Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35382e302f32332d3233203d3e20323632353838.roa
File:                     3137372e37352e35382e302f32332d3233203d3e20323632353838.roa (raw, json)
Hash identifier:          avylEOqwkMIGBJ4c05ZWAG6N880vfWpyGh3l2aA09So=
Subject key identifier:   60:5D:01:3D:45:3A:23:00:D8:94:09:26:64:04:6A:D2:7E:80:07:52
Certificate issuer:       /CN=5CC02E8E2938AFADEA467289D4C793583546A57D
Certificate serial:       7AF7A5B9A737684AA62EE0A84DAB93B8654FF8CA
Authority key identifier: 5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35382e302f32332d3233203d3e20323632353838.roa
Signing time:             Sat 09 Apr 2022 14:20:57 +0000
ROA not before:           Sat 09 Apr 2022 14:15:57 +0000
ROA not after:            Sat 08 Apr 2023 14:20:57 +0000
asID:                     262588
IP address blocks:        177.75.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f7:a5:b9:a7:37:68:4a:a6:2e:e0:a8:4d:ab:93:b8:65:4f:f8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CC02E8E2938AFADEA467289D4C793583546A57D
        Validity
            Not Before: Apr  9 14:15:57 2022 GMT
            Not After : Apr  8 14:20:57 2023 GMT
        Subject: CN=605D013D453A2300D894092664046AD27E800752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:e9:a3:fd:a8:90:6e:5f:03:3a:9a:43:9c:
                    b3:df:3b:4d:62:c5:6b:1d:c5:ac:76:43:2a:c6:34:
                    1f:1c:da:eb:fb:8a:b6:87:16:cc:ff:79:47:53:04:
                    9f:4b:eb:94:3b:36:85:1a:a8:c6:31:5f:3b:4e:49:
                    68:6a:ab:7a:37:eb:3f:a4:e8:ba:1c:84:fb:57:27:
                    48:44:7e:ab:8b:4e:89:6c:58:31:c7:c0:56:71:ae:
                    a7:b8:b6:cb:ce:0c:1a:f8:90:05:1c:8d:88:2b:29:
                    fb:53:5b:52:a3:06:bf:b4:65:9a:d6:c0:a0:16:b2:
                    2e:34:ab:29:e6:08:d6:a0:46:55:5c:9d:a3:01:fe:
                    02:59:58:77:5d:c4:0a:32:71:48:4f:4c:ad:00:fa:
                    cb:e6:a0:dc:ea:f9:e3:75:fc:34:a6:c1:79:53:a3:
                    98:6e:58:7f:1c:0d:fc:da:28:bc:d0:66:03:22:19:
                    99:da:62:ca:ad:b0:f5:7e:f3:5f:a1:37:fd:b1:ba:
                    02:68:3d:ac:94:82:7a:e7:c1:61:5b:67:08:c9:25:
                    c4:7c:df:f9:e4:79:bd:6d:3e:83:43:0f:e8:5b:94:
                    1d:cf:d0:68:51:e7:ff:82:45:03:e1:d3:88:3f:71:
                    f2:2d:53:2a:fd:0b:2d:18:2b:30:89:98:da:2f:bb:
                    15:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5D:01:3D:45:3A:23:00:D8:94:09:26:64:04:6A:D2:7E:80:07:52
            X509v3 Authority Key Identifier:
                keyid:5C:C0:2E:8E:29:38:AF:AD:EA:46:72:89:D4:C7:93:58:35:46:A5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/5CC02E8E2938AFADEA467289D4C793583546A57D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CC02E8E2938AFADEA467289D4C793583546A57D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/0/3137372e37352e35382e302f32332d3233203d3e20323632353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:bd:54:26:ff:fb:f8:d6:6a:d5:b3:71:4d:38:5d:87:d8:ff:
         a7:fe:bd:af:1d:8d:54:45:53:7f:a2:ea:a1:b8:8f:bb:65:ab:
         b5:e0:46:68:dc:73:65:fc:1b:a4:9e:f0:40:f5:35:9b:7e:2c:
         9e:19:34:fe:1d:ad:a3:6f:2c:86:7f:6e:84:c2:62:75:b5:d8:
         49:42:c4:d0:9d:f4:27:44:6f:5d:bb:60:e5:ca:14:83:15:fe:
         36:28:c5:09:e9:44:5e:5a:17:a2:b4:11:bd:9b:da:df:89:b9:
         a5:1e:4a:4f:12:26:50:03:e6:02:18:45:a4:68:5c:c7:67:0e:
         30:3d:80:f2:b1:de:25:90:e0:c3:bd:74:fb:93:af:21:5d:a1:
         97:f8:e0:cb:fc:54:a8:03:ea:f4:0e:b0:5b:2a:49:1d:80:6c:
         ab:52:43:3c:8d:bc:52:a5:f3:c3:5a:b6:54:16:f8:b7:c4:38:
         c0:7c:9d:97:a0:f4:01:72:d9:8b:85:53:95:97:47:b0:69:4f:
         c2:c5:03:be:a6:fd:15:a8:71:30:09:d3:93:fc:1f:cf:0c:7c:
         d9:84:9a:64:e1:da:3e:48:91:8d:38:e5:27:5a:4a:76:df:2e:
         68:bc:c3:f7:1e:32:5a:3a:72:23:14:55:57:03:57:5f:0b:7b:
         fb:11:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org