Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32312d3236203d3e203533303138.roa
File:                     3137372e37322e3133362e302f32312d3236203d3e203533303138.roa (raw, json)
Hash identifier:          Rn7mLAtx8Vh6w7MOEwqkqtOFQkjIFz/PikKQ1Rgv4cM=
Subject key identifier:   EC:9F:71:5F:76:0F:70:F0:A1:1C:3D:DA:F5:A5:72:56:AE:A5:42:AB
Certificate issuer:       /CN=0296E8534D3AE275B3F059BE9EE60DDB30CC34A1
Certificate serial:       2EF6BDB14BC72255629A355438837C4E21586FB1
Authority key identifier: 02:96:E8:53:4D:3A:E2:75:B3:F0:59:BE:9E:E6:0D:DB:30:CC:34:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32312d3236203d3e203533303138.roa
Signing time:             Tue 05 Dec 2023 13:44:26 +0000
ROA not before:           Tue 05 Dec 2023 13:39:26 +0000
ROA not after:            Tue 03 Dec 2024 13:44:26 +0000
asID:                     53018
IP address blocks:        177.72.136.0/21 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f6:bd:b1:4b:c7:22:55:62:9a:35:54:38:83:7c:4e:21:58:6f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0296E8534D3AE275B3F059BE9EE60DDB30CC34A1
        Validity
            Not Before: Dec  5 13:39:26 2023 GMT
            Not After : Dec  3 13:44:26 2024 GMT
        Subject: CN=EC9F715F760F70F0A11C3DDAF5A57256AEA542AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f1:64:d3:83:9b:37:28:2d:30:df:ac:95:a7:
                    25:a2:65:7c:61:3a:cf:e9:0d:99:cb:39:f5:06:a7:
                    ce:97:36:b6:f0:8d:8d:72:4d:38:3f:b9:68:47:3f:
                    69:6f:d9:33:59:4d:99:8c:b6:a0:99:3f:41:d0:da:
                    cc:f8:aa:bd:b7:c5:ca:71:e5:0a:51:95:ba:30:77:
                    b7:2d:88:d6:c1:69:35:e8:50:3a:30:e6:d0:2b:51:
                    7b:f0:74:d5:6f:d9:a6:c7:54:6d:e1:13:e5:27:7a:
                    17:c2:a9:61:de:f3:53:49:78:0b:5e:85:4d:83:2b:
                    56:50:b7:67:4c:3b:33:f6:ca:8e:25:bf:ad:66:d8:
                    2f:ce:81:11:cd:a8:04:9d:31:62:b0:c5:e3:cc:4f:
                    0e:29:df:fd:39:fa:19:68:02:eb:40:72:5f:af:5e:
                    26:79:9c:60:96:cb:02:dd:99:9a:48:19:0d:72:9b:
                    9b:b7:24:09:3d:c1:90:9d:e7:02:7e:c9:18:ef:64:
                    87:10:8b:7f:5f:c9:28:fa:9f:b6:fd:e4:65:7e:5a:
                    bb:e9:05:e0:8f:58:e2:a5:89:b4:7f:32:4f:3a:41:
                    b1:a6:64:be:cd:71:64:5c:9b:de:87:35:be:29:0b:
                    41:3d:8a:21:47:da:78:f3:99:67:5b:ce:97:5a:52:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9F:71:5F:76:0F:70:F0:A1:1C:3D:DA:F5:A5:72:56:AE:A5:42:AB
            X509v3 Authority Key Identifier:
                keyid:02:96:E8:53:4D:3A:E2:75:B3:F0:59:BE:9E:E6:0D:DB:30:CC:34:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0296E8534D3AE275B3F059BE9EE60DDB30CC34A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32312d3236203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:bd:a6:0c:56:08:c2:30:81:db:f3:e5:8f:e2:e2:3f:29:06:
         e0:0c:e5:44:9f:59:06:23:a5:68:64:dc:ff:a2:95:95:e4:9e:
         30:83:fd:f1:e0:84:a9:02:f1:31:9d:5a:df:1e:2c:d9:2e:3f:
         b1:ff:35:72:c8:29:72:1b:88:24:78:da:9b:62:7b:3a:2f:f7:
         27:36:9b:8f:ca:b7:e4:47:55:82:d4:01:fb:a2:23:69:d7:ac:
         0b:c1:41:5c:0b:bb:d4:f4:85:ba:06:a5:9e:01:99:9e:67:13:
         13:24:a8:aa:0e:20:18:94:68:0a:5e:f3:5d:f2:b1:cb:78:e3:
         4a:47:c4:0a:18:53:97:2d:10:49:5b:95:f4:05:9e:24:28:40:
         af:f7:05:b9:20:92:b8:b4:3b:3d:bd:2e:eb:e0:a0:40:6e:78:
         05:f7:c4:c3:68:33:7c:61:35:41:83:73:aa:3c:bd:4c:db:c2:
         4b:ec:a9:36:e9:9b:50:0e:70:06:87:c0:3e:f6:58:eb:cd:33:
         07:fc:72:41:34:00:9b:43:23:67:fa:3a:79:c2:f8:01:59:7d:
         c2:d9:1d:25:60:f6:73:8b:7c:d5:ee:27:c3:46:71:66:0a:18:
         34:4a:f2:d9:6d:8c:08:30:69:d0:fa:b5:ed:32:e4:bd:8f:0e:
         77:35:8e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org