Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133382e302f32332d3234203d3e203533303138.roa
File:                     3137372e37322e3133382e302f32332d3234203d3e203533303138.roa (raw, json)
Hash identifier:          fqnBk803ZUjBjlw8BOVjiT6rrQADxyPU87Z3deAB8Q8=
Subject key identifier:   0A:9B:16:8F:58:75:3F:3D:F7:4F:11:28:54:4D:3B:38:03:A4:8D:60
Certificate issuer:       /CN=5400A3123C8B711A493F496AF33B4DB8D94F0022
Certificate serial:       085B8C057E79DA35084099132001E8ABD3FC1660
Authority key identifier: 54:00:A3:12:3C:8B:71:1A:49:3F:49:6A:F3:3B:4D:B8:D9:4F:00:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5400A3123C8B711A493F496AF33B4DB8D94F0022.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133382e302f32332d3234203d3e203533303138.roa
Signing time:             Tue 20 Sep 2022 18:34:09 +0000
ROA not before:           Tue 20 Sep 2022 18:29:09 +0000
ROA not after:            Tue 19 Sep 2023 18:34:09 +0000
asID:                     53018
IP address blocks:        177.72.138.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5b:8c:05:7e:79:da:35:08:40:99:13:20:01:e8:ab:d3:fc:16:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5400A3123C8B711A493F496AF33B4DB8D94F0022
        Validity
            Not Before: Sep 20 18:29:09 2022 GMT
            Not After : Sep 19 18:34:09 2023 GMT
        Subject: CN=0A9B168F58753F3DF74F1128544D3B3803A48D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:a5:82:96:d9:a5:4c:fd:ca:54:1f:7d:28:
                    f8:af:9c:88:53:e1:54:e2:dd:4c:d2:73:13:d7:2c:
                    f5:5b:14:06:1a:9c:c2:e5:e1:36:81:b0:18:af:60:
                    b5:8a:8e:97:03:13:a2:e5:c5:26:6d:9b:89:bf:71:
                    12:d5:e9:4b:10:47:42:44:80:59:5f:9f:a8:f9:0e:
                    76:fd:8b:34:bf:ca:ae:1d:69:fd:d2:b3:83:48:be:
                    e2:6e:14:79:bc:f7:07:41:5e:8d:95:d8:7a:cf:63:
                    2a:0f:81:65:80:90:81:9a:63:fb:06:71:1f:5f:80:
                    92:dc:75:a8:97:0b:c3:af:47:b6:70:3d:b1:28:32:
                    96:c5:23:63:b8:e4:b4:c7:06:bb:f0:c7:40:c4:92:
                    65:fc:dd:ea:18:ce:75:f6:a4:b8:0e:b7:66:19:0a:
                    51:e1:20:06:e7:b9:15:df:6d:e5:ef:6b:97:40:78:
                    6e:19:63:1a:a2:0a:b7:c7:b8:f4:e7:e7:3f:b7:29:
                    fa:37:a9:1d:e0:7f:34:66:f5:36:6c:f5:64:ab:3f:
                    15:57:c6:ac:31:55:cf:d2:56:52:75:bf:1a:d3:43:
                    70:e4:82:ea:18:25:0b:8a:9e:57:cd:35:bf:2c:bc:
                    6d:e9:fa:e2:dc:b5:92:b9:36:39:cc:bd:61:ca:d7:
                    98:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9B:16:8F:58:75:3F:3D:F7:4F:11:28:54:4D:3B:38:03:A4:8D:60
            X509v3 Authority Key Identifier:
                keyid:54:00:A3:12:3C:8B:71:1A:49:3F:49:6A:F3:3B:4D:B8:D9:4F:00:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/5400A3123C8B711A493F496AF33B4DB8D94F0022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5400A3123C8B711A493F496AF33B4DB8D94F0022.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133382e302f32332d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:ae:4b:6d:10:ca:f7:06:8d:7d:7c:37:d8:09:31:40:b6:8c:
         c8:b6:f4:82:e2:80:c1:3e:17:68:d7:d2:1c:7e:ab:be:c1:df:
         cd:de:6c:59:c5:7a:29:05:14:b1:02:4a:9a:64:9e:ef:47:60:
         f7:07:86:3b:a6:30:b6:ba:c2:39:8a:2c:5a:d6:44:c7:68:37:
         1f:dd:2f:7c:6c:e2:0a:cb:c9:df:ea:be:97:2d:49:ca:13:e3:
         8f:8e:7b:c6:3a:d8:5b:98:f1:38:62:14:44:a3:c2:a1:20:83:
         e3:34:0a:8d:0b:8b:4d:b5:7c:f8:f9:c9:9b:f9:b2:8a:89:fe:
         71:f3:95:f4:8d:aa:11:05:ca:c2:24:bf:98:b0:b5:cd:5f:33:
         f7:93:61:81:f9:46:3e:c8:d4:9a:60:ec:2d:31:ed:96:4b:e7:
         21:0e:f5:b9:31:07:76:ca:c7:1d:93:ae:2b:94:7a:0a:ab:79:
         d9:7a:cd:02:ac:c4:cf:33:8b:21:94:0d:95:0e:92:d0:b7:eb:
         ff:ac:cf:05:05:5c:94:06:a1:b2:02:49:53:f9:31:13:9b:d1:
         dd:e7:aa:05:ba:30:75:d0:2d:65:a4:a5:a2:46:d9:b4:9f:5c:
         e7:28:02:4a:76:e2:de:28:1f:c3:cf:9d:d8:89:81:81:8e:77:
         06:6d:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org