Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31312e302f32342d3234203d3e203532353537.roa
File:                     3137372e38362e31312e302f32342d3234203d3e203532353537.roa (raw, json)
Hash identifier:          yPN5U4Q+RTd2FzZW8YMOY5UKnjZucl9N8pY4RL6t+ec=
Subject key identifier:   F6:AA:20:C8:80:93:8F:85:FF:7D:50:EC:90:36:C7:09:AF:19:98:50
Certificate issuer:       /CN=DD62D40299F8868371F46C77B2902891A6B20ECA
Certificate serial:       48535A252A08C2399589183874C1B32CAC290753
Authority key identifier: DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31312e302f32342d3234203d3e203532353537.roa
Signing time:             Fri 16 Dec 2022 22:36:52 +0000
ROA not before:           Fri 16 Dec 2022 22:31:52 +0000
ROA not after:            Fri 15 Dec 2023 22:36:52 +0000
asID:                     52557
IP address blocks:        177.86.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:53:5a:25:2a:08:c2:39:95:89:18:38:74:c1:b3:2c:ac:29:07:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD62D40299F8868371F46C77B2902891A6B20ECA
        Validity
            Not Before: Dec 16 22:31:52 2022 GMT
            Not After : Dec 15 22:36:52 2023 GMT
        Subject: CN=F6AA20C880938F85FF7D50EC9036C709AF199850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d2:a3:3e:7e:80:0d:c7:32:70:4a:4c:34:20:
                    5e:97:b6:1b:a4:97:8d:22:19:a0:b1:3d:b0:90:df:
                    b2:98:43:39:72:f9:49:9d:b3:08:ba:ab:b3:19:4f:
                    48:16:bb:83:58:82:d0:b8:9f:fd:77:ad:e0:13:bc:
                    69:08:cb:0e:72:e6:02:8a:29:cb:10:2e:62:38:d7:
                    7e:89:d2:69:26:07:02:5d:91:ab:a5:3b:fb:ed:9c:
                    33:59:64:8a:d0:5a:44:b9:86:f3:31:20:7c:5d:b7:
                    4d:a0:17:cc:2c:0d:60:bd:ce:bd:f5:61:1c:71:3a:
                    6d:57:8f:19:ff:43:1b:34:d9:cb:53:11:bf:f1:c0:
                    a9:25:14:c9:4a:77:88:01:5d:78:ce:92:bf:79:25:
                    57:50:16:77:72:1d:ef:9f:a7:49:f7:70:40:6f:89:
                    21:c8:d6:35:d1:85:5b:32:fe:5a:52:06:29:4e:6a:
                    79:9a:e3:69:05:8e:b8:2f:96:19:02:11:0b:2f:82:
                    00:1e:c8:b3:e2:96:91:24:7d:c1:83:b1:38:ca:2f:
                    ec:e0:ed:e5:ac:bf:84:b9:4c:50:87:03:e8:59:9f:
                    f3:82:84:ea:5e:43:83:f2:53:ce:af:28:9b:e2:37:
                    f0:23:18:19:82:c5:83:9b:65:ff:6e:d0:e2:3d:10:
                    5b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AA:20:C8:80:93:8F:85:FF:7D:50:EC:90:36:C7:09:AF:19:98:50
            X509v3 Authority Key Identifier:
                keyid:DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/DD62D40299F8868371F46C77B2902891A6B20ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31312e302f32342d3234203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:a3:bd:0f:cc:d7:1b:09:31:27:9d:a3:1c:f0:68:75:c6:fe:
         5c:a1:29:40:46:4a:3c:b3:2c:7d:a9:a2:2a:81:14:89:ad:b6:
         9f:49:7f:0e:02:ac:20:16:2d:a8:2a:71:b8:60:ed:d5:10:10:
         6a:49:16:30:e3:f3:96:26:16:1b:a7:71:6d:76:1f:e5:45:fa:
         1f:b3:93:ab:d7:5a:dc:1f:09:19:ae:76:4a:71:3e:6e:85:73:
         d2:2b:e7:e0:50:a8:b7:25:81:b3:8e:73:07:1c:7b:06:47:46:
         78:99:a3:8d:10:09:01:6a:9b:ed:dc:af:61:c4:12:bd:bf:54:
         2c:e0:e1:7b:70:c6:b6:7f:de:aa:fe:cc:5e:e7:b6:ff:09:cb:
         a6:25:db:1b:f5:ed:12:fb:4f:21:9f:e7:4e:15:12:a3:2c:b6:
         79:74:b6:37:1e:fb:11:b9:82:36:d2:89:bb:38:33:51:16:3c:
         0d:e2:b7:7a:96:bd:9a:cb:68:76:21:99:88:3c:9f:ca:da:cf:
         fb:ba:34:eb:ea:75:2b:81:d3:f0:33:4b:55:80:b8:fb:e9:69:
         c1:94:cd:09:c3:df:5c:e9:3e:83:99:68:cc:6f:06:59:90:7d:
         a6:08:04:e4:6b:ac:3a:2d:f0:0c:ef:48:b5:d5:02:cf:fb:72:
         a4:1f:83:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org