Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e36302e302f32322d3232203d3e203532373337.roa
File:                     3137372e38352e36302e302f32322d3232203d3e203532373337.roa (raw, json)
Hash identifier:          MlSV89uvrDhtDCphyXORDEWYzciYoF1P3Cj2bD9Crpo=
Subject key identifier:   78:25:EA:8A:C3:8B:CA:46:80:A0:D3:54:29:F5:B6:59:69:8D:C8:01
Certificate issuer:       /CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
Certificate serial:       4DB4C8CD407CCB1C6573FEA803018E630A094594
Authority key identifier: 5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e36302e302f32322d3232203d3e203532373337.roa
Signing time:             Tue 27 Jun 2023 14:08:03 +0000
ROA not before:           Tue 27 Jun 2023 14:03:03 +0000
ROA not after:            Tue 25 Jun 2024 14:08:03 +0000
asID:                     52737
IP address blocks:        177.85.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b4:c8:cd:40:7c:cb:1c:65:73:fe:a8:03:01:8e:63:0a:09:45:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
        Validity
            Not Before: Jun 27 14:03:03 2023 GMT
            Not After : Jun 25 14:08:03 2024 GMT
        Subject: CN=7825EA8AC38BCA4680A0D35429F5B659698DC801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:70:9e:2d:5f:41:d9:36:cb:0c:fa:8c:be:
                    b0:47:6b:f3:6a:e0:d8:fd:1d:79:d4:d4:a5:ed:21:
                    96:d3:b4:5c:b9:e5:ac:cb:a0:32:43:87:8e:e0:ce:
                    09:7d:c3:c9:4a:65:98:92:04:78:43:36:0b:39:0e:
                    e9:85:3c:80:36:66:60:0e:65:39:0d:9b:bf:ba:fc:
                    d3:93:bb:c9:e8:b8:11:d3:eb:d4:92:ea:86:f0:29:
                    cb:f6:04:53:26:ba:81:e0:3a:3c:fb:80:cf:27:05:
                    5c:d9:9e:34:fe:d3:f7:0b:39:e6:d5:88:ae:d6:e8:
                    8c:d0:ae:a7:28:c3:ee:e6:a2:db:bb:83:49:16:c4:
                    72:37:5d:d6:65:34:4b:a3:81:0c:70:54:b6:44:bf:
                    df:1f:0c:7b:cc:8d:42:fa:5c:76:dc:90:91:41:1f:
                    5e:62:1d:33:c7:19:b7:94:1f:a7:bd:fe:2e:e4:98:
                    eb:ba:0b:a4:08:de:37:cd:91:e7:60:ac:a4:a7:61:
                    bb:27:32:a6:21:c1:63:e8:f3:b0:a8:2f:8b:81:4d:
                    0e:87:2b:f1:7b:71:e6:9c:87:da:4f:64:76:6f:45:
                    ce:36:bc:ba:f6:7f:45:d4:1e:56:69:a0:db:20:0e:
                    1f:57:d4:9f:b1:69:2b:16:d9:f9:ef:3f:f5:a3:d8:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:25:EA:8A:C3:8B:CA:46:80:A0:D3:54:29:F5:B6:59:69:8D:C8:01
            X509v3 Authority Key Identifier:
                keyid:5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e36302e302f32322d3232203d3e203532373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:25:f1:97:96:ac:a9:e1:99:d8:c3:1b:1a:9a:a8:67:ea:87:
         a7:ac:2e:65:c2:d1:fb:d7:34:f9:ad:1b:77:d3:f4:9c:b7:9c:
         01:29:ec:09:12:17:29:96:0c:14:e3:89:8d:da:3f:48:54:c8:
         fe:a3:92:d6:31:69:8e:49:9b:79:e1:35:57:cc:e9:79:4c:21:
         0c:d4:04:73:3b:4b:11:50:c3:75:aa:c6:ce:ca:f1:7d:23:6d:
         64:fb:12:cb:e8:31:63:b0:45:78:09:a8:9d:ca:e3:d7:39:31:
         81:f1:f1:57:da:5f:79:45:ee:c0:0e:4a:04:ba:7d:48:50:90:
         80:c2:fc:8f:56:8d:92:c0:e7:6d:40:39:a0:ce:7c:05:67:fb:
         4c:3e:5b:98:fe:5b:2c:93:44:91:47:2c:d1:3c:84:46:cc:02:
         80:b7:ac:97:fd:c5:19:95:dd:68:d1:87:4c:b4:d4:64:0d:7f:
         4d:db:da:f8:b5:94:a3:3d:0c:29:15:66:bb:36:e3:aa:ef:82:
         82:5a:8f:18:43:82:85:69:5d:ab:9c:da:73:43:5d:3c:08:f5:
         18:da:c1:23:73:3a:91:03:a2:33:7b:fb:0c:7f:e1:07:58:a1:
         31:a2:ba:1f:bd:7e:9f:1f:58:b6:10:ca:7b:02:4d:51:ff:ab:
         60:42:69:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org