Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35362e302f32322d3332203d3e203532353637.roa
File:                     3137372e38362e35362e302f32322d3332203d3e203532353637.roa (raw, json)
Hash identifier:          so0K06FhwrLFRY6JHRyBG+V0GMHo3qs3FEAVmZ1337A=
Subject key identifier:   0A:1B:1E:A0:6E:B1:82:34:9A:6E:40:18:82:C4:8C:D2:D8:CC:11:75
Certificate issuer:       /CN=67EB2BACF43158300326528278D92ACE7CF7EB92
Certificate serial:       5C158D19081EA65CE92C8C299B7609A68D0610DC
Authority key identifier: 67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35362e302f32322d3332203d3e203532353637.roa
Signing time:             Wed 20 Mar 2024 11:48:22 +0000
ROA not before:           Wed 20 Mar 2024 11:43:22 +0000
ROA not after:            Wed 19 Mar 2025 11:48:22 +0000
asID:                     52567
IP address blocks:        177.86.56.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:15:8d:19:08:1e:a6:5c:e9:2c:8c:29:9b:76:09:a6:8d:06:10:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EB2BACF43158300326528278D92ACE7CF7EB92
        Validity
            Not Before: Mar 20 11:43:22 2024 GMT
            Not After : Mar 19 11:48:22 2025 GMT
        Subject: CN=0A1B1EA06EB182349A6E401882C48CD2D8CC1175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:43:44:cc:a4:66:99:24:5e:d4:bb:9c:d0:68:
                    c2:fe:5d:fa:99:16:7a:9d:a2:66:b9:50:9f:0c:2e:
                    0b:16:5f:ca:a0:e7:1c:b0:f3:03:c9:f0:a3:6a:58:
                    b9:ba:13:58:52:7d:04:20:fb:3d:3c:ce:9e:9d:49:
                    c5:bd:04:ef:d7:ac:1a:dc:3d:c9:67:8e:b8:56:1f:
                    06:38:11:a8:da:3c:99:be:6f:ab:a9:45:db:3f:64:
                    42:2a:db:52:55:07:89:a0:6c:66:28:a7:18:5d:6c:
                    3d:41:b7:33:69:e3:84:d7:73:e6:3b:ad:79:2f:7a:
                    6f:70:fe:7f:f9:4f:47:e8:e2:d5:80:0c:7d:3f:cf:
                    84:80:25:16:71:c0:fd:62:8f:8a:81:ac:47:f5:00:
                    69:fb:60:55:76:a2:11:1d:b9:c6:90:b1:a3:42:26:
                    dc:cb:fd:69:5f:db:85:fc:56:11:ec:e3:8f:7e:fc:
                    b2:2f:c7:f5:e7:da:f0:42:73:68:0b:24:4f:8a:4f:
                    ed:b2:93:e8:26:be:82:58:07:6b:11:44:33:81:68:
                    3f:d0:53:5e:03:fb:fa:b1:de:a2:c0:f0:28:14:e0:
                    b5:bc:b3:22:5f:50:3d:51:01:de:09:1a:fd:de:ef:
                    71:c5:c6:28:ee:b3:d2:c9:90:6d:f9:9b:ab:a3:bd:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1B:1E:A0:6E:B1:82:34:9A:6E:40:18:82:C4:8C:D2:D8:CC:11:75
            X509v3 Authority Key Identifier:
                keyid:67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/67EB2BACF43158300326528278D92ACE7CF7EB92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35362e302f32322d3332203d3e203532353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:da:1a:18:31:8e:eb:40:11:c5:3e:b9:39:03:9f:21:58:58:
         e0:1f:f0:29:a0:83:65:81:5c:57:87:7d:98:d2:5d:1c:7d:1c:
         f4:83:23:55:66:0e:bf:00:14:a4:4c:9c:dd:bb:f9:6b:24:3a:
         61:6d:c4:39:d3:0a:fa:36:2b:9a:2d:ef:2d:28:d7:ab:db:23:
         d2:f2:3e:56:9b:03:5e:67:89:ec:62:ed:27:8f:f1:34:2f:41:
         11:b2:b7:a0:1c:a0:0e:d4:9a:67:38:62:50:16:c3:2a:37:cd:
         3e:20:13:3f:6c:41:91:4f:52:54:7a:1f:f9:48:1d:e5:27:fc:
         68:3f:32:44:f1:6d:2f:c4:19:0b:97:c3:63:c7:e2:15:5b:fa:
         02:3a:47:a0:cc:2b:0a:7f:d7:ec:08:7c:ea:cd:a2:8d:dc:d6:
         39:c9:e0:19:f7:c1:f3:02:04:d5:85:49:23:ab:e9:d3:84:1d:
         65:c3:28:cf:f5:ea:cf:10:0c:9f:d2:a5:60:45:86:ef:4b:29:
         21:cb:b6:dd:fb:c0:c2:b3:f2:a3:0d:ed:30:c1:a6:88:f5:80:
         21:f4:f0:c7:91:06:c9:8b:8a:53:b2:4e:3f:3d:4a:ef:5a:08:
         f7:36:52:fc:18:31:f1:a7:80:21:c4:02:2c:58:40:e3:23:24:
         93:6a:ed:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org