Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31302e302f32342d3234203d3e203532353537.roa
File:                     3137372e38362e31302e302f32342d3234203d3e203532353537.roa (raw, json)
Hash identifier:          qJuABh1nRuN+7rEf5CTtVmx9AssVrRhF1lbcnehex0o=
Subject key identifier:   B2:2F:B4:E3:17:CF:28:13:DB:95:A3:6E:89:34:C1:07:60:1A:FD:CE
Certificate issuer:       /CN=DD62D40299F8868371F46C77B2902891A6B20ECA
Certificate serial:       44D569AE9FB14D07C51ECBDCF6D4CEF7120D8031
Authority key identifier: DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31302e302f32342d3234203d3e203532353537.roa
Signing time:             Mon 14 Nov 2022 16:54:48 +0000
ROA not before:           Mon 14 Nov 2022 16:49:48 +0000
ROA not after:            Mon 13 Nov 2023 16:54:48 +0000
asID:                     52557
IP address blocks:        177.86.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d5:69:ae:9f:b1:4d:07:c5:1e:cb:dc:f6:d4:ce:f7:12:0d:80:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD62D40299F8868371F46C77B2902891A6B20ECA
        Validity
            Not Before: Nov 14 16:49:48 2022 GMT
            Not After : Nov 13 16:54:48 2023 GMT
        Subject: CN=B22FB4E317CF2813DB95A36E8934C107601AFDCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:e6:83:89:38:1e:f7:d5:62:c4:3b:0d:49:
                    e6:cf:25:18:7e:7f:4a:8c:0c:f5:54:54:90:df:74:
                    71:31:b0:64:ff:f7:62:de:5d:b4:25:76:7f:7d:51:
                    42:f1:95:9d:82:2e:f5:90:43:49:5b:5c:63:38:c3:
                    47:0d:47:ff:1d:23:de:cc:70:b8:ac:7b:5b:39:8d:
                    4d:de:16:ad:d5:fa:7b:b5:7a:a7:dc:19:d5:b7:61:
                    c6:9c:fb:ab:cb:fc:ce:5f:29:04:5d:8f:b3:9a:c6:
                    4f:6a:78:cd:f3:c4:d2:ad:7d:0b:fc:b8:b1:6d:4c:
                    73:36:40:15:4b:3a:6b:e6:9c:41:02:8e:8a:04:28:
                    ba:60:91:2e:19:9f:41:d9:84:ea:7e:39:6b:64:07:
                    1a:d6:54:97:18:19:1c:a1:60:7f:e0:57:51:6f:67:
                    a3:e1:80:18:32:88:7c:7d:ab:d9:6a:f4:c8:e5:96:
                    48:28:78:f7:e6:72:83:d8:d7:63:07:29:74:a5:64:
                    97:9d:87:9f:da:14:a4:d8:5c:91:29:52:3a:45:73:
                    bd:7e:f3:c6:2f:ff:6e:45:4f:d7:03:9a:cd:5b:2c:
                    36:56:d5:15:b7:b1:ff:41:21:72:36:90:be:01:24:
                    d7:1e:c5:30:19:d0:33:67:5c:8b:45:17:a9:26:c8:
                    af:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2F:B4:E3:17:CF:28:13:DB:95:A3:6E:89:34:C1:07:60:1A:FD:CE
            X509v3 Authority Key Identifier:
                keyid:DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/DD62D40299F8868371F46C77B2902891A6B20ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31302e302f32342d3234203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:db:e8:4b:76:9d:24:11:64:3b:77:e8:2b:82:f9:55:e5:30:
         10:99:c2:bc:62:d1:30:cc:e0:bd:78:03:ce:f9:c2:aa:62:be:
         fa:a1:93:04:11:3b:20:d3:10:95:04:54:39:11:f0:94:07:d0:
         f2:a7:4e:06:40:a7:d6:47:03:da:eb:6a:fa:13:07:65:b6:bb:
         c5:9c:fd:a7:2f:42:10:90:68:e6:ba:65:df:13:35:6d:73:f8:
         d8:28:32:eb:ad:e4:d7:7a:38:3b:b9:3e:3b:6c:e7:82:4c:ad:
         d8:54:81:65:f7:91:1d:93:04:f0:ef:c2:a0:12:dc:fd:6a:6b:
         84:a6:1a:8d:fc:5a:75:a9:7c:89:ee:7b:96:56:2c:47:c2:43:
         78:f3:c8:ef:1e:30:d9:0e:56:9d:cb:10:f3:96:61:d2:9e:dc:
         e7:b3:43:3c:04:2c:42:e6:fe:8e:25:2f:c8:ce:55:9a:c5:81:
         fd:12:1d:3f:51:4e:09:77:9d:0e:05:47:44:bb:b0:89:6a:8f:
         b8:1a:74:28:48:38:85:39:3b:a3:32:a4:66:b0:ba:d8:23:53:
         c7:51:ce:bb:75:6e:cf:bc:6f:91:c7:bc:e1:57:fc:3c:60:2b:
         5d:01:68:de:75:b2:66:4d:00:3e:75:09:ad:07:c4:ab:50:1e:
         e0:d9:79:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org