Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa
File:                     3138372e38352e3232302e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          8/SOylk8IuYXPTdLJbcLW+yzGOgf+Bmz5wZvlJo7gRo=
Subject key identifier:   77:CF:D7:6D:47:13:4F:A8:A0:83:01:4D:C7:A3:26:BF:6E:76:3A:BF
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       4C5D564128BD5D38ECAEA05651542B7C8917990D
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa
Signing time:             Sat 20 Jan 2024 22:14:34 +0000
ROA not before:           Sat 20 Jan 2024 22:09:34 +0000
ROA not after:            Sat 18 Jan 2025 22:14:34 +0000
asID:                     28349
IP address blocks:        187.85.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5d:56:41:28:bd:5d:38:ec:ae:a0:56:51:54:2b:7c:89:17:99:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 22:09:34 2024 GMT
            Not After : Jan 18 22:14:34 2025 GMT
        Subject: CN=77CFD76D47134FA8A083014DC7A326BF6E763ABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:af:a2:10:3f:05:48:27:4d:0a:04:10:2e:
                    f4:01:1f:d5:88:23:ff:23:e8:a1:d4:45:90:8f:b9:
                    19:db:f5:ee:17:82:3c:e6:78:51:ec:ac:50:24:d9:
                    0c:e5:1d:a5:8d:77:34:ff:00:8e:0f:22:ba:7b:06:
                    eb:bf:58:56:c0:f5:60:2d:ae:95:f2:d3:23:b0:47:
                    31:26:42:af:ab:89:4d:ee:ff:1b:ba:54:8b:98:20:
                    cb:9d:05:0d:f2:fd:04:6f:4c:94:d7:25:00:31:b7:
                    7b:4b:71:99:5b:93:1c:6e:5b:14:3d:ec:77:c2:7b:
                    07:3e:ac:3e:a4:69:97:9d:59:39:fe:74:30:93:f2:
                    e5:bb:6d:48:a6:2d:07:72:55:78:ee:42:27:d4:8a:
                    59:06:35:2b:10:8b:11:c9:fe:66:63:3c:5e:ad:ef:
                    f0:8b:e2:ee:bc:56:1b:4b:04:73:75:66:9d:dc:b0:
                    70:67:7a:35:51:4d:e6:07:56:44:a5:db:8a:59:33:
                    73:ca:cd:67:bd:eb:41:b1:34:b5:f0:ed:0e:52:99:
                    ec:2a:49:7b:20:3f:aa:52:f7:a3:3b:a0:c7:8e:32:
                    6a:c3:e4:7d:c0:35:d6:7f:a4:60:b8:e4:d2:fb:32:
                    b8:b2:91:a6:81:33:93:eb:f4:a1:97:72:d2:5c:ca:
                    b8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CF:D7:6D:47:13:4F:A8:A0:83:01:4D:C7:A3:26:BF:6E:76:3A:BF
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3232302e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:a9:a1:5b:60:3c:d8:32:d3:c0:fb:52:77:e2:0b:4f:27:96:
         a0:ff:a4:57:99:fd:f4:1e:0a:a7:de:89:a0:b1:18:ae:ee:17:
         42:29:e5:67:32:9a:ab:79:84:11:c1:37:b3:37:4b:6b:1c:e1:
         1c:76:e9:83:41:a1:8a:89:8d:7e:40:b3:72:a0:89:4a:4b:76:
         c1:55:fd:f1:14:61:ea:1e:b9:83:b1:bc:7b:48:b8:6e:9a:32:
         61:e2:24:59:5c:a9:73:7b:06:03:54:c5:59:a2:56:9b:29:db:
         cf:db:cc:cf:3f:13:3b:7d:d9:60:81:fb:50:39:7c:58:ee:d5:
         48:dc:dc:fe:59:0e:93:7f:bc:32:f5:14:1a:07:43:ca:a5:f7:
         ac:c6:96:c6:dd:83:9d:4b:4a:57:01:92:12:4b:c7:50:20:15:
         00:66:40:30:8c:07:58:b4:01:96:b8:8b:df:25:ef:da:76:73:
         5f:fe:3b:c5:8f:71:91:2a:05:e9:bb:1c:0a:c3:42:9a:15:16:
         30:d3:ee:53:4d:7e:51:f3:44:bd:ee:15:75:7c:b4:58:b7:15:
         c5:98:07:d0:42:16:4a:73:12:34:a4:4a:32:6b:ea:2d:02:df:
         a4:a5:00:20:9b:0d:53:93:cc:00:16:62:a5:48:ae:01:8d:41:
         bb:50:b0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org