:1C:99:43:1A:D6:63:50:1A:09:0F
            X509v3 Authority Key Identifier:
                keyid:C2:FA:70:94:B7:79:87:CD:DA:D3:ED:A5:0C:3F:50:6A:36:BF:8E:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2FA7094B77987CDDAD3EDA50C3F506A36BF8E7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WjFVXhb8Fug1HEnMxjo4KGLYTwL1hiVAqPMV8zH1Uqw/0/3137372e38362e3135322e302f32342d3234203d3e203532353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:0e:8f:ec:2e:32:39:5f:2c:1d:21:f6:5e:83:5a:e4:0f:c0:
         cd:53:da:c6:5b:fd:6b:28:98:f2:d9:e6:cd:a7:17:41:d4:c1:
         a6:49:a5:b4:4c:43:56:ce:c9:88:08:01:32:51:f6:4d:43:8c:
         50:e9:2c:17:44:f2:d3:59:3a:d9:48:3a:d7:8b:3b:ab:f5:bd:
         f2:f4:a2:3a:33:e0:e9:fc:71:c1:44:ab:08:05:66:0c:6d:23:
         d8:90:da:cb:d1:37:43:a3:f1:e4:62:b8:84:6a:7f:98:76:4b:
         c9:5d:be:c4:d4:0b:fb:e9:0b:d1:68:4f:3b:c2:3f:07:52:a9:
         81:43:f7:3f:4d:38:e8:94:1e:20:46:43:5e:6d:a9:6c:7c:5c:
         c4:bc:3d:61:4a:f9:7d:e4:c6:5c:11:f5:67:e4:c2:2f:33:94:
         fe:97:2f:42:63:f0:df:f8:7a:d5:da:00:d2:e5:fb:b1:52:92:
         ea:16:04:ce:50:5d:b9:a5:c2:30:31:40:c2:90:0e:7c:46:75:
         88:cc:3d:70:fe:85:7e:0a:ca:c3:b2:23:a7:3f:c0:e6:e6:86:
         a6:1b:69:d4:7b:05:00:97:74:45:32:a9:c1:97:63:80:37:c5:
         ba:b2:58:d1:bd:dc:46:15:26:0f:ec:91:b7:e7:c3:a3:94:f2:
         b2:ae:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org