Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e35362e302f32342d3234203d3e203532373337.roa
File:                     3137372e38352e35362e302f32342d3234203d3e203532373337.roa (raw, json)
Hash identifier:          ZyHEYzBMbngl5octuzxUXR8fx4GBK1UgBOv+rX6BP4Q=
Subject key identifier:   91:80:CB:C0:F1:3E:4A:D1:D7:8C:29:FA:80:84:ED:4D:DB:5B:A5:DE
Certificate issuer:       /CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
Certificate serial:       0A9B796C42F0DEEC38A151859D2740D8ADBCCCF0
Authority key identifier: 5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e35362e302f32342d3234203d3e203532373337.roa
Signing time:             Tue 27 Jun 2023 14:08:02 +0000
ROA not before:           Tue 27 Jun 2023 14:03:02 +0000
ROA not after:            Tue 25 Jun 2024 14:08:02 +0000
asID:                     52737
IP address blocks:        177.85.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9b:79:6c:42:f0:de:ec:38:a1:51:85:9d:27:40:d8:ad:bc:cc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
        Validity
            Not Before: Jun 27 14:03:02 2023 GMT
            Not After : Jun 25 14:08:02 2024 GMT
        Subject: CN=9180CBC0F13E4AD1D78C29FA8084ED4DDB5BA5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:8d:b4:4f:85:24:2d:3e:41:33:8d:fd:69:
                    9d:8b:c3:ed:a0:10:88:b5:84:eb:1d:60:45:07:25:
                    56:ca:2b:ce:e1:5c:ae:75:80:b7:5c:09:31:fa:84:
                    bc:e1:08:70:b5:cf:18:67:32:c6:e2:d1:46:40:7b:
                    ef:02:30:1a:26:ea:5a:97:13:cd:f6:ee:cb:d6:e4:
                    7d:cd:2c:b9:d5:bc:03:e8:15:c6:ac:6d:6d:f5:e0:
                    53:0f:5d:50:d6:50:07:0a:47:f3:d8:1e:99:14:ff:
                    21:23:af:bf:f9:0b:c6:5e:b4:ce:89:60:68:bf:a9:
                    7e:7c:ab:32:1b:14:db:ed:0f:c4:f2:5a:75:fc:b7:
                    f1:17:9f:28:db:a0:9c:55:d8:0d:e4:4a:1a:63:bf:
                    55:82:71:91:97:69:a1:5d:35:df:11:5c:d2:37:f7:
                    4a:0f:73:f4:6f:08:67:6a:d5:47:14:cd:f1:5d:27:
                    ab:3e:12:a5:bb:50:bb:27:82:e7:b5:31:77:f2:ee:
                    44:c2:79:69:86:bd:96:33:81:d3:8c:a3:92:8f:4e:
                    e3:65:26:70:55:dd:f7:d4:ee:c9:b4:77:88:ce:f5:
                    43:9c:69:b1:ee:b3:0c:31:63:95:49:00:48:4b:64:
                    cc:2c:1d:46:f7:cf:d1:df:8c:23:a6:87:59:43:5b:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:80:CB:C0:F1:3E:4A:D1:D7:8C:29:FA:80:84:ED:4D:DB:5B:A5:DE
            X509v3 Authority Key Identifier:
                keyid:5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e35362e302f32342d3234203d3e203532373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:ee:16:b6:88:2d:aa:81:e9:66:33:50:a1:51:89:84:59:ec:
         e9:d7:72:c3:ec:6e:b1:8b:96:96:fd:71:15:77:05:5c:08:e4:
         0f:c0:c0:1b:a9:b2:4e:5f:91:5b:46:e3:c2:59:a8:ff:d4:49:
         9a:7c:fd:86:8e:c1:cb:c4:c9:95:99:93:2d:7a:4c:3f:94:c6:
         2d:f3:d7:87:80:a5:db:42:c6:aa:b0:a0:9c:bf:92:22:ad:14:
         27:28:e1:ff:1d:5b:47:7c:9f:92:b1:db:6e:27:a9:82:8e:de:
         ca:74:d4:3f:7a:a5:cb:0d:a8:ec:a3:2f:f9:97:aa:b0:0b:7d:
         2a:96:b4:65:37:b8:35:87:a5:d8:a1:63:ff:aa:c9:fa:4f:a8:
         66:00:38:29:45:92:21:9c:15:9b:75:44:f4:9f:de:10:d0:f6:
         6f:8f:e2:74:96:4e:f5:79:70:67:98:d2:61:1e:69:26:6b:e2:
         3c:a7:f6:29:d8:b2:dd:7a:b5:16:b0:1a:96:7a:31:82:e9:17:
         20:24:72:4f:7e:97:5a:a8:5f:49:43:84:5c:a1:17:1f:fa:5f:
         dc:2f:27:a0:12:39:a7:05:02:c1:75:e3:6f:f3:6f:ec:04:bb:
         14:d8:26:cb:6d:3f:6b:44:15:7b:b5:98:22:bc:db:99:32:3e:
         c0:1d:0f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org