Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134332e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3134332e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          CmAqDZ0YsEInzTZSZTJCUMNX4X6Odv3fWwbYo48topk=
Subject key identifier:   00:2B:E4:BC:F5:B2:92:20:5C:8A:57:DA:EF:BD:27:25:D8:82:5B:7C
Certificate issuer:       /CN=5400A3123C8B711A493F496AF33B4DB8D94F0022
Certificate serial:       1C64B494F493E93211A99654D89D73D10BD50BFF
Authority key identifier: 54:00:A3:12:3C:8B:71:1A:49:3F:49:6A:F3:3B:4D:B8:D9:4F:00:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5400A3123C8B711A493F496AF33B4DB8D94F0022.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134332e302f32342d3234203d3e203533303138.roa
Signing time:             Mon 07 Feb 2022 12:09:25 +0000
ROA not before:           Mon 07 Feb 2022 12:04:25 +0000
ROA not after:            Mon 06 Feb 2023 12:09:25 +0000
asID:                     53018
IP address blocks:        177.72.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:64:b4:94:f4:93:e9:32:11:a9:96:54:d8:9d:73:d1:0b:d5:0b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5400A3123C8B711A493F496AF33B4DB8D94F0022
        Validity
            Not Before: Feb  7 12:04:25 2022 GMT
            Not After : Feb  6 12:09:25 2023 GMT
        Subject: CN=002BE4BCF5B292205C8A57DAEFBD2725D8825B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:a5:0d:46:76:94:19:cd:f8:f5:89:c1:c5:
                    37:77:a8:6c:81:e7:8a:fa:f3:46:e2:c1:30:5b:be:
                    d8:bc:41:8b:ac:74:66:e8:d5:88:62:3d:29:30:19:
                    db:6b:94:62:94:1b:07:06:c9:25:3a:b2:3d:9b:05:
                    eb:e4:00:64:27:ec:88:1c:79:0e:71:77:03:5a:2e:
                    8c:7b:bf:2e:3a:f6:45:fe:63:85:fb:7a:d1:23:58:
                    e2:8e:a7:04:01:5c:49:99:1c:5e:ba:dc:38:b1:f8:
                    4c:83:03:12:88:63:8b:55:50:a6:62:89:ce:c7:41:
                    99:3f:3c:ca:74:55:a1:63:54:46:e6:6b:f7:cc:00:
                    82:85:79:49:cb:7e:f8:4e:35:8d:05:bb:60:35:24:
                    f8:3e:88:24:be:f3:9c:52:23:44:36:bd:5f:42:78:
                    78:39:49:93:56:4c:cf:5f:70:f5:dc:26:7f:04:dd:
                    4f:be:b5:f7:e6:ce:99:37:af:d7:95:54:b5:39:a0:
                    df:55:08:d8:2e:85:3d:41:b6:f3:c7:2a:ee:cd:d5:
                    78:f3:a2:1e:eb:24:b2:04:40:66:cd:cf:57:33:b1:
                    95:50:02:10:dc:1c:3b:fc:e3:e4:0b:15:17:3e:d5:
                    9c:54:45:aa:0b:10:53:25:e6:c1:5d:cd:bb:0b:aa:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2B:E4:BC:F5:B2:92:20:5C:8A:57:DA:EF:BD:27:25:D8:82:5B:7C
            X509v3 Authority Key Identifier:
                keyid:54:00:A3:12:3C:8B:71:1A:49:3F:49:6A:F3:3B:4D:B8:D9:4F:00:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/5400A3123C8B711A493F496AF33B4DB8D94F0022.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5400A3123C8B711A493F496AF33B4DB8D94F0022.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134332e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:80:e1:47:70:c9:75:06:1a:c6:a3:c0:51:83:a7:11:26:3b:
         cd:75:8e:5d:e0:67:a3:67:2c:5d:98:d3:c8:21:d3:7c:39:77:
         59:08:0c:60:ff:15:84:92:6c:ad:c8:1c:c2:43:8d:09:5c:80:
         e9:e2:86:43:22:1d:6b:12:0d:64:78:e1:28:ac:16:b0:2b:a4:
         3d:fe:7f:e7:1b:74:3c:4a:13:72:1e:ae:78:30:b2:72:b4:2e:
         49:7a:78:cb:cc:91:aa:b6:16:22:4e:17:0f:b0:54:bf:2c:d3:
         ae:5b:8d:79:7b:8e:43:11:06:93:42:0e:35:d9:e9:2b:69:85:
         40:3a:ea:22:a7:25:51:b3:4d:ad:3a:e0:c8:70:ea:d6:70:05:
         76:c8:ad:7c:3f:11:1b:76:27:ac:f0:2a:00:10:0c:6e:44:3e:
         8d:b0:8d:df:c2:d1:95:44:5a:cd:e5:29:b8:1f:00:d5:91:37:
         2c:11:60:50:6a:87:8b:9e:32:6a:84:08:d4:3e:27:7a:2a:68:
         a4:b1:f0:f3:cf:80:a9:c0:0f:ce:7c:cc:35:9a:96:18:26:42:
         0b:81:69:32:17:7a:62:ae:f2:60:34:b6:d5:fa:00:fd:7b:5d:
         58:e9:08:7c:5b:53:f0:42:fd:f7:96:49:7f:f7:38:25:ae:09:
         92:fe:32:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org