Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3137372e38342e34302e302f32322d3232203d3e203532373038.roa
File:                     3137372e38342e34302e302f32322d3232203d3e203532373038.roa (raw, json)
Hash identifier:          IkVCM5LMKRqQApzg/8993CGDn/tkLyA0CFyEsO8IeTc=
Subject key identifier:   9A:AD:84:76:03:23:87:5B:8D:DC:12:90:25:7E:4A:E5:EC:C5:E3:49
Certificate issuer:       /CN=5B5B5CB9EEF23947370DA03E71D6B051CB5C7641
Certificate serial:       2CCA3F0B71E5F5F582D9C60F02E2E3897EF03EBB
Authority key identifier: 5B:5B:5C:B9:EE:F2:39:47:37:0D:A0:3E:71:D6:B0:51:CB:5C:76:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3137372e38342e34302e302f32322d3232203d3e203532373038.roa
Signing time:             Tue 04 Jul 2023 20:16:48 +0000
ROA not before:           Tue 04 Jul 2023 20:11:48 +0000
ROA not after:            Tue 02 Jul 2024 20:16:48 +0000
asID:                     52708
IP address blocks:        177.84.40.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ca:3f:0b:71:e5:f5:f5:82:d9:c6:0f:02:e2:e3:89:7e:f0:3e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5B5CB9EEF23947370DA03E71D6B051CB5C7641
        Validity
            Not Before: Jul  4 20:11:48 2023 GMT
            Not After : Jul  2 20:16:48 2024 GMT
        Subject: CN=9AAD84760323875B8DDC1290257E4AE5ECC5E349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:f5:f5:1b:cb:94:22:1e:7a:86:cf:be:3c:
                    27:32:6b:b5:87:41:ad:1c:c1:ed:57:36:b8:8f:e4:
                    b6:73:4d:d2:0e:56:81:b9:57:cf:f2:7a:b0:5d:5f:
                    d2:4d:d0:ad:c5:ab:c9:b0:e8:df:c7:9c:a7:49:2c:
                    e2:4d:f5:f8:ec:f4:bf:e9:39:57:53:94:e5:02:1e:
                    d3:ab:94:81:08:31:2e:5b:99:2a:97:01:63:a8:67:
                    11:16:48:e3:5c:0a:93:34:c3:81:0e:66:52:69:1e:
                    c2:50:f0:2e:ad:49:e6:80:4f:be:e2:ba:c5:e1:8f:
                    c9:b8:94:95:24:e1:1c:ac:c3:08:31:e0:62:8c:9d:
                    72:43:37:89:4e:95:9a:81:18:51:20:cb:ea:18:dd:
                    65:1c:87:b7:2f:19:41:15:3f:8d:ea:f1:a8:01:de:
                    d1:ca:40:fb:3a:7b:a2:84:ae:88:8b:c7:e1:c4:44:
                    e3:16:14:30:5c:68:94:99:f1:31:5f:5b:7d:c4:b5:
                    65:b7:a8:43:c2:45:13:48:36:c0:6b:c0:e5:8f:cb:
                    93:5d:08:4e:47:06:71:79:f0:a3:94:48:a5:60:44:
                    dc:7e:22:9e:7f:26:f4:e3:c1:22:e2:76:c1:24:1b:
                    72:b5:91:28:62:be:1a:2f:4b:54:62:17:6a:96:f8:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AD:84:76:03:23:87:5B:8D:DC:12:90:25:7E:4A:E5:EC:C5:E3:49
            X509v3 Authority Key Identifier:
                keyid:5B:5B:5C:B9:EE:F2:39:47:37:0D:A0:3E:71:D6:B0:51:CB:5C:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3137372e38342e34302e302f32322d3232203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:98:a7:ba:d3:25:10:3c:8b:57:fe:7f:63:54:dc:8f:ef:b3:
         3c:38:87:86:b9:a5:d0:bd:00:72:1f:9a:8b:65:7e:0f:e2:f6:
         66:3d:af:1c:28:46:99:f0:54:19:d4:dc:76:22:67:e6:59:a3:
         f9:95:02:eb:c2:4b:9e:71:9f:9c:46:6f:de:47:e1:2b:e2:ad:
         97:e3:2d:54:51:c1:3a:c5:52:b4:c4:af:53:f4:ef:10:d0:a4:
         54:09:c0:0b:26:0a:4e:96:b3:b8:cb:96:ee:a3:1d:1a:4f:95:
         bc:bb:f9:b3:27:bf:b1:7d:6d:e6:d6:1e:f1:23:08:8a:62:fc:
         0f:81:c1:04:1b:4e:f5:5a:e5:d2:5c:3e:c1:77:f2:29:81:8a:
         51:9b:a6:21:cc:fd:f5:15:a1:b6:8b:ee:e0:c5:f6:1a:68:39:
         a1:48:91:cc:b8:26:b5:f3:e8:6e:46:20:08:a3:18:9e:20:d2:
         f1:d1:c6:60:d5:fc:b0:6b:c4:87:1d:4f:89:9d:80:64:42:eb:
         64:7c:de:37:8d:d9:27:52:37:77:93:c2:1d:98:6f:c0:c7:b0:
         3e:10:0b:e5:5c:14:56:30:dd:be:69:2c:8a:c7:72:14:39:03:
         72:fc:a8:2f:18:bd:15:ca:28:86:3d:45:2d:06:63:bd:cc:1c:
         b0:9b:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org