Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/3137372e39332e3132302e302f32312d3234203d3e203533303436.roa
File:                     3137372e39332e3132302e302f32312d3234203d3e203533303436.roa (raw, json)
Hash identifier:          Wrchpkce4IIGNFJC6vdLi98CrwHDRCdtCkqv3d1Mv6w=
Subject key identifier:   B2:CB:D1:55:F0:15:97:14:22:AA:FD:46:78:E7:22:2A:66:11:EF:EA
Certificate issuer:       /CN=D518634D88143C0017F61EB6C5447D28D1D13616
Certificate serial:       535E5D40B5DDB9DB369105E141AAD4EDF315BDFC
Authority key identifier: D5:18:63:4D:88:14:3C:00:17:F6:1E:B6:C5:44:7D:28:D1:D1:36:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D518634D88143C0017F61EB6C5447D28D1D13616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/3137372e39332e3132302e302f32312d3234203d3e203533303436.roa
Signing time:             Thu 04 Apr 2024 04:00:20 +0000
ROA not before:           Thu 04 Apr 2024 03:55:20 +0000
ROA not after:            Thu 03 Apr 2025 04:00:20 +0000
asID:                     53046
IP address blocks:        177.93.120.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5e:5d:40:b5:dd:b9:db:36:91:05:e1:41:aa:d4:ed:f3:15:bd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D518634D88143C0017F61EB6C5447D28D1D13616
        Validity
            Not Before: Apr  4 03:55:20 2024 GMT
            Not After : Apr  3 04:00:20 2025 GMT
        Subject: CN=B2CBD155F015971422AAFD4678E7222A6611EFEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:44:0d:09:aa:71:27:03:82:13:76:a3:c1:d8:
                    df:06:7c:9d:10:83:56:45:5b:59:59:d3:a8:a4:40:
                    2a:c7:6d:d1:81:ed:e4:3b:ee:9c:80:0c:18:e4:65:
                    05:c5:e7:4a:f3:f4:ac:98:80:4c:27:3a:ca:e2:6b:
                    14:e7:37:73:cb:6c:d8:88:1e:e8:2d:79:0d:c5:2d:
                    c0:e6:8e:41:13:a7:9c:93:9f:a0:5b:39:44:9a:6a:
                    02:f0:b0:7f:4f:d9:9c:e8:99:7b:45:b6:ee:2f:94:
                    a2:6b:42:95:d8:05:c6:40:fd:b1:bc:22:22:43:17:
                    b0:ba:e2:5c:32:21:86:95:ef:76:3c:13:02:d9:be:
                    a9:db:c5:2a:d5:5d:1a:7b:f4:f7:ad:23:7c:a3:85:
                    f6:42:9f:9e:80:2b:e6:14:2b:33:b1:87:cc:99:89:
                    10:92:6b:2f:6d:6e:43:78:3f:8e:c2:90:82:c0:13:
                    42:95:71:4f:45:f3:f6:c7:ac:1d:60:b6:2b:48:09:
                    9d:20:9c:2f:5b:25:79:01:71:a2:13:f1:84:a5:01:
                    53:71:39:23:42:e0:4f:5e:d0:6a:64:45:00:8a:a3:
                    86:0c:1f:39:db:ca:2d:08:c7:03:1d:99:05:39:08:
                    53:cb:8c:fe:53:b0:58:8d:09:08:51:84:e4:a1:5c:
                    79:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CB:D1:55:F0:15:97:14:22:AA:FD:46:78:E7:22:2A:66:11:EF:EA
            X509v3 Authority Key Identifier:
                keyid:D5:18:63:4D:88:14:3C:00:17:F6:1E:B6:C5:44:7D:28:D1:D1:36:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/D518634D88143C0017F61EB6C5447D28D1D13616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D518634D88143C0017F61EB6C5447D28D1D13616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/1/3137372e39332e3132302e302f32312d3234203d3e203533303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:94:84:2b:eb:26:aa:95:10:84:db:c8:be:8a:b0:a6:9c:73:
         a9:b6:d7:a9:fb:6a:43:0b:ed:f6:e3:72:86:f3:f0:af:1e:91:
         3a:bd:ee:78:c4:29:3e:a5:a1:d1:8b:af:45:1b:e7:44:2d:d4:
         50:b7:42:76:0f:7f:48:8f:4c:08:ae:f0:ad:b8:36:73:91:4f:
         b6:eb:25:2c:2b:28:d2:c9:57:d0:94:b3:2b:71:fe:90:26:53:
         0a:d0:f5:71:3c:e1:31:e5:5b:94:b8:ab:5f:35:d7:eb:d1:af:
         77:bd:5c:4d:39:f8:9e:61:11:57:bf:0a:7a:93:bd:26:cf:7a:
         6e:cb:fb:f4:45:19:16:67:e0:6f:ff:02:7b:c2:a9:56:82:86:
         a8:5f:11:bd:9d:1d:ce:e7:14:20:f9:e1:56:96:ec:e2:83:2b:
         81:f1:09:1f:bc:b9:1c:db:51:81:cd:2b:e1:3e:41:05:84:be:
         b8:27:8a:e7:05:e3:a2:8d:41:a5:46:ce:d9:ae:b8:3c:f8:19:
         d3:06:64:8f:12:7a:b8:ba:b3:01:5a:f9:1f:24:f8:78:7d:8e:
         4d:21:39:75:8e:fd:d5:92:c5:81:bd:74:c6:cb:4f:3f:bc:b9:
         0a:f2:a3:4d:0e:64:6b:e7:6c:01:fe:39:ef:91:9e:17:9c:fe:
         cd:de:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org