Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e382e302f32342d3234203d3e203532353537.roa
File:                     3137372e38362e382e302f32342d3234203d3e203532353537.roa (raw, json)
Hash identifier:          yHXw9voDmZP3OFKVr8CKF1ahTy15AyPdPlyHexS2prE=
Subject key identifier:   85:1A:EE:88:8D:69:F8:C9:8E:5E:CD:F9:B5:6C:96:75:41:AA:4F:A7
Certificate issuer:       /CN=DD62D40299F8868371F46C77B2902891A6B20ECA
Certificate serial:       31C58AE83B80850565080F7BDBC6D1DB153B8F3C
Authority key identifier: DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e382e302f32342d3234203d3e203532353537.roa
Signing time:             Fri 16 Dec 2022 22:36:48 +0000
ROA not before:           Fri 16 Dec 2022 22:31:48 +0000
ROA not after:            Fri 15 Dec 2023 22:36:48 +0000
asID:                     52557
IP address blocks:        177.86.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c5:8a:e8:3b:80:85:05:65:08:0f:7b:db:c6:d1:db:15:3b:8f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD62D40299F8868371F46C77B2902891A6B20ECA
        Validity
            Not Before: Dec 16 22:31:48 2022 GMT
            Not After : Dec 15 22:36:48 2023 GMT
        Subject: CN=851AEE888D69F8C98E5ECDF9B56C967541AA4FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2b:1c:0b:e3:7f:ca:e4:7f:42:8e:18:3b:99:
                    e2:3a:38:9a:c1:46:00:f4:ce:8a:82:43:ed:6a:f6:
                    ca:f7:8a:ab:3d:88:12:83:88:7f:65:be:6f:7c:4b:
                    48:aa:bb:51:40:1b:83:58:9f:ad:8b:04:84:07:2e:
                    6b:88:cd:b3:14:66:d3:f9:f1:e1:45:ca:dd:22:db:
                    95:27:cb:2e:52:67:a7:bb:ab:89:f6:e7:97:65:dd:
                    d1:69:be:02:e6:30:42:03:00:5b:b5:16:65:45:39:
                    00:d3:84:49:e1:cd:41:80:d7:a1:eb:15:7a:f4:27:
                    5d:05:18:26:d4:75:5e:80:25:66:97:f6:78:7c:97:
                    ac:0e:d2:4d:e8:28:24:67:78:59:ac:78:32:02:26:
                    e4:2e:93:8a:bf:38:eb:27:43:66:41:6e:4b:d8:de:
                    52:a0:e1:db:ba:84:66:a0:84:e5:07:d1:89:34:3f:
                    bf:cb:10:b8:f8:03:11:6a:1f:6f:09:ea:31:88:68:
                    42:86:c7:9b:87:e3:81:39:4b:84:f0:0f:66:24:57:
                    9c:0a:3f:d2:5f:a0:7c:75:b8:dc:64:49:08:55:3c:
                    58:9c:9a:2f:78:bb:cf:7b:d5:fa:d7:ca:67:b8:b9:
                    70:f4:22:2f:13:4e:fa:70:98:9d:f8:8e:bc:17:fc:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1A:EE:88:8D:69:F8:C9:8E:5E:CD:F9:B5:6C:96:75:41:AA:4F:A7
            X509v3 Authority Key Identifier:
                keyid:DD:62:D4:02:99:F8:86:83:71:F4:6C:77:B2:90:28:91:A6:B2:0E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/DD62D40299F8868371F46C77B2902891A6B20ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD62D40299F8868371F46C77B2902891A6B20ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e382e302f32342d3234203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:3c:b6:ab:02:3f:d2:6c:36:46:a2:ad:de:e7:ce:7f:74:7a:
         9b:c5:20:f9:97:c6:23:ea:38:54:2e:c1:18:d6:ae:20:be:00:
         33:ba:54:6b:f3:ac:79:b3:6e:22:6e:e3:f1:3c:75:97:b0:ab:
         b7:28:5f:fb:80:04:ad:de:b9:64:77:37:ba:81:2d:d4:d7:26:
         16:fb:69:09:bc:8f:9c:d4:5f:71:b7:1f:95:4b:60:c9:22:e9:
         30:aa:3a:61:49:ca:05:ac:52:af:3d:c6:ad:d1:48:07:b6:08:
         49:16:c9:a7:b1:7a:9e:5d:bc:07:26:f9:ba:fa:03:40:db:63:
         cd:49:ce:7d:54:07:f8:cd:a3:2d:35:b1:89:bb:1e:07:93:88:
         63:35:55:98:a3:95:74:4b:c0:da:69:3c:a9:51:42:7b:db:e6:
         86:93:d1:2e:48:a8:e0:43:d4:b9:9d:2e:fb:43:24:ba:a8:cf:
         bc:27:f2:f7:cf:d7:10:48:83:2f:bb:7c:3e:f8:f3:58:ad:41:
         99:6c:4b:4d:1f:32:89:43:65:0c:1b:3a:15:14:08:31:cd:78:
         a9:98:2e:d4:18:05:38:9e:64:ee:47:b2:d5:2b:13:2a:f1:8f:
         d9:d4:66:1b:f6:32:a4:8c:24:d4:2d:91:c6:21:c7:68:3c:7e:
         bc:ae:49:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org