Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/3137372e3132342e37322e302f32312d3332203d3e203532363031.roa
File:                     3137372e3132342e37322e302f32312d3332203d3e203532363031.roa (raw, json)
Hash identifier:          yP19O6DH4Ag3NdKwK159lC2Qhe/InoLLVsRelzQyT0Q=
Subject key identifier:   E6:8A:18:19:85:09:26:17:F9:05:83:DF:9A:C0:38:24:D3:AB:92:C2
Certificate issuer:       /CN=0B58E3D8ABC34BBB499F1606407B06623B69F3C9
Certificate serial:       6A2DDB269DC14D383547FE26B888DEE043B43DAD
Authority key identifier: 0B:58:E3:D8:AB:C3:4B:BB:49:9F:16:06:40:7B:06:62:3B:69:F3:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E3D8ABC34BBB499F1606407B06623B69F3C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/3137372e3132342e37322e302f32312d3332203d3e203532363031.roa
Signing time:             Thu 04 Apr 2024 22:55:27 +0000
ROA not before:           Thu 04 Apr 2024 22:50:27 +0000
ROA not after:            Thu 03 Apr 2025 22:55:27 +0000
asID:                     52601
IP address blocks:        177.124.72.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2d:db:26:9d:c1:4d:38:35:47:fe:26:b8:88:de:e0:43:b4:3d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B58E3D8ABC34BBB499F1606407B06623B69F3C9
        Validity
            Not Before: Apr  4 22:50:27 2024 GMT
            Not After : Apr  3 22:55:27 2025 GMT
        Subject: CN=E68A181985092617F90583DF9AC03824D3AB92C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:ca:f5:30:4d:ab:fb:39:5e:37:75:ee:c2:
                    f2:dc:db:2f:4c:17:0f:6b:24:9a:8e:12:7f:88:a8:
                    ff:e3:81:aa:4b:69:e4:e2:06:b6:ec:99:05:b2:72:
                    30:44:50:58:27:9d:24:8a:de:f1:d0:53:aa:f2:7e:
                    92:dd:c9:90:b3:b7:9b:5c:76:14:14:97:85:3a:b3:
                    b9:0b:8a:6d:02:ef:1a:93:c9:f9:7e:82:16:b6:07:
                    b3:a4:c3:34:78:29:35:16:89:4e:c5:7b:46:41:e8:
                    b5:50:1a:79:26:60:5e:b6:7d:d7:67:f0:e4:2d:d9:
                    69:32:70:3b:79:fd:be:fa:c9:03:b3:33:43:93:70:
                    5e:b4:ac:2b:a4:7d:98:2a:84:e8:09:de:c6:5b:35:
                    ff:9f:52:b4:99:36:c1:b8:b1:f3:a8:36:a5:2d:35:
                    b3:0f:59:b4:13:63:3e:d8:f6:0a:e3:d8:3a:db:c4:
                    0b:cd:c4:53:bb:b1:ca:aa:13:f5:a9:f4:30:64:b4:
                    cb:9d:fd:b7:66:82:34:48:58:f0:10:19:1c:2d:f9:
                    df:79:57:31:74:88:39:35:b9:5d:42:91:df:ed:36:
                    e0:75:71:dc:71:ec:6c:31:b2:f1:d9:fc:21:4c:6d:
                    88:f6:91:d8:c3:73:9e:eb:16:81:09:e0:5a:c4:71:
                    c4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8A:18:19:85:09:26:17:F9:05:83:DF:9A:C0:38:24:D3:AB:92:C2
            X509v3 Authority Key Identifier:
                keyid:0B:58:E3:D8:AB:C3:4B:BB:49:9F:16:06:40:7B:06:62:3B:69:F3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/0B58E3D8ABC34BBB499F1606407B06623B69F3C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E3D8ABC34BBB499F1606407B06623B69F3C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/3137372e3132342e37322e302f32312d3332203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:ca:69:18:9c:7a:59:3d:f0:54:a7:cb:47:7b:ea:db:03:63:
         76:6a:17:03:10:3f:28:94:a4:49:ab:55:60:9f:53:c6:45:7c:
         6d:a1:53:15:03:78:34:5a:25:a5:70:00:ca:b9:c7:9a:6f:79:
         d2:22:b4:97:12:a1:04:cf:92:09:d6:61:36:4c:f8:bc:91:4c:
         85:ad:a8:66:7d:c4:c3:b5:99:25:71:02:7c:b4:2b:b3:77:6f:
         d2:c6:16:89:0c:38:a7:f6:05:23:9d:5b:12:df:0a:ad:03:0b:
         cd:c4:1b:18:1e:65:1f:ab:44:5c:de:67:10:f0:82:72:4b:1c:
         df:c6:f9:ed:7a:78:24:40:c2:dd:c4:62:80:49:60:80:3c:bc:
         4e:3d:e8:27:52:56:e1:f1:7e:60:2f:45:5e:9d:d5:b2:49:03:
         30:6f:6f:fc:56:f0:d4:f4:41:4f:a3:01:69:5e:54:79:53:c8:
         b0:79:6c:35:ad:60:e8:0f:9d:08:c0:2e:24:97:2b:71:e3:c8:
         5d:bb:fa:e2:e0:ec:35:e4:83:ed:26:cb:a7:9f:fb:7f:f4:5a:
         d4:a0:39:e1:68:d3:c5:80:a8:c7:05:16:a7:41:b5:d8:f2:1e:
         1c:8e:48:78:f6:4e:13:68:dc:28:27:ec:c4:7c:65:51:97:40:
         80:2e:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org