Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e36332e302f32342d3234203d3e203532373337.roa
File:                     3137372e38352e36332e302f32342d3234203d3e203532373337.roa (raw, json)
Hash identifier:          1n3NscU8QaY8E9HoHlt/p65ukQaGdnO8fMAfUxYUEjw=
Subject key identifier:   C0:6D:35:70:5D:C3:1E:E2:DB:C2:F5:C1:3B:4A:B3:8E:76:28:A5:3B
Certificate issuer:       /CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
Certificate serial:       3694A3C320A4E60B1CA1C37D0F27799D987FDC9A
Authority key identifier: 5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e36332e302f32342d3234203d3e203532373337.roa
Signing time:             Tue 27 Jun 2023 14:08:02 +0000
ROA not before:           Tue 27 Jun 2023 14:03:02 +0000
ROA not after:            Tue 25 Jun 2024 14:08:02 +0000
asID:                     52737
IP address blocks:        177.85.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:94:a3:c3:20:a4:e6:0b:1c:a1:c3:7d:0f:27:79:9d:98:7f:dc:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A818535C81DE2F3D1470551E35BAA5F089D9720
        Validity
            Not Before: Jun 27 14:03:02 2023 GMT
            Not After : Jun 25 14:08:02 2024 GMT
        Subject: CN=C06D35705DC31EE2DBC2F5C13B4AB38E7628A53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:83:1f:23:08:b0:f7:8d:9b:3c:ad:3a:42:
                    c2:f5:16:83:f7:25:25:e3:37:1a:72:21:06:cd:e6:
                    20:f5:c1:0c:3e:17:97:1e:4e:08:90:2e:25:57:e2:
                    de:34:7b:95:10:1a:83:98:f3:bb:6b:1f:f0:fb:05:
                    3a:9a:5f:98:9a:e9:b1:56:e5:39:ff:3b:d3:59:b3:
                    2a:ce:14:83:bb:7b:49:13:2e:2f:6c:80:4b:ae:ff:
                    18:d6:a1:29:12:5e:17:31:f3:94:e3:c5:fa:7e:a0:
                    2b:cb:f0:a7:bb:72:23:4f:bf:c8:f9:32:f9:fb:2b:
                    9b:7c:c8:b9:3d:0c:af:3a:61:9d:1c:d1:75:d1:6b:
                    b3:61:62:ca:16:df:88:04:b4:46:86:ea:88:47:eb:
                    9f:13:96:9b:61:b4:2b:f4:5f:24:94:5b:03:2f:95:
                    b7:50:f0:0b:e0:c1:2e:22:e8:64:f8:b2:72:a1:6c:
                    a7:2c:00:45:14:11:54:0d:96:50:71:79:1f:1c:e6:
                    c2:c9:78:1e:1f:7e:a5:6e:ac:02:ef:d3:79:26:09:
                    f4:91:fc:a0:64:f3:c1:9c:0d:e6:46:be:89:79:eb:
                    ed:88:d3:02:53:3a:60:ba:84:83:1b:3c:10:99:f9:
                    d5:87:a5:7d:c2:ac:81:e7:40:3e:f3:6f:1f:77:53:
                    50:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6D:35:70:5D:C3:1E:E2:DB:C2:F5:C1:3B:4A:B3:8E:76:28:A5:3B
            X509v3 Authority Key Identifier:
                keyid:5A:81:85:35:C8:1D:E2:F3:D1:47:05:51:E3:5B:AA:5F:08:9D:97:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A818535C81DE2F3D1470551E35BAA5F089D9720.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/0/3137372e38352e36332e302f32342d3234203d3e203532373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:cd:08:37:2b:bd:29:e8:66:7f:8e:ee:d3:5a:09:73:9b:17:
         9f:45:12:38:0b:45:b5:01:b3:c9:36:a0:51:ba:62:aa:bd:e7:
         9c:68:de:3c:68:51:14:75:26:0a:e4:4b:4c:38:33:31:53:d2:
         f3:05:1b:79:36:d1:23:4f:48:ce:76:ad:a5:1e:f6:f6:b6:9c:
         16:f2:8c:8c:5a:a5:c5:58:dd:5f:7b:ef:6d:f7:1e:7b:8c:86:
         af:a5:3a:5b:bf:71:a6:ef:9c:70:48:8b:b0:b6:42:a1:1e:52:
         43:fe:c8:0e:5c:6b:c7:90:2a:54:54:33:58:4c:4a:ce:1d:be:
         1e:8a:43:b8:22:e9:3e:ba:78:c4:ed:e1:cc:32:5d:0b:e9:1e:
         67:53:eb:98:c9:12:8b:7f:8d:e3:2e:fa:f2:ed:33:38:06:37:
         f7:1d:ef:2c:d9:71:a2:47:2c:22:3f:d5:23:df:de:f5:0d:6a:
         d9:ef:3f:bc:69:34:8a:cb:cb:69:da:5e:91:0b:68:0b:06:04:
         32:01:ad:7d:a9:45:a9:85:ce:49:59:a4:a6:a7:f9:e0:99:e3:
         8c:3c:af:2f:08:b6:12:54:c2:ec:cf:d7:f0:39:31:e2:e5:2f:
         c7:33:c1:d1:ac:8f:09:ea:8e:39:e0:50:44:31:1d:a9:cb:26:
         24:b9:59:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org