Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/3137372e38372e3130382e302f32342d3234203d3e203532353934.roa
File:                     3137372e38372e3130382e302f32342d3234203d3e203532353934.roa (raw, json)
Hash identifier:          sB3RvtllayikSyxeCr3nfmG0CYp3XDJ8gv8+m2o9pA4=
Subject key identifier:   FF:10:AD:BB:1A:4F:EB:24:D2:5E:98:C2:07:0A:67:84:64:CD:93:7F
Certificate issuer:       /CN=A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877
Certificate serial:       7F5FC0DBE1ED097B1721E519154ECDF43D07F813
Authority key identifier: A5:9A:BE:7B:06:BA:78:CB:C1:B5:62:CF:C8:A8:90:C3:9B:BA:C8:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/3137372e38372e3130382e302f32342d3234203d3e203532353934.roa
Signing time:             Fri 26 May 2023 14:00:30 +0000
ROA not before:           Fri 26 May 2023 13:55:30 +0000
ROA not after:            Fri 24 May 2024 14:00:30 +0000
asID:                     52594
IP address blocks:        177.87.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5f:c0:db:e1:ed:09:7b:17:21:e5:19:15:4e:cd:f4:3d:07:f8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877
        Validity
            Not Before: May 26 13:55:30 2023 GMT
            Not After : May 24 14:00:30 2024 GMT
        Subject: CN=FF10ADBB1A4FEB24D25E98C2070A678464CD937F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a9:53:8d:4f:94:13:85:5e:f0:7b:ee:84:62:
                    1c:8c:df:3a:06:83:cc:1e:c8:30:d7:23:e7:3c:b7:
                    88:d5:49:0c:1a:e8:32:8e:d1:a3:d6:3b:47:48:47:
                    51:c4:fe:5a:d4:8c:eb:e5:1c:03:1d:5d:65:e5:60:
                    6e:e6:32:75:9d:6d:43:a2:3f:35:19:c7:f4:ae:88:
                    24:b4:2d:9a:19:2f:b4:4d:dc:99:9a:65:3a:5c:8f:
                    e8:08:f4:4b:94:b7:21:47:f5:b0:e7:50:10:cf:75:
                    e4:58:43:62:07:f2:7e:73:d3:73:ac:1f:32:0d:a9:
                    ef:90:9f:e4:32:21:aa:57:49:78:94:5a:57:71:af:
                    60:dd:db:77:1e:99:4a:d8:10:8a:37:39:a1:7d:ce:
                    28:20:62:58:3a:a4:ee:f6:06:c7:94:4b:bc:69:42:
                    6a:84:bc:81:70:80:25:69:89:6f:f0:65:e9:fc:58:
                    72:14:e5:a6:72:ed:52:f9:83:66:34:d0:2e:39:14:
                    68:ae:6c:b5:ee:b2:4f:8a:ce:7d:55:be:6d:bb:b9:
                    cc:b3:14:35:ad:67:58:8f:7f:8f:0d:7c:b1:fb:1d:
                    de:12:07:71:2b:8e:28:2e:20:72:b9:85:c2:18:14:
                    03:57:2c:ed:eb:ea:1b:e4:06:a6:b8:4b:56:e9:f4:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:10:AD:BB:1A:4F:EB:24:D2:5E:98:C2:07:0A:67:84:64:CD:93:7F
            X509v3 Authority Key Identifier:
                keyid:A5:9A:BE:7B:06:BA:78:CB:C1:B5:62:CF:C8:A8:90:C3:9B:BA:C8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A59ABE7B06BA78CBC1B562CFC8A890C39BBAC877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmJTKU14reDMf7eY9xCWGVKwYYAbrTMZzZ7Qzee2uhdp/0/3137372e38372e3130382e302f32342d3234203d3e203532353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:2d:17:19:49:98:80:0e:11:13:2c:31:d5:96:c4:28:87:c7:
         8e:82:16:c2:77:6c:83:50:e8:e1:1a:a0:30:ef:46:0c:57:25:
         13:b5:89:37:53:1b:25:72:dc:59:45:e1:69:e0:fd:54:ce:61:
         16:d7:23:ce:d9:16:7a:85:4b:ca:77:6c:e4:61:f3:7e:6a:1a:
         f3:4b:ec:d3:b2:75:7c:f2:7d:72:bb:bc:85:87:bd:1d:96:cc:
         b4:a8:e2:45:c5:ed:c2:71:78:62:53:b9:f6:0b:9e:70:99:67:
         f0:1a:9c:22:56:6e:c5:43:4b:c3:eb:8a:e2:2a:76:1c:07:4a:
         6c:fe:a9:85:f7:de:c1:1c:be:ca:85:89:69:8e:a2:e5:e8:36:
         4c:5e:c0:bf:5b:cf:1f:1d:45:92:43:31:be:aa:7d:38:5b:8c:
         03:38:80:1f:ca:8e:4c:14:57:12:a0:ef:75:27:bc:f9:27:49:
         f6:8a:ef:20:e9:8e:79:36:a2:b6:d8:06:61:09:fc:bd:81:39:
         16:78:1e:80:42:5f:4a:4a:ea:9f:c9:7f:ab:6d:30:bd:e6:9c:
         a8:5d:b8:e5:6d:00:b5:1d:90:65:6f:c9:76:16:3d:65:97:a1:
         81:a5:0d:de:29:56:e7:28:dc:ec:c6:61:d9:74:b4:fe:34:82:
         7b:fa:65:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org