Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e35392e302f32342d3234203d3e203532373337.roa
File:                     3137372e38352e35392e302f32342d3234203d3e203532373337.roa (raw, json)
Hash identifier:          r7JzxuDozBrnGQNzE9NSVGCFDmdwPfG3xS9tMbJMvR4=
Subject key identifier:   59:3A:B3:80:1A:9B:D6:3A:EE:86:04:9D:93:59:30:DA:B5:80:52:40
Certificate issuer:       /CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
Certificate serial:       2E2A95B495DDB17A9A0D49368B39D7C13A31FB73
Authority key identifier: 5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e35392e302f32342d3234203d3e203532373337.roa
Signing time:             Tue 27 Jun 2023 14:08:03 +0000
ROA not before:           Tue 27 Jun 2023 14:03:03 +0000
ROA not after:            Tue 25 Jun 2024 14:08:03 +0000
asID:                     52737
IP address blocks:        177.85.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2a:95:b4:95:dd:b1:7a:9a:0d:49:36:8b:39:d7:c1:3a:31:fb:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
        Validity
            Not Before: Jun 27 14:03:03 2023 GMT
            Not After : Jun 25 14:08:03 2024 GMT
        Subject: CN=593AB3801A9BD63AEE86049D935930DAB5805240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6f:3f:3a:a6:f6:18:54:e8:c8:19:ce:5c:97:
                    47:49:18:2c:2e:d5:1a:30:15:44:3f:68:34:42:c4:
                    93:19:a9:92:6d:10:00:02:28:b1:84:d7:db:90:dd:
                    63:ec:a3:c2:bc:65:ee:fd:49:a4:f6:d1:1b:e2:48:
                    a3:ed:83:90:4f:f3:99:e6:07:0b:61:1f:bf:a0:be:
                    c2:9c:6d:03:7f:19:25:4a:08:d0:5c:7a:df:f5:b0:
                    2f:64:dd:4f:18:b1:1e:b1:2e:2f:bb:0f:96:1c:d4:
                    00:59:21:70:51:82:7e:76:7a:b2:be:3d:03:c0:af:
                    0a:3d:14:13:e0:02:06:45:3a:99:23:8f:30:e8:ce:
                    85:13:cc:b1:a9:17:2c:ba:fe:2f:4b:04:67:00:80:
                    99:37:de:a3:8c:37:ad:a8:04:88:20:57:21:90:e3:
                    15:3b:cf:26:06:81:92:8a:a0:5f:54:da:88:a7:be:
                    27:9c:24:55:ab:52:7a:24:4a:09:33:cc:90:b1:e5:
                    b2:c8:4a:f7:53:a7:e6:d0:db:f3:b5:57:c1:cf:36:
                    52:32:5e:2e:11:18:42:b8:68:c6:e2:66:92:44:3f:
                    83:db:fd:e0:ed:7c:7a:62:00:2a:10:5e:43:24:5f:
                    42:f2:a5:f9:7f:8b:00:03:dd:28:75:26:f4:f9:69:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3A:B3:80:1A:9B:D6:3A:EE:86:04:9D:93:59:30:DA:B5:80:52:40
            X509v3 Authority Key Identifier:
                keyid:5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e35392e302f32342d3234203d3e203532373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:3d:77:40:de:3a:3e:f1:dd:ab:15:61:c7:bb:4d:fc:7d:62:
         ae:22:8c:38:95:e4:4a:82:2b:df:76:27:41:9c:72:f5:8a:4a:
         98:89:a9:93:3d:b9:29:d3:8b:0c:bb:3b:6f:bc:4b:46:80:4b:
         99:55:b8:ec:3b:1a:5f:ed:3e:4d:e5:63:eb:39:8c:77:f5:4d:
         68:9b:e3:f6:50:f4:bd:bd:f2:41:46:b9:a2:10:04:75:62:1c:
         b4:04:f3:bd:7e:cd:2f:ef:6c:73:d0:ea:06:07:db:ee:15:5d:
         49:8d:6f:28:16:71:f7:e6:b4:04:d3:9e:79:73:6a:58:1e:ba:
         96:b2:01:e1:2d:9d:af:ee:d3:e0:8e:03:95:51:a6:22:6c:46:
         7c:04:51:71:50:2e:ad:dd:72:f3:71:9d:5b:90:91:12:e8:08:
         35:15:db:01:09:42:8b:1c:0d:a9:f4:50:bd:ed:76:2e:f4:9a:
         a9:b2:f2:f2:18:55:02:96:2e:ed:15:45:8d:51:c0:77:0f:34:
         a6:39:5b:e3:52:8b:1b:b7:47:71:d4:23:17:8c:7f:30:fc:94:
         ef:bf:93:3c:a7:47:53:81:ff:2e:9b:81:0a:3d:d1:33:e1:5c:
         f1:46:b6:79:42:7d:6d:4f:47:e3:a0:3c:b9:a1:79:aa:83:19:
         15:d5:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org