Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e35322e35362e302f32322d3232203d3e20323632393038.roa
File:                     3137372e35322e35362e302f32322d3232203d3e20323632393038.roa (raw, json)
Hash identifier:          NzEBvztnfAd9odIUnJUaOGUvoHLZaj5wu/yrkpxF2ok=
Subject key identifier:   B3:96:33:84:15:FC:79:36:19:80:75:C0:B4:FD:30:23:78:F5:F2:B0
Certificate issuer:       /CN=380AE62845C4468F9462327C41A0D22DA68054FD
Certificate serial:       5956A126DEB70C1CDFE60023F9BDB7FF38E84AE0
Authority key identifier: 38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e35322e35362e302f32322d3232203d3e20323632393038.roa
Signing time:             Mon 22 Jan 2024 19:49:31 +0000
ROA not before:           Mon 22 Jan 2024 19:44:31 +0000
ROA not after:            Mon 20 Jan 2025 19:49:31 +0000
asID:                     262908
IP address blocks:        177.52.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:56:a1:26:de:b7:0c:1c:df:e6:00:23:f9:bd:b7:ff:38:e8:4a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380AE62845C4468F9462327C41A0D22DA68054FD
        Validity
            Not Before: Jan 22 19:44:31 2024 GMT
            Not After : Jan 20 19:49:31 2025 GMT
        Subject: CN=B396338415FC7936198075C0B4FD302378F5F2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:5f:21:09:46:5f:11:04:09:b9:19:ca:ef:
                    e7:c6:e4:60:d0:b6:d5:a9:e6:0d:d6:bc:04:db:e9:
                    a7:29:7e:18:0c:bf:21:b4:a9:61:4a:94:e1:3d:94:
                    46:e3:67:58:31:c4:8d:b1:6f:74:38:5a:56:43:e5:
                    03:32:f0:45:31:07:da:d2:35:b0:03:44:6a:0c:8c:
                    5d:f9:08:ef:0f:7c:88:f4:1e:3c:80:c9:d3:0f:ae:
                    74:e7:e9:a0:ea:fa:d9:c7:d9:e5:bb:fb:2a:09:79:
                    56:1f:85:6f:a1:1e:f7:4e:d7:54:d7:04:7b:35:a7:
                    2e:5f:5b:47:89:6d:ff:17:0e:ed:0e:0d:bb:68:72:
                    d5:5c:4f:a4:8b:b6:86:ab:11:50:96:65:01:d8:24:
                    c6:f2:83:58:1a:48:7e:63:ce:3e:22:76:76:ae:c3:
                    a6:7a:02:70:6c:10:6e:40:c9:65:3a:ec:e6:cc:ca:
                    58:25:9d:25:45:fa:21:42:46:73:20:e5:cd:d4:11:
                    19:3f:63:31:07:7e:7e:8e:10:ae:9f:9a:c2:f5:5f:
                    27:13:4c:04:66:4f:ea:38:a4:64:0c:ed:63:43:de:
                    5b:0c:59:18:5c:4b:0d:3f:03:e8:7c:01:a8:b6:b9:
                    ea:4e:bd:38:94:cb:79:89:94:b9:be:59:21:e5:d4:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:96:33:84:15:FC:79:36:19:80:75:C0:B4:FD:30:23:78:F5:F2:B0
            X509v3 Authority Key Identifier:
                keyid:38:0A:E6:28:45:C4:46:8F:94:62:32:7C:41:A0:D2:2D:A6:80:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/380AE62845C4468F9462327C41A0D22DA68054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/380AE62845C4468F9462327C41A0D22DA68054FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ph7zDYZG8nrArfKRconYqiLK4qSS9vQ39fV2o6RPkQe/0/3137372e35322e35362e302f32322d3232203d3e20323632393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:c8:f2:c8:0c:7c:cc:58:69:f5:9a:4d:6a:5f:2e:a1:c1:c6:
         04:fc:9a:94:ff:5f:d4:54:39:20:b5:bf:ff:68:5c:47:69:f5:
         a6:f6:1d:08:49:6e:84:0d:ad:d3:f0:4f:71:1d:75:9b:38:20:
         0c:11:b7:4d:4c:40:03:bc:22:1d:8d:f6:da:17:c3:4d:a2:33:
         76:7b:4e:5c:54:81:3d:8e:0d:aa:2f:33:6f:30:f2:ae:6e:d4:
         16:b8:81:09:c0:84:dd:92:9b:4d:f9:9d:5b:80:1c:ad:9e:da:
         f9:ac:5f:9a:76:d9:22:1c:1e:71:51:73:f4:48:dd:e8:18:87:
         11:d5:23:28:08:9b:ba:d1:ae:31:65:52:34:8d:14:5c:ad:e3:
         27:07:60:3b:ec:fc:d9:f1:8c:1d:bd:d3:a4:02:b2:65:5a:82:
         b2:2f:d2:a0:34:8d:e4:42:68:4a:53:ce:db:e7:60:48:5f:1a:
         89:59:0a:86:d0:99:91:40:02:dd:f6:66:41:a7:f7:67:67:6e:
         c1:0d:74:fc:68:8e:0a:d3:33:f7:08:9c:7d:b8:18:5d:b5:64:
         2b:a9:66:c3:99:de:7d:b4:97:80:da:3f:13:44:a7:a4:bb:fd:
         47:8a:3e:a9:0a:80:e0:3a:a7:26:7b:de:ad:10:e0:48:e3:23:
         cb:a5:10:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org