Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa
File:                     3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa (raw, json)
Hash identifier:          t6xfslyds9QWcZiDta5xAr5TaB6ncMj19I7EIRdSgJY=
Subject key identifier:   4F:0B:7F:8D:12:3E:F0:D9:D6:8E:F6:2A:98:6F:B0:41:B6:40:0D:02
Certificate issuer:       /CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
Certificate serial:       5D0CF9D55A513108CBDF26F44B6FDF0D1FDBFF35
Authority key identifier: 1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa
Signing time:             Sun 24 Sep 2023 21:58:56 +0000
ROA not before:           Sun 24 Sep 2023 21:53:56 +0000
ROA not after:            Sun 22 Sep 2024 21:58:56 +0000
asID:                     61602
IP address blocks:        177.124.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0c:f9:d5:5a:51:31:08:cb:df:26:f4:4b:6f:df:0d:1f:db:ff:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
        Validity
            Not Before: Sep 24 21:53:56 2023 GMT
            Not After : Sep 22 21:58:56 2024 GMT
        Subject: CN=4F0B7F8D123EF0D9D68EF62A986FB041B6400D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:c9:96:fd:a0:a4:6e:30:79:71:ba:7a:1a:
                    b7:86:30:d2:df:5e:c9:3b:79:ae:e6:fe:8c:f0:49:
                    80:8c:e3:79:1a:a5:0a:fd:f7:cc:45:b5:74:b6:32:
                    e5:4c:51:70:b6:b8:ed:67:ff:62:08:5f:0e:bf:2e:
                    4a:ad:c3:2f:01:db:db:c8:94:29:0b:e6:21:d2:e4:
                    fb:fe:00:11:02:9f:e4:74:a4:31:f6:6f:a2:b6:1f:
                    95:c0:1c:02:d5:5f:ae:4b:08:7c:0e:28:80:03:ee:
                    87:c5:ed:96:b4:39:f8:1b:04:77:55:c4:be:14:b4:
                    36:ce:71:4f:a8:ed:89:53:01:b1:60:44:24:93:78:
                    01:f3:6e:50:a2:7e:98:0c:86:ff:48:35:9b:4c:5c:
                    cd:ed:16:60:89:d3:fe:ec:1b:c5:08:75:42:88:24:
                    d6:3a:8a:e4:60:45:28:b1:ee:a8:ff:f5:4c:81:9a:
                    31:3b:f1:94:c7:df:31:db:1e:f5:90:17:86:e7:5d:
                    7c:93:61:8b:c6:53:f1:f8:54:43:80:48:fe:ae:48:
                    5b:8e:72:b9:ca:97:9e:28:57:b8:09:14:69:64:0b:
                    e4:a9:2c:d4:41:7d:5f:d5:90:84:2f:8e:19:56:d9:
                    72:65:40:5d:3f:02:e4:bb:23:fc:82:ec:4e:e6:b6:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0B:7F:8D:12:3E:F0:D9:D6:8E:F6:2A:98:6F:B0:41:B6:40:0D:02
            X509v3 Authority Key Identifier:
                keyid:1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:6a:ad:f3:1d:e5:86:9b:33:30:b0:f4:b0:ae:8e:a8:52:f2:
         54:e4:04:22:c1:d0:4a:d2:58:49:ac:9f:42:88:d3:f0:4a:42:
         18:7f:e5:91:16:47:10:45:9d:40:72:25:64:c3:65:37:a1:52:
         25:05:9e:19:28:2f:6f:2f:7d:9e:c6:b4:b5:0d:ca:0a:76:25:
         71:f2:88:87:84:7d:7e:f3:70:15:89:74:ec:ec:b7:35:9b:22:
         3e:10:00:d4:47:9c:c3:51:12:b7:28:70:1a:cc:a9:98:8c:c6:
         08:d2:35:f7:7f:be:ff:02:ba:19:4c:77:de:33:2f:aa:fc:b1:
         42:ae:36:22:e1:2a:47:e2:d9:c6:cb:fd:25:55:20:9d:91:5c:
         1e:f7:ea:67:fc:15:33:db:67:87:79:cf:5d:ce:6f:a0:73:e8:
         32:49:b4:2e:17:aa:bf:7e:a0:c6:fb:6a:59:71:87:cf:4a:fd:
         52:35:dd:fa:b3:91:f2:35:37:5e:1e:ec:21:b1:2f:27:ac:80:
         c1:95:04:d9:41:b6:b0:81:42:98:2f:82:4c:15:d9:72:cd:14:
         9f:33:96:67:69:a4:39:ec:c6:90:5c:e7:a7:09:29:e2:f1:88:
         95:fc:1b:56:2a:e0:3a:64:67:74:67:bd:04:07:96:ec:95:f9:
         7f:62:ce:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org