Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BP95tN8ZxLvso384R2aDFNP7Lw8GFWs7WuqfN9PqKqqo/0/3137372e3130372e3136302e302f32302d3234203d3e203533313337.roa
File:                     3137372e3130372e3136302e302f32302d3234203d3e203533313337.roa (raw, json)
Hash identifier:          ZSZPFr3oNCrwaFzwppUy7mbwSnh3+co/6DjWRbth2xg=
Subject key identifier:   86:D1:CC:94:55:C7:26:50:0E:79:78:D9:7A:68:4F:DD:D9:62:C6:A8
Certificate issuer:       /CN=075E1BDBC5BC129D6FD5D26458C64ECC9570E1AE
Certificate serial:       2E5230A32817E5A84C61B00CEC1D25C1567C404A
Authority key identifier: 07:5E:1B:DB:C5:BC:12:9D:6F:D5:D2:64:58:C6:4E:CC:95:70:E1:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/075E1BDBC5BC129D6FD5D26458C64ECC9570E1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BP95tN8ZxLvso384R2aDFNP7Lw8GFWs7WuqfN9PqKqqo/0/3137372e3130372e3136302e302f32302d3234203d3e203533313337.roa
Signing time:             Sat 01 Apr 2023 20:00:00 +0000
ROA not before:           Sat 01 Apr 2023 19:55:00 +0000
ROA not after:            Mon 01 Apr 2024 20:00:00 +0000
asID:                     53137
IP address blocks:        177.107.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:52:30:a3:28:17:e5:a8:4c:61:b0:0c:ec:1d:25:c1:56:7c:40:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075E1BDBC5BC129D6FD5D26458C64ECC9570E1AE
        Validity
            Not Before: Apr  1 19:55:00 2023 GMT
            Not After : Apr  1 20:00:00 2024 GMT
        Subject: CN=3082010A0282010100CA347AB99E875432398EF3D385F0F4DE026E6D073BEB35E33A29498BFA7F3882C55A84B3228177B5A49B6513CC2F2454C6BB3EBC2A116B64A6C1F7A92CB33F265B66C924571844729FBAC0D48A8A06B8BA0EE7BDE24BD2298E87B5C09EEE797C7DDE7E6E7D32A132E75F57403ED80D71E2D70B0D181EF1F9C1577389C4837A396FA6536B6681C4E6BE0F394FD316B2B4C435FCCEEE63D7BABCB2357160C4C87741B2006EAE78EA1DC596098297ABDA0F8CA054A2DA78B89326697EA40147A7BF1F5654DE92282423E35B042A36E4196F885D9BEC8A515260AF2517FA0A57C8965CD9DCB0AD60931D8800AA9A2588E8E32CFC6526118B0775004734BE0D3462B50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:7a:b9:9e:87:54:32:39:8e:f3:d3:85:f0:
                    f4:de:02:6e:6d:07:3b:eb:35:e3:3a:29:49:8b:fa:
                    7f:38:82:c5:5a:84:b3:22:81:77:b5:a4:9b:65:13:
                    cc:2f:24:54:c6:bb:3e:bc:2a:11:6b:64:a6:c1:f7:
                    a9:2c:b3:3f:26:5b:66:c9:24:57:18:44:72:9f:ba:
                    c0:d4:8a:8a:06:b8:ba:0e:e7:bd:e2:4b:d2:29:8e:
                    87:b5:c0:9e:ee:79:7c:7d:de:7e:6e:7d:32:a1:32:
                    e7:5f:57:40:3e:d8:0d:71:e2:d7:0b:0d:18:1e:f1:
                    f9:c1:57:73:89:c4:83:7a:39:6f:a6:53:6b:66:81:
                    c4:e6:be:0f:39:4f:d3:16:b2:b4:c4:35:fc:ce:ee:
                    63:d7:ba:bc:b2:35:71:60:c4:c8:77:41:b2:00:6e:
                    ae:78:ea:1d:c5:96:09:82:97:ab:da:0f:8c:a0:54:
                    a2:da:78:b8:93:26:69:7e:a4:01:47:a7:bf:1f:56:
                    54:de:92:28:24:23:e3:5b:04:2a:36:e4:19:6f:88:
                    5d:9b:ec:8a:51:52:60:af:25:17:fa:0a:57:c8:96:
                    5c:d9:dc:b0:ad:60:93:1d:88:00:aa:9a:25:88:e8:
                    e3:2c:fc:65:26:11:8b:07:75:00:47:34:be:0d:34:
                    62:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D1:CC:94:55:C7:26:50:0E:79:78:D9:7A:68:4F:DD:D9:62:C6:A8
            X509v3 Authority Key Identifier:
                keyid:07:5E:1B:DB:C5:BC:12:9D:6F:D5:D2:64:58:C6:4E:CC:95:70:E1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BP95tN8ZxLvso384R2aDFNP7Lw8GFWs7WuqfN9PqKqqo/0/075E1BDBC5BC129D6FD5D26458C64ECC9570E1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/075E1BDBC5BC129D6FD5D26458C64ECC9570E1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP95tN8ZxLvso384R2aDFNP7Lw8GFWs7WuqfN9PqKqqo/0/3137372e3130372e3136302e302f32302d3234203d3e203533313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:b3:f8:3a:0f:66:6e:81:df:87:9a:f6:c6:9c:0c:42:97:02:
         21:16:b6:3e:db:2d:3e:b0:f6:71:2a:34:37:86:04:68:3f:fa:
         7a:b9:63:08:7d:33:08:c6:5d:f6:7b:b5:7f:1c:5f:db:b4:de:
         ab:d5:ba:6c:43:b9:48:16:d3:42:6a:c6:c4:73:75:d4:7c:81:
         44:a6:bc:a4:67:7b:29:29:d0:97:f5:3e:89:9a:f9:4a:5e:b1:
         50:f4:65:8d:5e:79:2e:eb:e5:25:8f:fc:21:c7:9e:de:8f:a3:
         ae:28:56:7f:49:c5:b2:3f:77:c1:2b:cf:b3:f2:67:ab:54:2a:
         32:88:7e:7f:84:ec:f9:ed:dc:29:41:4d:9a:d6:40:fc:4a:34:
         95:1c:19:a3:83:23:ab:bd:0f:9a:3a:b1:44:52:e9:d4:01:8f:
         c0:02:80:86:bf:58:9d:ec:05:e6:96:90:23:88:af:d7:99:df:
         b3:8c:2f:2b:12:df:1c:2d:6d:1d:cd:8d:4b:61:cf:9d:c2:cc:
         e0:97:23:45:32:72:01:1f:25:f9:3d:02:ff:5d:3d:89:6e:9a:
         9e:5d:e0:20:41:e9:2e:51:17:a5:22:ae:05:84:f7:c6:c4:c9:
         48:c7:ac:6a:69:09:bc:9e:74:81:4a:b2:73:e4:74:29:08:10:
         d9:36:bb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org