Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133382e302f32332d3233203d3e203533303138.roa
File:                     3137372e37322e3133382e302f32332d3233203d3e203533303138.roa (raw, json)
Hash identifier:          Ovnr+0/bWAMH3dnLWCI80D1X+XEdigMTCz5u5Nu9ehs=
Subject key identifier:   3C:80:9E:56:30:25:CE:91:F7:C1:54:CA:79:56:88:38:C3:05:93:E8
Certificate issuer:       /CN=5400A3123C8B711A493F496AF33B4DB8D94F0022
Certificate serial:       2A4218BD9FE82423BA965A12553120610B7CACE1
Authority key identifier: 54:00:A3:12:3C:8B:71:1A:49:3F:49:6A:F3:3B:4D:B8:D9:4F:00:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5400A3123C8B711A493F496AF33B4DB8D94F0022.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133382e302f32332d3233203d3e203533303138.roa
Signing time:             Mon 07 Feb 2022 12:09:25 +0000
ROA not before:           Mon 07 Feb 2022 12:04:25 +0000
ROA not after:            Mon 06 Feb 2023 12:09:25 +0000
asID:                     53018
IP address blocks:        177.72.138.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:42:18:bd:9f:e8:24:23:ba:96:5a:12:55:31:20:61:0b:7c:ac:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5400A3123C8B711A493F496AF33B4DB8D94F0022
        Validity
            Not Before: Feb  7 12:04:25 2022 GMT
            Not After : Feb  6 12:09:25 2023 GMT
        Subject: CN=3C809E563025CE91F7C154CA79568838C30593E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:58:74:78:fa:39:f5:91:1f:66:83:10:29:
                    d3:81:0e:c9:0c:e5:90:fd:95:57:1c:90:63:28:61:
                    46:67:b6:80:b2:01:92:ae:06:c0:fd:bf:25:8a:d8:
                    1a:b5:cd:0a:19:84:f8:cc:04:b9:14:1d:a2:36:ba:
                    3a:f9:63:31:d8:38:06:a2:7f:56:fa:3f:cc:ed:0d:
                    22:4a:b4:eb:89:ed:15:34:d7:52:86:f7:68:8b:bb:
                    bd:19:8e:20:fa:84:67:a8:34:97:c7:b0:0d:e4:97:
                    07:12:8e:bf:bf:94:bf:cc:f7:9b:ed:f6:a1:ff:01:
                    e6:3a:2a:da:fb:ca:5c:cb:80:d8:ce:d8:cd:9b:f9:
                    56:c5:00:d9:87:c7:ad:dc:95:b2:da:b5:66:72:eb:
                    58:dc:f9:d6:4d:89:38:7a:0f:b3:b5:18:98:97:19:
                    d8:62:61:76:0e:4e:2c:77:3e:dd:f3:db:38:a0:e8:
                    53:45:40:d8:69:0e:86:ef:f7:99:24:3c:d8:c8:94:
                    cd:88:ce:b4:7b:32:3c:42:3f:39:d6:e9:4e:37:95:
                    9a:cc:df:5e:a3:91:d4:3e:41:22:c4:f7:30:40:51:
                    83:3f:b3:d1:11:7d:d5:dd:0f:cd:f2:78:1e:61:43:
                    1f:4f:b4:bf:91:0b:3e:a2:4a:c2:49:08:69:9d:aa:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:80:9E:56:30:25:CE:91:F7:C1:54:CA:79:56:88:38:C3:05:93:E8
            X509v3 Authority Key Identifier:
                keyid:54:00:A3:12:3C:8B:71:1A:49:3F:49:6A:F3:3B:4D:B8:D9:4F:00:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/5400A3123C8B711A493F496AF33B4DB8D94F0022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5400A3123C8B711A493F496AF33B4DB8D94F0022.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133382e302f32332d3233203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:26:b0:15:c6:f1:24:a3:ff:eb:27:13:b9:73:d2:26:d0:
         7c:9f:e3:e8:ac:eb:87:bf:e2:19:05:70:6b:65:bf:be:23:90:
         d2:ff:c5:b7:6f:87:e0:35:c2:b1:66:08:6b:49:e0:b7:81:65:
         c9:34:ab:b8:66:1e:08:bb:c3:25:c7:11:fb:80:d5:da:e6:55:
         9f:1c:5e:09:7a:fd:ce:a5:68:bd:70:bd:78:c8:be:21:a6:4e:
         e4:a7:37:73:6d:80:e2:41:fe:a3:66:61:e5:c8:03:36:ab:0a:
         55:3f:56:cd:c0:af:e2:e2:89:8b:cb:36:80:58:a4:a9:1b:88:
         e8:85:db:25:92:01:0f:ca:8b:8f:47:12:f0:4e:54:ba:b5:e5:
         e5:b1:2a:98:ff:69:c6:e5:c1:6b:8c:e6:b8:c9:e5:7d:c8:a3:
         a5:be:6a:13:27:d1:97:f8:18:8e:19:4e:09:b5:20:0d:20:53:
         10:80:89:12:50:84:2b:25:20:03:18:f6:95:d0:b2:25:38:66:
         ca:1b:47:58:64:0d:4d:7a:9c:37:d3:bc:ac:3c:ef:8a:57:90:
         03:0a:6a:de:0d:32:32:8a:1c:18:a5:6d:28:e0:ef:32:82:59:
         8c:d9:61:5b:7d:14:10:c1:78:60:eb:64:fd:1b:a1:cd:28:ea:
         4c:59:8d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org