Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/3137372e31312e39322e302f32322d3234203d3e203532393430.roa
File:                     3137372e31312e39322e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier:          O4LRNlxVCXVfLs92gusXcynR9tGC7zIk8QYLVNniTCc=
Subject key identifier:   39:7C:03:40:F2:5D:85:8C:D4:ED:41:2B:B8:E1:5E:FC:B1:BC:1D:18
Certificate issuer:       /CN=58DCEB2BA8436334BE768AC3D425297AFC59F56B
Certificate serial:       7614B19504BC7F013072039B59181764A9330941
Authority key identifier: 58:DC:EB:2B:A8:43:63:34:BE:76:8A:C3:D4:25:29:7A:FC:59:F5:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58DCEB2BA8436334BE768AC3D425297AFC59F56B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/3137372e31312e39322e302f32322d3234203d3e203532393430.roa
Signing time:             Mon 25 Oct 2021 18:34:22 +0000
ROA not before:           Mon 25 Oct 2021 18:29:22 +0000
ROA not after:            Mon 24 Oct 2022 18:34:22 +0000
asID:                     52940
IP address blocks:        177.11.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:14:b1:95:04:bc:7f:01:30:72:03:9b:59:18:17:64:a9:33:09:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58DCEB2BA8436334BE768AC3D425297AFC59F56B
        Validity
            Not Before: Oct 25 18:29:22 2021 GMT
            Not After : Oct 24 18:34:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e2:65:80:c7:27:94:55:ad:21:9c:0b:c5:54:
                    dc:dd:a7:e9:8b:20:1d:77:3e:1a:09:f9:06:bd:99:
                    ca:cb:dc:8e:8e:db:59:e3:1e:f1:af:cb:1a:99:46:
                    6d:e6:6b:80:52:e0:f2:ac:98:0c:0d:b6:84:55:ae:
                    c2:ff:54:89:fc:8f:20:8d:09:2d:a2:26:57:63:84:
                    fc:3b:3d:4c:fe:10:c0:43:f8:78:45:52:54:e6:f8:
                    0c:61:a4:92:de:c2:02:4a:69:9d:b4:fd:fa:4f:82:
                    5e:ce:09:47:12:c6:e9:96:f5:d5:31:11:b3:0a:33:
                    83:8d:cf:53:a0:67:8d:f8:50:dd:85:cb:60:a3:7c:
                    03:84:c6:e8:aa:f7:65:14:51:e7:69:75:ed:01:7e:
                    d9:94:fd:47:14:ac:f3:fc:76:25:6e:a8:24:19:89:
                    5b:22:a0:58:d2:46:2c:c3:7c:95:dc:b8:f6:6b:8b:
                    e9:c6:4b:31:38:0b:db:0a:81:bd:33:66:33:dc:e8:
                    1f:75:52:4f:9c:f7:d9:b8:11:5d:40:24:ba:f3:a9:
                    22:92:b4:9e:64:00:0a:b2:50:7a:b2:dd:e4:29:cf:
                    af:e2:4c:d3:ae:a5:21:26:0a:ea:8e:2c:88:4d:94:
                    25:34:59:8f:25:e7:83:52:66:25:21:a7:f5:29:24:
                    73:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7C:03:40:F2:5D:85:8C:D4:ED:41:2B:B8:E1:5E:FC:B1:BC:1D:18
            X509v3 Authority Key Identifier:
                keyid:58:DC:EB:2B:A8:43:63:34:BE:76:8A:C3:D4:25:29:7A:FC:59:F5:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/58DCEB2BA8436334BE768AC3D425297AFC59F56B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/58DCEB2BA8436334BE768AC3D425297AFC59F56B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdM4WakDVcbVEP3WsmvhLFWJrpjyHHi5v6V3fbBaGMev/0/3137372e31312e39322e302f32322d3234203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:57:30:84:0e:de:05:57:00:8b:10:4f:65:98:b2:96:a7:bd:
         f7:dc:83:66:b4:47:0d:82:c2:a3:e3:8e:b9:20:8a:f4:e0:91:
         d4:b4:17:c3:33:1c:a9:d9:98:4f:64:2d:ce:58:9a:eb:4a:f1:
         46:a3:f8:6a:13:bf:0d:07:2f:91:bb:87:b3:bb:fd:c8:04:5d:
         54:35:b1:70:11:90:e3:73:a9:bc:ba:c2:d5:fd:94:7c:41:db:
         5e:a9:08:c4:d3:15:cf:69:15:b5:08:f1:ca:9b:2f:93:7c:23:
         8f:8c:62:7a:48:51:8b:88:ea:5d:a9:2c:41:d1:35:03:40:0a:
         18:16:16:8e:c7:20:8e:3c:75:a7:56:8b:91:b5:9a:60:44:00:
         43:2b:f7:42:77:f8:f1:5d:d5:e8:4c:98:c0:0e:8b:41:bc:21:
         2a:b8:d4:f3:3e:e6:07:01:6a:1b:d2:57:9c:3c:d7:26:e6:bb:
         c2:e7:8d:fc:1f:93:9b:29:56:d5:1d:3d:5f:51:22:0a:81:ba:
         06:b1:04:31:fd:28:e3:fc:78:cd:d4:13:68:4e:e3:29:31:f4:
         05:d3:46:6c:72:95:db:b1:2c:2c:ce:cf:10:55:2b:0a:40:54:
         ae:16:7f:a8:46:75:a8:a7:95:d2:cb:50:1b:16:8f:bc:70:8b:
         9a:5b:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org