Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e35332e3231362e302f32312d3234203d3e20323638303138.roa
File:                     3137372e35332e3231362e302f32312d3234203d3e20323638303138.roa (raw, json)
Hash identifier:          YHGerC/dUYytiL/VK/roSmn0tGKLNUJ4+VEaWn3m31Q=
Subject key identifier:   79:D5:DF:8E:AF:14:73:3D:0A:F4:EB:11:FC:F3:83:EC:B4:BC:EE:3B
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       565AEEF6544D8580069F81CD86FD33D0464027C0
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e35332e3231362e302f32312d3234203d3e20323638303138.roa
Signing time:             Fri 04 Aug 2023 14:01:20 +0000
ROA not before:           Fri 04 Aug 2023 13:56:20 +0000
ROA not after:            Fri 02 Aug 2024 14:01:20 +0000
asID:                     268018
IP address blocks:        177.53.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5a:ee:f6:54:4d:85:80:06:9f:81:cd:86:fd:33:d0:46:40:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Aug  4 13:56:20 2023 GMT
            Not After : Aug  2 14:01:20 2024 GMT
        Subject: CN=79D5DF8EAF14733D0AF4EB11FCF383ECB4BCEE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:33:65:24:25:98:11:e4:95:b6:26:78:c8:f1:
                    c1:4d:c0:6f:76:39:51:f4:d3:25:3b:23:fa:96:e4:
                    cc:9f:2f:a1:ac:3f:70:d0:6a:15:41:21:bc:ac:9a:
                    39:f7:65:65:95:01:e5:28:de:7f:96:de:a4:eb:23:
                    f1:a7:06:9b:35:e0:95:1b:20:a9:7b:e7:c5:bd:b4:
                    2c:41:74:47:c0:21:56:98:fe:11:da:8a:f6:67:66:
                    c1:3f:a6:ad:1c:8a:42:71:86:b9:42:4d:9f:70:59:
                    ed:f8:7f:5f:4e:52:8e:0a:ae:f9:5d:81:c1:86:d8:
                    43:1a:2f:ce:67:8d:3a:1f:55:a2:88:5e:86:f1:27:
                    e2:9c:af:2f:76:1e:91:10:c5:c2:37:43:12:f3:fa:
                    e4:46:2b:e3:5c:b5:8e:a8:80:fc:fe:f4:ac:5e:67:
                    a4:12:0c:2d:32:df:c4:91:cc:81:21:82:8f:10:d2:
                    44:3a:92:5f:5d:fe:d9:81:ea:32:ad:b7:c5:0c:d3:
                    42:45:84:af:6a:3b:ea:55:d1:d0:87:32:10:93:a0:
                    0a:1d:cf:7c:dd:4c:d1:cc:06:c2:1a:8e:2e:6d:05:
                    3f:0b:31:14:78:f3:25:80:ea:08:10:a3:6e:14:7d:
                    37:cc:ca:66:f3:6b:83:0c:83:81:f6:2c:08:33:d2:
                    da:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D5:DF:8E:AF:14:73:3D:0A:F4:EB:11:FC:F3:83:EC:B4:BC:EE:3B
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137372e35332e3231362e302f32312d3234203d3e20323638303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:ef:1a:7e:bf:e8:f8:63:c9:9a:12:09:e3:e2:92:8f:14:75:
         d0:e0:ad:ff:03:79:b0:5b:2e:a2:32:50:c2:02:67:e8:94:48:
         53:a4:dc:da:f1:fd:13:2d:a6:9c:31:b4:3a:1f:e8:da:be:82:
         c3:ca:c6:98:9a:6e:5f:97:67:6c:af:90:10:17:5f:49:f2:ac:
         4d:0d:f7:3d:bb:24:e7:eb:ed:aa:73:df:5c:e0:53:91:da:0c:
         d1:43:e2:38:5c:4e:11:05:ae:c4:b8:17:c8:c8:42:c2:2b:21:
         f5:db:24:b9:23:51:bd:5c:83:46:dd:d1:9f:fb:7a:c6:56:18:
         21:e1:4f:2b:e8:f5:26:c8:81:c9:02:30:f0:56:40:b2:e4:c8:
         22:0f:3a:9d:21:0b:d7:9f:e7:bc:96:3c:cd:f6:27:b3:f0:2d:
         88:81:6a:a1:c7:f4:40:61:67:44:74:06:eb:70:b0:a0:82:85:
         eb:d7:0f:dd:88:ca:41:66:0b:e8:44:4e:73:a2:11:47:9d:0c:
         a2:6b:7b:ed:f5:fc:54:f8:dc:54:49:23:75:b7:69:6d:34:ae:
         cf:5e:90:c2:0b:e3:3b:5c:28:cc:33:73:46:3e:70:b4:11:77:
         84:53:c1:f3:25:24:37:ae:9a:a6:c0:c1:d6:a5:e8:58:86:3c:
         2b:5b:da:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org