Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/3137372e3135322e3137362e302f32312d3234203d3e203532353437.roa
File:                     3137372e3135322e3137362e302f32312d3234203d3e203532353437.roa (raw, json)
Hash identifier:          6/aYIjwYck/t9zIAezGFpchUCM32xQi+Wnb4/1e1jDY=
Subject key identifier:   5B:A9:0B:D6:EC:15:FE:50:2E:66:16:18:D7:59:7F:38:21:2F:C3:7F
Certificate issuer:       /CN=20EB5865E20D53A7E08BD066F5A704ECA29EEAC8
Certificate serial:       2FDF9C195D6183C241A46EC0E0962823C817E879
Authority key identifier: 20:EB:58:65:E2:0D:53:A7:E0:8B:D0:66:F5:A7:04:EC:A2:9E:EA:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20EB5865E20D53A7E08BD066F5A704ECA29EEAC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/3137372e3135322e3137362e302f32312d3234203d3e203532353437.roa
Signing time:             Tue 10 Oct 2023 19:23:28 +0000
ROA not before:           Tue 10 Oct 2023 19:18:28 +0000
ROA not after:            Tue 08 Oct 2024 19:23:28 +0000
asID:                     52547
IP address blocks:        177.152.176.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:df:9c:19:5d:61:83:c2:41:a4:6e:c0:e0:96:28:23:c8:17:e8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EB5865E20D53A7E08BD066F5A704ECA29EEAC8
        Validity
            Not Before: Oct 10 19:18:28 2023 GMT
            Not After : Oct  8 19:23:28 2024 GMT
        Subject: CN=5BA90BD6EC15FE502E661618D7597F38212FC37F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:68:f4:be:a2:c5:f1:6d:35:eb:2f:29:b5:
                    96:5a:68:cf:5d:64:3f:70:22:ec:90:fd:d7:92:ec:
                    4d:f1:56:f0:66:f9:ac:d1:21:66:c9:98:4b:a8:c3:
                    46:96:09:bd:a1:2c:a0:8c:10:aa:ba:3f:eb:aa:7c:
                    2a:96:d7:5f:ac:d7:90:90:89:9b:d0:c2:64:1e:3e:
                    07:00:f7:c6:6c:58:47:0c:07:54:08:4a:17:58:f4:
                    5e:36:e8:27:5f:12:68:d4:af:0a:53:99:93:96:24:
                    20:24:74:a3:fa:16:60:d5:6e:41:e3:5a:af:db:5a:
                    b0:1a:08:8d:62:24:5c:dd:7e:70:d2:ae:c6:bb:8f:
                    2f:43:89:af:59:8b:3f:bf:20:7d:b3:5e:21:3b:d4:
                    e8:85:17:85:b0:33:b6:9f:e3:33:75:15:06:a9:99:
                    7e:35:9c:6a:f7:42:ed:29:48:bb:07:1c:ed:4b:01:
                    40:b4:f8:91:fd:ac:ad:ea:38:59:ba:4d:2f:93:26:
                    19:8e:ed:d1:f0:a5:22:ad:53:dc:3a:94:a4:25:3b:
                    32:dd:1a:88:6e:1a:b2:96:aa:81:83:52:88:cb:3f:
                    68:8e:e4:f8:4a:37:d0:fd:59:5b:d0:8f:a1:6d:f1:
                    0e:08:ec:35:d8:f1:92:57:80:25:7a:ab:2a:c6:9f:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A9:0B:D6:EC:15:FE:50:2E:66:16:18:D7:59:7F:38:21:2F:C3:7F
            X509v3 Authority Key Identifier:
                keyid:20:EB:58:65:E2:0D:53:A7:E0:8B:D0:66:F5:A7:04:EC:A2:9E:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/20EB5865E20D53A7E08BD066F5A704ECA29EEAC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20EB5865E20D53A7E08BD066F5A704ECA29EEAC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhaukSqkapzky7aab58ZkZYtr3zTfddkFjUBuYXvZTrv/0/3137372e3135322e3137362e302f32312d3234203d3e203532353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:9b:99:b5:28:03:e6:cd:e6:c2:04:d8:a9:17:89:3c:ff:23:
         a4:66:95:ce:27:8a:73:4d:25:41:4f:24:c6:29:cf:d1:57:dc:
         13:c5:5d:28:82:d3:41:02:c3:15:f7:88:05:7d:e2:08:53:31:
         58:7e:ab:37:d6:c4:13:0c:29:c6:63:06:f6:c3:cf:b7:4c:81:
         0b:44:8a:e8:aa:c6:35:0e:1b:3c:25:55:48:58:3c:a8:dc:6e:
         66:47:1f:b0:13:84:50:be:f4:f5:ed:11:73:3f:b5:b7:1d:16:
         7c:89:9b:0f:5b:7f:f5:af:33:1c:98:64:3b:cd:50:9b:5a:0c:
         bf:25:ac:b0:d5:41:fb:1d:e6:ac:56:1d:3e:02:83:c1:7e:b8:
         a0:ed:60:ec:dc:cf:0a:bb:4d:92:85:c9:47:54:08:7b:60:5a:
         db:55:ef:e0:d6:50:de:85:f9:13:2c:21:6d:25:13:dc:63:0d:
         f1:f8:61:dc:4b:c6:7a:82:e5:0d:c2:cf:75:8e:97:26:4c:41:
         d9:4f:28:43:5b:a1:24:ee:f0:ad:39:e3:86:54:b0:04:d4:9e:
         5e:b2:4a:53:99:9d:eb:fd:2e:b7:79:28:dc:43:e1:5b:8c:86:
         d4:e0:5a:63:86:46:cf:44:21:cd:c1:5f:55:f8:91:7f:37:b3:
         c7:f3:16:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org