Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e36312e302f32342d3234203d3e203532373337.roa
File:                     3137372e38352e36312e302f32342d3234203d3e203532373337.roa (raw, json)
Hash identifier:          LQJVhKuUYDmOQXouM5cUloBYSy6nstSyCPqtIu7ZT68=
Subject key identifier:   A5:2E:7F:4B:8D:96:6A:DB:BD:42:56:F0:54:60:78:88:64:D1:4C:9D
Certificate issuer:       /CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
Certificate serial:       32F10E380F92CFEC700AF5E2358488A9DA111DF6
Authority key identifier: 5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e36312e302f32342d3234203d3e203532373337.roa
Signing time:             Tue 27 Jun 2023 14:08:03 +0000
ROA not before:           Tue 27 Jun 2023 14:03:03 +0000
ROA not after:            Tue 25 Jun 2024 14:08:03 +0000
asID:                     52737
IP address blocks:        177.85.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f1:0e:38:0f:92:cf:ec:70:0a:f5:e2:35:84:88:a9:da:11:1d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
        Validity
            Not Before: Jun 27 14:03:03 2023 GMT
            Not After : Jun 25 14:08:03 2024 GMT
        Subject: CN=A52E7F4B8D966ADBBD4256F05460788864D14C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:d3:9f:3f:3b:0c:dd:4b:0e:fc:93:7d:56:
                    e1:f8:96:ee:d5:5c:51:a5:0f:03:b2:50:7a:63:10:
                    2d:8f:44:b1:03:e2:ce:07:1e:df:c5:49:ad:84:76:
                    cf:4c:64:81:0e:f4:6b:9c:ea:c1:60:4a:ee:97:7f:
                    58:1a:c8:b8:01:8c:6c:0d:6c:2a:0a:b0:a1:ca:0c:
                    da:e7:7f:85:6c:a7:f7:dc:92:0a:2d:78:34:e8:eb:
                    11:5b:a6:9b:da:0d:60:4a:2c:91:64:9d:ba:cb:c3:
                    c2:57:0e:b3:03:a1:18:00:18:7e:1b:51:1c:5e:8f:
                    b4:2c:dd:1f:2f:23:7a:cb:3f:1d:77:c0:5f:cb:49:
                    22:93:02:11:30:cf:fe:bb:52:28:11:e4:65:cd:63:
                    81:a9:b0:1d:1a:3c:77:28:ae:f0:4b:06:11:69:4d:
                    00:2c:86:d6:c8:ce:1f:ec:28:11:af:80:08:c4:44:
                    6a:51:0a:e8:e4:f4:53:40:84:f1:c0:2a:1c:24:20:
                    72:df:39:6a:89:18:ca:96:f5:a7:78:bc:a8:0c:81:
                    46:6d:e0:d8:40:bc:a1:bc:ad:06:64:21:bb:c3:0d:
                    68:28:f2:b5:9e:b0:25:66:02:9e:bf:89:75:bb:23:
                    87:45:67:49:d7:94:c2:27:a9:4f:34:61:a9:b0:10:
                    4a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2E:7F:4B:8D:96:6A:DB:BD:42:56:F0:54:60:78:88:64:D1:4C:9D
            X509v3 Authority Key Identifier:
                keyid:5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e36312e302f32342d3234203d3e203532373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:96:35:ba:67:23:5d:01:b2:0b:63:1f:92:ba:dc:61:dc:23:
         cd:7c:de:d5:cd:62:3c:d1:7e:d6:4a:0e:dd:f1:c5:09:25:3d:
         21:7c:73:ee:41:f5:fe:f6:19:90:f8:81:2e:2d:b9:72:3c:07:
         3c:7a:92:0a:3a:2c:e9:d9:af:ad:b3:8d:15:66:03:a8:0c:28:
         91:35:0a:00:b9:68:a8:bd:04:e3:e3:ab:da:c7:5f:0f:1a:4b:
         8e:99:40:28:21:3a:93:91:32:8d:76:c4:e3:16:7b:95:61:45:
         49:b8:e8:4e:52:5a:db:43:c1:f9:45:fd:d6:85:05:72:5f:fe:
         32:34:0b:f1:e3:2d:84:71:44:ea:d2:04:af:c9:ab:7b:a4:d0:
         34:79:ae:59:5a:96:9c:34:21:93:f7:12:5d:27:27:13:dc:dc:
         23:67:29:67:0f:a6:4f:eb:20:14:8d:1a:69:57:8a:fd:1e:cd:
         c7:9f:c3:c6:18:ea:c9:1a:85:16:c7:95:a9:7d:ae:c0:c9:2b:
         28:7a:91:b2:37:f3:2c:96:f9:ae:7b:2e:b8:a9:8e:9b:6b:f9:
         13:6f:78:9e:18:b1:49:c5:cd:13:af:2d:2a:8e:81:af:1f:67:
         f0:0e:84:2c:e8:f3:d0:dd:bd:fc:3c:7c:76:27:64:5b:7d:ae:
         72:01:6a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org