Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35392e302f32342d3234203d3e203532353637.roa
File:                     3137372e38362e35392e302f32342d3234203d3e203532353637.roa (raw, json)
Hash identifier:          TWF1zLfVt+ec8hy86BNU/12wDV9dU+qIQowRXXKQTOU=
Subject key identifier:   BE:62:D1:23:A2:6E:BC:C8:24:57:AC:3B:60:EE:9E:FB:DD:C9:D6:E7
Certificate issuer:       /CN=67EB2BACF43158300326528278D92ACE7CF7EB92
Certificate serial:       3291EFB0D907FBC6DFDC48300574ACD17F4B1EED
Authority key identifier: 67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35392e302f32342d3234203d3e203532353637.roa
Signing time:             Mon 04 Mar 2024 17:12:03 +0000
ROA not before:           Mon 04 Mar 2024 17:07:03 +0000
ROA not after:            Mon 03 Mar 2025 17:12:03 +0000
asID:                     52567
IP address blocks:        177.86.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:91:ef:b0:d9:07:fb:c6:df:dc:48:30:05:74:ac:d1:7f:4b:1e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EB2BACF43158300326528278D92ACE7CF7EB92
        Validity
            Not Before: Mar  4 17:07:03 2024 GMT
            Not After : Mar  3 17:12:03 2025 GMT
        Subject: CN=BE62D123A26EBCC82457AC3B60EE9EFBDDC9D6E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:73:c0:04:15:1d:37:1d:c7:ec:f8:de:00:
                    df:6c:e1:0b:44:10:9d:3c:39:2b:80:61:d6:6f:25:
                    d5:2c:c9:7e:2e:90:dd:6b:d9:23:ed:cf:5f:d6:95:
                    e1:36:62:86:b7:de:46:fa:74:c1:57:59:24:58:8b:
                    65:b0:c3:53:bd:0b:d1:3a:d2:b1:86:49:0d:2c:b5:
                    fa:0d:c5:2d:0a:87:3d:e6:8c:3e:76:a9:26:19:37:
                    95:da:15:36:c0:64:50:b0:c6:2d:1a:d6:96:a0:ff:
                    c1:00:c3:11:6e:fb:64:2b:5b:b4:4c:89:56:4b:3a:
                    85:74:12:05:5f:a2:44:65:7b:25:ce:b0:99:59:38:
                    1e:b1:c3:9c:4a:eb:fa:f2:5a:21:a7:77:3a:7e:f6:
                    84:4c:df:12:19:58:85:94:05:e4:b7:0b:ba:aa:08:
                    e0:ea:4d:9b:1c:13:83:bc:5b:14:f1:0c:86:ce:9e:
                    19:b8:fa:e1:63:96:f6:46:d2:23:6b:90:23:d1:14:
                    55:2c:40:91:90:e2:a2:aa:d5:5c:42:ce:3b:b5:5c:
                    08:f6:44:36:4e:5a:71:36:43:0c:18:dc:35:c1:2e:
                    d6:c7:fd:45:c9:ae:d8:43:73:9f:04:f7:b0:ec:9f:
                    66:12:d5:a2:18:f3:8f:90:7c:c5:3d:37:10:61:e2:
                    9b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:62:D1:23:A2:6E:BC:C8:24:57:AC:3B:60:EE:9E:FB:DD:C9:D6:E7
            X509v3 Authority Key Identifier:
                keyid:67:EB:2B:AC:F4:31:58:30:03:26:52:82:78:D9:2A:CE:7C:F7:EB:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/67EB2BACF43158300326528278D92ACE7CF7EB92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67EB2BACF43158300326528278D92ACE7CF7EB92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/0/3137372e38362e35392e302f32342d3234203d3e203532353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:96:5d:1c:11:fe:5d:f6:2e:cb:22:60:da:68:08:6a:d1:d2:
         a6:a8:51:65:0f:77:db:67:26:2b:f6:cf:e7:4e:9c:a6:a8:01:
         1b:ef:5f:19:62:2d:85:f9:88:f4:1b:44:8b:dd:14:60:71:e1:
         2f:46:ad:f1:bb:ec:bb:14:b8:9f:1c:12:9f:19:e4:57:1d:8a:
         d0:8f:77:1f:74:00:39:16:b8:3a:5d:8d:a7:16:d7:78:e9:38:
         10:7d:cd:f1:09:2f:51:d7:33:21:db:70:bb:8e:bd:61:95:5a:
         32:67:a3:75:13:02:00:d0:3c:00:04:77:d2:30:f5:f3:8e:f2:
         7d:1e:16:e7:65:57:fe:e8:bc:cf:d3:bb:4d:1d:1a:5d:f8:01:
         04:32:97:48:4f:d4:6f:52:f3:f9:f0:07:43:50:4a:3a:be:db:
         a6:21:5e:57:12:62:8a:cc:ff:4c:a1:12:36:3e:7b:e5:49:a1:
         ff:73:f7:00:d5:6c:42:64:ec:f5:9f:ea:7f:18:89:81:1e:bd:
         1b:6d:d3:6d:6c:01:bf:cf:c4:16:5a:ac:53:86:d7:1a:64:92:
         dd:d4:82:14:b0:da:08:bb:bc:cf:fb:1b:78:77:5d:ba:ae:98:
         f7:a8:22:f6:f4:de:a2:62:5b:b8:36:6b:d3:ca:a7:c0:74:70:
         37:f5:1a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org