Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/3137372e35332e3231302e302f32332d3233203d3e20323731333130.roa
File:                     3137372e35332e3231302e302f32332d3233203d3e20323731333130.roa (raw, json)
Hash identifier:          2MknolnuCElx+o3edgJaZOTQr4ZRfy+Xqev58BMqjLw=
Subject key identifier:   0A:0B:BF:C5:7E:9E:3C:60:05:55:74:3A:76:76:3F:55:23:1A:E1:39
Certificate issuer:       /CN=2B53696444942411AB4D957C2F70BA54A48B1189
Certificate serial:       04FAE8E528C035147B7AD064F826513C8764B136
Authority key identifier: 2B:53:69:64:44:94:24:11:AB:4D:95:7C:2F:70:BA:54:A4:8B:11:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B53696444942411AB4D957C2F70BA54A48B1189.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/3137372e35332e3231302e302f32332d3233203d3e20323731333130.roa
Signing time:             Tue 16 May 2023 11:53:09 +0000
ROA not before:           Tue 16 May 2023 11:48:09 +0000
ROA not after:            Tue 14 May 2024 11:53:09 +0000
asID:                     271310
IP address blocks:        177.53.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fa:e8:e5:28:c0:35:14:7b:7a:d0:64:f8:26:51:3c:87:64:b1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B53696444942411AB4D957C2F70BA54A48B1189
        Validity
            Not Before: May 16 11:48:09 2023 GMT
            Not After : May 14 11:53:09 2024 GMT
        Subject: CN=0A0BBFC57E9E3C600555743A76763F55231AE139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:fc:6c:f8:01:f9:1a:a6:8d:e9:f6:f5:3e:
                    3e:6e:a0:ff:96:b9:7d:44:1e:29:8f:48:85:9a:39:
                    2c:ee:ef:70:90:c9:64:32:65:6d:ca:91:88:42:2d:
                    20:70:ba:01:38:9f:f8:fd:14:e2:14:96:dd:83:27:
                    47:d6:4b:ee:f9:74:1d:b5:da:fc:7c:00:36:ce:2e:
                    4c:45:66:2c:9c:75:0f:2f:a2:3a:fc:f3:9b:d3:2f:
                    33:a4:f5:41:02:c0:c7:e9:fb:ca:61:37:28:d0:b0:
                    cc:f8:0c:15:9e:0e:6e:3c:d3:43:6c:8e:ed:a7:01:
                    e0:4e:86:0e:da:2b:8e:4e:1d:a2:6c:11:e8:af:a4:
                    af:60:0d:47:fa:76:68:81:c6:7e:35:70:69:cd:5f:
                    82:96:37:db:19:73:d8:c9:82:60:32:1e:e8:43:91:
                    f4:6b:54:0d:81:38:47:f2:b8:a2:4a:06:6d:60:96:
                    2d:74:9c:4a:4c:eb:b7:e3:b9:99:98:bd:4d:70:4b:
                    0f:5b:bc:32:2f:62:f4:c9:d8:a4:d7:8c:74:23:1c:
                    e3:74:e8:8f:b0:1d:e6:f5:7f:1e:86:56:16:a2:05:
                    19:de:3f:97:41:0f:e3:a5:f9:41:b1:1c:1c:a5:83:
                    57:ea:ac:0d:25:2f:b3:03:01:8a:b3:0c:fc:91:6e:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0B:BF:C5:7E:9E:3C:60:05:55:74:3A:76:76:3F:55:23:1A:E1:39
            X509v3 Authority Key Identifier:
                keyid:2B:53:69:64:44:94:24:11:AB:4D:95:7C:2F:70:BA:54:A4:8B:11:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/2B53696444942411AB4D957C2F70BA54A48B1189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B53696444942411AB4D957C2F70BA54A48B1189.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/3137372e35332e3231302e302f32332d3233203d3e20323731333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:a6:57:7f:5c:51:58:e1:ef:da:24:fe:cc:62:9b:56:eb:78:
         a9:37:96:a7:11:b0:17:1c:78:87:d9:f6:4d:9f:14:de:4f:6f:
         fd:b9:3a:f1:e7:93:99:e0:cb:f6:e5:45:36:ef:e1:5b:bd:37:
         58:1d:a0:6f:31:a6:7d:11:6b:4e:45:ad:f4:7d:40:29:af:44:
         1e:fc:9f:11:9d:cf:0d:75:e5:14:9a:fd:41:18:f6:35:f9:33:
         09:52:e6:fa:00:ae:13:c6:51:5b:4b:12:ea:9e:d6:43:b8:72:
         c8:3b:a8:d9:68:b0:a4:52:59:e8:7c:13:28:7f:9e:1c:01:44:
         d4:61:66:dc:9b:f0:71:fb:d3:7a:4a:a4:31:fc:3f:2e:91:9c:
         6c:a3:1c:f7:72:0e:4b:be:db:07:4b:b3:f2:80:cb:57:bd:bb:
         68:6a:4a:f7:9c:11:36:f3:97:93:5b:16:84:c8:68:e9:d3:c2:
         2c:f2:02:59:db:f3:b4:6f:95:4a:9d:5c:d1:f7:b1:10:2d:4e:
         b9:c9:4e:1f:9a:f7:0c:a9:b0:f4:cf:ef:8c:8a:7e:03:5e:ab:
         af:0b:f4:04:bc:89:ba:17:66:20:02:f4:56:27:3d:38:86:ab:
         11:8c:d5:84:4c:a3:54:2a:32:af:89:1b:08:76:b7:39:fd:2a:
         17:95:ce:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org