Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/3137372e35342e34382e302f32302d3234203d3e203238323932.roa
File:                     3137372e35342e34382e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          /tMzcmI/45B9EkwNntWZ//Npvtp98yPoahEfSd4CLps=
Subject key identifier:   AB:DF:E7:E0:69:71:53:B0:BE:24:42:4C:A8:C7:6C:B1:0B:DE:30:E8
Certificate issuer:       /CN=18351F1F584DF1964127BF7A96A3BBD25F1990EC
Certificate serial:       43EC39AA62553F6135CB858ADC16979EB6A61FED
Authority key identifier: 18:35:1F:1F:58:4D:F1:96:41:27:BF:7A:96:A3:BB:D2:5F:19:90:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18351F1F584DF1964127BF7A96A3BBD25F1990EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/3137372e35342e34382e302f32302d3234203d3e203238323932.roa
Signing time:             Wed 25 May 2022 19:00:00 +0000
ROA not before:           Wed 25 May 2022 18:55:00 +0000
ROA not after:            Thu 25 May 2023 19:00:00 +0000
asID:                     28292
IP address blocks:        177.54.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ec:39:aa:62:55:3f:61:35:cb:85:8a:dc:16:97:9e:b6:a6:1f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18351F1F584DF1964127BF7A96A3BBD25F1990EC
        Validity
            Not Before: May 25 18:55:00 2022 GMT
            Not After : May 25 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:77:80:6c:60:da:5d:f8:2c:85:51:c6:f8:11:
                    e2:a8:49:3f:08:f8:f9:62:21:52:08:be:9e:db:d6:
                    e0:92:af:bf:c6:ee:68:36:ba:28:ce:27:13:78:99:
                    83:e5:f5:15:92:1f:8e:64:f3:39:8a:23:36:3b:21:
                    45:8e:07:b1:a1:37:c9:ac:3e:0b:71:a3:57:19:f2:
                    f9:08:2a:11:90:07:0b:15:93:f0:76:b0:a5:a9:62:
                    9d:bc:b7:26:47:4c:e0:de:34:e1:e4:15:33:fc:2a:
                    5d:bc:62:82:a9:71:36:38:9a:96:43:e5:92:fb:b7:
                    28:a6:d0:8f:5b:4e:71:b7:6f:f7:c5:62:02:9a:31:
                    7e:26:51:19:9c:66:25:e8:f0:cf:e9:c1:39:75:4d:
                    fc:19:bc:db:15:5b:22:de:64:4a:f4:65:04:02:92:
                    48:2c:7b:bd:bf:1a:f5:a3:58:56:3a:ab:5b:3c:fb:
                    5f:89:aa:82:c3:a0:58:3b:5e:ca:90:af:55:d4:8c:
                    e6:69:8a:ab:af:b5:3b:cc:e4:59:15:08:1c:aa:19:
                    23:53:fe:5e:fb:51:a5:f0:1f:48:ee:03:1b:fa:43:
                    ad:91:d1:c3:08:ac:57:75:8d:fd:4d:38:3b:61:3a:
                    c7:31:21:ce:78:b0:21:6b:47:6b:40:21:54:95:83:
                    8e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DF:E7:E0:69:71:53:B0:BE:24:42:4C:A8:C7:6C:B1:0B:DE:30:E8
            X509v3 Authority Key Identifier:
                keyid:18:35:1F:1F:58:4D:F1:96:41:27:BF:7A:96:A3:BB:D2:5F:19:90:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/18351F1F584DF1964127BF7A96A3BBD25F1990EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18351F1F584DF1964127BF7A96A3BBD25F1990EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/0/3137372e35342e34382e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:b3:e1:ac:e7:d0:fc:45:fc:3d:f7:98:bb:e9:ef:88:68:79:
         fc:eb:63:e9:b2:30:15:77:8c:90:7d:28:7a:d3:34:d8:4a:81:
         6c:88:1d:c1:5b:bb:05:5b:02:3a:f3:88:b1:dd:35:b3:16:c6:
         a9:4c:d0:d5:30:4a:88:6d:d5:45:f9:dc:a3:dc:29:6f:73:55:
         40:51:39:5c:0b:97:ad:db:b2:89:08:ec:ad:4c:4d:95:05:28:
         cc:05:ae:86:a0:0a:b2:c6:9e:b7:c0:90:3d:6a:6a:d8:b8:48:
         f7:12:28:3b:62:51:af:b2:2e:6e:c4:19:bf:ec:e3:49:81:b7:
         9d:04:62:6d:e3:a6:b6:e6:6a:9f:5a:01:6f:7d:d1:ed:a2:b9:
         cb:81:d5:4f:69:a7:c7:b7:1c:8f:14:d6:76:cf:43:48:c3:a3:
         94:7c:91:55:c6:3a:bd:06:dc:75:28:9d:11:79:c2:59:30:38:
         b8:87:2d:60:29:e0:fc:03:d5:5f:c0:a8:46:2c:7a:21:ab:7a:
         cb:f7:ab:ed:c8:c5:53:44:a7:2f:b8:e1:70:c1:cc:d0:be:a7:
         6e:b9:34:b0:9c:21:c7:7f:b2:d2:db:67:15:23:9c:f3:84:67:
         c9:c2:c4:53:54:b9:84:57:19:42:17:62:7f:6c:23:59:77:a7:
         08:56:7a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org