Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31332e302f32342d3234203d3e203532353537.roa
File:                     3137372e38362e31332e302f32342d3234203d3e203532353537.roa (raw, json)
Hash identifier:          SmvO+AI6yCFqKan8mVKZrGQFUcMnOmqAhSeEjGZKwTk=
Subject key identifier:   52:64:1E:B4:53:4E:76:F8:DF:51:52:D9:FD:62:8A:86:5D:03:DD:1E
Certificate issuer:       /CN=DD62D40299F8868371F46C77B2902891A6B20ECA
Certificate serial:       435A7AB563B843174257B44480DB0C130A0741F3
Authority key identifier: DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31332e302f32342d3234203d3e203532353537.roa
Signing time:             Fri 16 Dec 2022 22:37:02 +0000
ROA not before:           Fri 16 Dec 2022 22:32:02 +0000
ROA not after:            Fri 15 Dec 2023 22:37:02 +0000
asID:                     52557
IP address blocks:        177.86.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5a:7a:b5:63:b8:43:17:42:57:b4:44:80:db:0c:13:0a:07:41:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD62D40299F8868371F46C77B2902891A6B20ECA
        Validity
            Not Before: Dec 16 22:32:02 2022 GMT
            Not After : Dec 15 22:37:02 2023 GMT
        Subject: CN=52641EB4534E76F8DF5152D9FD628A865D03DD1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:d1:3d:0f:9b:c2:37:63:3a:5d:c2:95:87:
                    80:4e:5c:b8:f6:ae:bc:60:61:dd:6c:0c:b3:3e:b8:
                    93:be:ab:fd:d4:a9:9e:0a:2d:5c:db:33:f2:56:e6:
                    14:ba:9e:76:a8:84:3e:52:23:c1:41:4f:f2:ab:44:
                    20:d3:bb:7e:94:0b:cd:62:9d:11:83:d0:62:28:fc:
                    33:b7:67:3b:9b:7c:38:7d:f1:b1:48:2e:9c:b3:66:
                    6a:af:53:ec:6b:37:13:cd:be:81:5b:f3:86:f1:ac:
                    45:af:08:34:4c:97:ca:a6:03:e8:36:cc:2c:bb:20:
                    77:1f:93:8b:cf:ef:67:7d:55:d3:cf:b9:eb:15:c3:
                    93:37:74:d6:4d:89:b4:f2:fc:54:1f:eb:a5:12:1f:
                    b6:60:58:04:34:0a:fa:68:b2:e8:bf:20:ea:dc:a5:
                    21:1b:28:56:1c:61:c8:34:2e:60:0f:7e:18:0f:0c:
                    c7:ca:d2:dd:b9:c5:48:12:b5:20:d4:a0:89:85:70:
                    74:ce:94:fe:e2:f1:d9:b8:ef:45:62:7f:8b:04:b0:
                    af:65:9f:0d:4a:19:bc:e0:4f:ff:18:a5:f9:fc:9b:
                    67:c6:3f:e8:aa:36:2d:bd:0b:e6:84:09:25:db:57:
                    a3:f2:d0:53:11:21:68:ef:b4:73:0c:05:15:e0:19:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:64:1E:B4:53:4E:76:F8:DF:51:52:D9:FD:62:8A:86:5D:03:DD:1E
            X509v3 Authority Key Identifier:
                keyid:DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/DD62D40299F8868371F46C77B2902891A6B20ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e31332e302f32342d3234203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:04:e5:af:aa:23:37:7c:64:38:81:7f:c2:24:25:05:4e:
         b1:f3:c5:e9:60:d9:d0:ad:22:7c:8d:d6:b9:35:f7:0c:3a:bb:
         25:a2:1a:d0:4b:2b:42:6e:cc:be:a7:7d:bf:43:a2:c4:40:81:
         69:5d:21:3e:b8:13:c3:c9:c1:c5:bd:ff:d6:fe:50:e2:06:24:
         98:3e:25:ae:2c:ab:51:f7:8e:c7:78:2e:49:e2:0d:38:74:7b:
         5d:b6:9c:e7:1e:72:df:33:e7:d9:b3:e9:72:71:db:12:53:8c:
         78:a6:c9:bb:bb:b4:18:3c:20:2d:ed:a4:60:63:e7:cc:9d:9d:
         ce:16:b5:2c:85:13:a4:75:f6:63:d7:3f:a5:89:f5:6a:2a:ae:
         51:7f:8b:05:73:31:a8:12:3d:19:e5:38:7d:b9:43:49:2a:c0:
         fa:c0:e8:66:55:64:70:74:23:bd:a8:17:42:0e:2d:76:79:7a:
         0f:3c:cb:af:3e:f8:79:22:d1:3f:46:08:e7:18:c1:a8:11:af:
         ce:44:8a:c4:e4:50:94:46:99:7b:02:2e:78:e5:c3:9d:98:97:
         c9:c8:3c:5b:b7:d2:72:2e:2b:93:aa:ba:fa:e7:35:73:a7:af:
         db:63:c9:0c:fb:32:a2:5d:41:62:21:d3:12:ec:8e:91:3a:84:
         0f:71:20:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org