Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235322e302f32342d3234203d3e20323633333936.roa
File:                     3137372e3132352e3235322e302f32342d3234203d3e20323633333936.roa (raw, json)
Hash identifier:          tjsLNMDsogC0OBMkYdcmVUDCErVRPdKHIduhTxCW33I=
Subject key identifier:   E6:BB:F8:BC:F4:1D:1D:6C:BD:18:72:C0:1D:5B:6D:BC:4D:EC:51:77
Certificate issuer:       /CN=533B8335992AC24C92CD2553C5F62AC293DF880D
Certificate serial:       4D424EC08CC96980521D67FCA0C8724B8A6821F5
Authority key identifier: 53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533B8335992AC24C92CD2553C5F62AC293DF880D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235322e302f32342d3234203d3e20323633333936.roa
Signing time:             Thu 16 Nov 2023 13:58:30 +0000
ROA not before:           Thu 16 Nov 2023 13:53:30 +0000
ROA not after:            Thu 14 Nov 2024 13:58:30 +0000
asID:                     263396
IP address blocks:        177.125.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:42:4e:c0:8c:c9:69:80:52:1d:67:fc:a0:c8:72:4b:8a:68:21:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533B8335992AC24C92CD2553C5F62AC293DF880D
        Validity
            Not Before: Nov 16 13:53:30 2023 GMT
            Not After : Nov 14 13:58:30 2024 GMT
        Subject: CN=E6BBF8BCF41D1D6CBD1872C01D5B6DBC4DEC5177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:80:41:09:37:48:d5:bf:87:f6:ab:a4:22:6c:
                    ab:66:3a:0e:d0:24:18:af:69:3e:b5:fd:c2:dc:ba:
                    2c:98:b6:10:b6:85:a3:93:f4:3c:ad:0f:4a:c1:da:
                    e0:98:e0:cb:99:12:8f:4c:33:04:de:27:e8:54:e1:
                    07:e5:2a:f6:61:f4:77:5e:7b:86:77:0a:08:64:52:
                    71:eb:56:06:3f:08:13:76:6d:23:41:7e:3e:4c:99:
                    87:2a:d3:02:7a:85:fa:8a:46:0d:a2:a3:10:14:ca:
                    73:1f:10:7e:e1:1d:31:3a:e6:cb:5d:96:d1:e6:0e:
                    dc:e4:38:12:7e:d5:25:58:ad:71:d1:e6:92:c5:03:
                    0d:1f:61:44:e8:b4:62:b5:17:8d:e6:e9:da:28:62:
                    8b:4a:d8:fe:32:85:93:b4:07:51:18:87:d8:be:d4:
                    7e:71:3a:c3:d1:72:ec:3b:17:21:6d:61:2d:1e:da:
                    01:c6:4a:18:d5:83:63:6d:d7:3e:e9:e5:b0:9b:77:
                    d4:fe:bd:6c:29:ed:22:b0:c6:a6:dc:67:e1:de:0c:
                    f3:cc:5a:ec:dd:f5:f4:72:50:ce:05:e8:3b:8a:29:
                    f4:e5:2e:46:24:ee:3c:33:48:3f:c8:59:74:46:a7:
                    e7:16:0a:50:7f:b1:91:53:0c:a7:f2:95:e1:a3:0e:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BB:F8:BC:F4:1D:1D:6C:BD:18:72:C0:1D:5B:6D:BC:4D:EC:51:77
            X509v3 Authority Key Identifier:
                keyid:53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/533B8335992AC24C92CD2553C5F62AC293DF880D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533B8335992AC24C92CD2553C5F62AC293DF880D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235322e302f32342d3234203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:ab:d2:2f:85:d6:cc:3d:db:e8:7f:c6:62:fc:3d:1f:dd:d4:
         10:e9:3b:a7:2e:00:69:3f:13:47:7e:5a:5e:d7:5b:fb:7e:8d:
         c9:08:88:46:55:bc:f4:77:c0:a0:54:6a:d4:d3:d2:a5:c5:2d:
         56:e4:1a:ee:00:cd:59:f3:f7:eb:a7:d8:31:05:25:d0:4e:e0:
         88:f1:b8:2f:90:6b:7b:39:38:03:3d:95:cf:c7:3e:71:33:9f:
         8b:64:f5:bf:09:e7:53:c0:bb:95:36:5f:51:60:b5:97:48:d6:
         96:d4:e3:ea:79:7f:18:b7:57:ea:8a:96:fc:c1:e3:79:bd:e9:
         b9:85:21:e0:f0:8e:f4:a8:88:a2:45:38:59:95:d2:e2:0d:5f:
         f5:28:3f:21:15:72:d8:36:25:59:6a:56:43:a7:04:ad:06:73:
         be:ca:ef:85:55:74:f8:42:95:46:26:fe:a9:37:26:38:7c:19:
         05:2c:6f:74:36:ae:f0:fa:ea:3c:e7:aa:4e:39:b0:8d:86:1f:
         d1:ae:9e:6a:da:c5:4f:b7:af:75:a7:65:1b:e3:33:22:d2:11:
         82:ff:b8:cf:e2:ac:db:58:81:17:70:4d:2c:ee:8d:ba:6f:8d:
         a1:89:89:de:c6:43:ec:20:d4:d7:c3:c2:a3:34:b6:a8:c6:ef:
         e7:54:0a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org