Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/3137372e35342e34382e302f32302d3234203d3e203238323932.roa
File:                     3137372e35342e34382e302f32302d3234203d3e203238323932.roa (raw, json)
Hash identifier:          YMo7el890IBBiurX0HrETX+I5tli8UWgKqTFs/Nql5U=
Subject key identifier:   E4:D4:42:E3:48:E6:2C:AA:AA:1B:5B:D3:7D:49:4D:67:6A:04:14:14
Certificate issuer:       /CN=8893F0FF2FC76BC29138372DA9E7EBAB17DAF056
Certificate serial:       5410B33B0D870482F0A43469B6B131235C8463E1
Authority key identifier: 88:93:F0:FF:2F:C7:6B:C2:91:38:37:2D:A9:E7:EB:AB:17:DA:F0:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/3137372e35342e34382e302f32302d3234203d3e203238323932.roa
Signing time:             Wed 17 Aug 2022 19:35:00 +0000
ROA not before:           Wed 17 Aug 2022 19:30:00 +0000
ROA not after:            Thu 17 Aug 2023 19:35:00 +0000
asID:                     28292
IP address blocks:        177.54.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:10:b3:3b:0d:87:04:82:f0:a4:34:69:b6:b1:31:23:5c:84:63:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8893F0FF2FC76BC29138372DA9E7EBAB17DAF056
        Validity
            Not Before: Aug 17 19:30:00 2022 GMT
            Not After : Aug 17 19:35:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:e6:30:54:e7:97:3f:ed:b3:a4:c8:d2:cf:
                    6b:6a:a1:d2:17:8f:6f:fa:e7:b7:e6:da:f6:23:94:
                    ea:10:e3:87:75:b6:8d:b0:ca:89:f1:03:66:e1:66:
                    27:31:31:23:46:f2:f1:6a:9d:14:4a:ca:05:63:89:
                    ed:bb:33:9f:8b:51:f2:6f:07:ff:83:ca:ae:46:3a:
                    d3:62:99:0e:5e:8d:78:67:49:90:59:dc:25:2c:9a:
                    f8:94:00:20:5b:46:8e:ce:fe:ca:57:72:90:98:8d:
                    01:47:07:8f:3e:09:83:2f:0b:d6:62:f5:ad:ff:4f:
                    f1:53:70:39:41:a0:63:d0:53:ca:63:e9:59:b0:97:
                    bf:41:5d:59:b0:ac:c7:e1:a5:48:37:e1:e3:92:59:
                    ee:cb:45:b2:94:08:51:00:8f:37:bb:f8:38:2d:0a:
                    31:7b:44:16:27:ad:97:53:d9:09:7e:f0:fb:45:37:
                    7a:5b:b8:81:18:24:57:91:4f:3b:15:51:3a:0f:93:
                    d2:c6:dc:d8:e1:33:b0:7b:e4:7f:23:79:78:f7:73:
                    09:08:7a:bf:bd:2c:07:a3:6c:2b:24:d7:36:a7:99:
                    96:16:65:be:0d:6d:28:db:44:57:fd:9f:6d:3b:69:
                    bb:d8:cf:73:84:07:b1:74:5e:15:10:fd:29:3f:74:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D4:42:E3:48:E6:2C:AA:AA:1B:5B:D3:7D:49:4D:67:6A:04:14:14
            X509v3 Authority Key Identifier:
                keyid:88:93:F0:FF:2F:C7:6B:C2:91:38:37:2D:A9:E7:EB:AB:17:DA:F0:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8893F0FF2FC76BC29138372DA9E7EBAB17DAF056.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/2/3137372e35342e34382e302f32302d3234203d3e203238323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:47:ec:e7:42:7d:8d:b7:80:51:70:94:23:3a:57:0b:31:41:
         53:43:48:e7:e5:f4:07:a5:2f:cd:24:a5:79:9a:b2:58:e4:0a:
         81:c4:de:8b:16:32:20:10:61:f2:e3:f6:94:ba:cb:bc:2c:89:
         e0:b5:f5:15:e9:a2:ac:fb:2f:4e:b8:6e:8e:e9:a6:2b:9e:5c:
         d8:03:65:13:a2:d9:d3:6d:6d:d7:8c:31:3f:38:45:e4:dc:22:
         0d:49:c5:6b:20:43:5f:4d:79:fc:72:37:69:79:62:3e:dc:92:
         84:6c:b5:8f:c8:67:56:0b:b2:a6:81:5d:6c:66:36:a5:af:b2:
         58:43:94:53:6d:48:4e:42:3a:ae:d0:6f:24:c4:d3:41:07:34:
         76:c8:67:00:72:99:9c:db:df:f0:82:db:29:c3:07:e8:da:c9:
         11:33:5a:17:2b:13:fb:9c:56:cd:bd:15:75:43:38:f6:fd:fa:
         0b:c4:96:99:50:bc:44:ad:c3:14:6f:0b:4e:c7:9d:7b:c2:b1:
         91:dc:a9:77:54:33:8f:fa:20:69:17:e5:82:cb:0b:39:9c:da:
         b9:41:99:b0:a2:1b:18:f7:a7:62:a5:0f:94:df:aa:f3:63:18:
         67:39:f8:1c:a5:9d:fa:7b:3a:63:b1:dc:3f:9c:df:8d:d6:7d:
         01:5a:35:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org