Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3135342e37322e302f32312d3234203d3e203238333439.roa
File:                     3137372e3135342e37322e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          24k705QXAKEIWR0lmBZ2w/BB6UCDi92fu5UumyvrC54=
Subject key identifier:   76:D3:CF:ED:79:F0:E9:45:B6:A9:8A:20:6C:54:97:27:97:8D:08:51
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       072158865BB3C91D6BD13695B6C7F9953EE90E8F
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3135342e37322e302f32312d3234203d3e203238333439.roa
Signing time:             Mon 04 Mar 2024 19:27:23 +0000
ROA not before:           Mon 04 Mar 2024 19:22:23 +0000
ROA not after:            Mon 03 Mar 2025 19:27:23 +0000
asID:                     28349
IP address blocks:        177.154.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:21:58:86:5b:b3:c9:1d:6b:d1:36:95:b6:c7:f9:95:3e:e9:0e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Mar  4 19:22:23 2024 GMT
            Not After : Mar  3 19:27:23 2025 GMT
        Subject: CN=76D3CFED79F0E945B6A98A206C549727978D0851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0d:22:2a:03:16:af:b2:67:4e:6c:5e:93:d6:
                    e5:4e:e3:f7:2e:d2:f6:c5:2c:a6:65:79:ef:46:07:
                    18:a6:ad:56:e7:9d:56:b7:79:1b:00:c0:42:ed:54:
                    31:38:7f:dc:ed:26:14:11:bc:8b:32:8f:c3:df:74:
                    1c:17:56:47:4c:4f:7d:05:ad:ce:c0:a6:4a:ec:00:
                    a7:8b:15:3f:f7:0f:fa:f9:e7:46:bf:46:52:16:c1:
                    17:40:ef:6a:d3:7e:4f:e8:9f:58:3f:2b:2d:55:c1:
                    7a:90:08:81:d3:f9:46:d5:ea:e3:d9:a6:04:fa:eb:
                    1d:d4:bc:cc:1e:28:dc:61:3b:e9:6f:ed:7d:b8:29:
                    13:d3:dd:ba:79:6b:88:28:0a:6b:83:5b:b6:0d:d3:
                    43:c5:7c:23:71:6a:f0:03:ac:48:78:52:95:7b:5a:
                    4a:92:96:ee:9b:22:86:f1:61:9a:33:59:6f:ba:41:
                    40:c9:58:42:05:1b:9f:1b:91:0e:62:db:7d:70:34:
                    54:6b:2e:6c:61:5c:c7:50:82:2b:0a:3b:9a:eb:b3:
                    9d:85:8a:ce:7c:73:45:cb:f0:4d:05:fd:3b:89:05:
                    b4:d7:15:32:92:34:a7:8a:10:81:b4:5d:ee:5d:6b:
                    49:44:06:57:7c:8d:3e:bd:c8:86:41:ed:fc:4d:5a:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D3:CF:ED:79:F0:E9:45:B6:A9:8A:20:6C:54:97:27:97:8D:08:51
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3137372e3135342e37322e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:9e:ad:00:e7:4e:8d:1e:79:17:77:72:02:1f:8e:80:62:59:
         63:71:36:ab:16:9e:6f:ce:a3:32:eb:4f:d0:57:14:fc:cd:48:
         98:b7:6a:ed:50:63:1c:67:a7:20:b0:21:a5:6f:2a:96:a1:67:
         02:e5:39:e4:04:f1:e9:b8:c4:ab:04:a3:99:94:1a:3d:2a:ea:
         bf:34:c3:a5:25:cc:56:eb:e8:3d:83:57:50:2d:02:75:80:7a:
         e1:e0:14:7b:00:11:ec:ac:d3:09:d7:66:00:a6:9c:17:2b:42:
         93:52:5c:34:1a:b8:49:17:96:73:71:f9:63:99:48:15:b4:2d:
         15:6a:14:ee:96:d5:26:07:5c:e4:a7:18:61:be:f0:ee:27:bb:
         82:1a:6a:0f:b3:fd:8e:49:08:6a:e0:25:11:80:01:08:15:3a:
         15:15:fc:ce:34:eb:2c:68:b7:f9:9a:2e:2b:71:23:55:e5:88:
         b6:99:3e:29:bc:ab:97:b7:8c:a3:11:42:18:98:f4:76:2b:fb:
         26:5b:27:da:ef:27:b1:14:63:0c:b3:4d:72:02:47:57:e7:59:
         d4:ab:1a:5b:c1:b4:a9:9f:b6:e1:a7:f6:f8:5c:26:44:30:97:
         19:24:f5:5e:9a:fd:34:64:78:a5:75:4c:19:64:f4:d5:a9:3d:
         ee:56:4c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org