Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/3137372e35342e38302e302f32322d3234203d3e20323632323932.roa
File:                     3137372e35342e38302e302f32322d3234203d3e20323632323932.roa (raw, json)
Hash identifier:          CdKXFrHdq5ZoeHsZrWwrZqWx1VCIrlsNRgM9Jk8ANQI=
Subject key identifier:   5B:BF:53:A2:E8:2C:83:9B:7B:B0:4C:1D:A8:1D:C5:64:D6:BF:A9:4E
Certificate issuer:       /CN=122A0906A85BBC298F8098D0F553D11D5DA374D5
Certificate serial:       7BFBEE6DC3D7218E9C1DBB9E898BCFCD7CF96C18
Authority key identifier: 12:2A:09:06:A8:5B:BC:29:8F:80:98:D0:F5:53:D1:1D:5D:A3:74:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/3137372e35342e38302e302f32322d3234203d3e20323632323932.roa
Signing time:             Wed 03 Apr 2024 19:51:44 +0000
ROA not before:           Wed 03 Apr 2024 19:46:44 +0000
ROA not after:            Wed 02 Apr 2025 19:51:44 +0000
asID:                     262292
IP address blocks:        177.54.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fb:ee:6d:c3:d7:21:8e:9c:1d:bb:9e:89:8b:cf:cd:7c:f9:6c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122A0906A85BBC298F8098D0F553D11D5DA374D5
        Validity
            Not Before: Apr  3 19:46:44 2024 GMT
            Not After : Apr  2 19:51:44 2025 GMT
        Subject: CN=5BBF53A2E82C839B7BB04C1DA81DC564D6BFA94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:9c:7b:38:f0:f4:10:f3:23:fc:aa:50:25:
                    67:ba:07:d0:54:ed:85:15:03:3a:ee:b4:53:7e:2a:
                    32:ed:a3:3f:8b:a8:6b:e7:55:0a:83:0d:fe:a7:3f:
                    b4:c9:8b:22:a1:6d:29:60:6f:83:9d:4f:b2:0d:14:
                    87:56:5c:42:4d:81:29:f9:15:25:ec:08:6c:07:df:
                    74:2c:f3:a0:c9:a4:79:33:cd:00:4c:f3:37:92:28:
                    77:05:a6:11:72:a8:bd:8d:c1:28:5e:bb:e7:1c:59:
                    d2:ab:fc:5d:ef:c8:7e:85:f9:60:57:88:3e:a9:84:
                    f1:1d:9b:34:f8:58:f7:18:ec:47:d3:d2:1f:50:d9:
                    44:b9:88:5e:5d:1e:ae:c1:eb:88:52:e6:9e:aa:f2:
                    81:12:ed:41:bc:4f:a4:b3:cb:85:66:8d:50:5c:0c:
                    81:bf:fa:54:9d:a2:28:c0:0a:5a:4c:48:2c:d9:51:
                    8d:18:03:b3:50:aa:5b:92:7b:8f:9b:1e:86:4f:6a:
                    6a:01:19:91:f7:83:7c:3f:8f:1c:a1:d2:e2:87:9d:
                    40:29:16:3a:e7:21:75:41:8e:45:b5:a8:59:5b:77:
                    f3:55:a3:32:44:79:47:76:80:c9:5a:dd:0a:f4:ae:
                    94:14:7d:aa:91:dd:f1:ba:ee:1e:47:d9:06:94:4a:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BF:53:A2:E8:2C:83:9B:7B:B0:4C:1D:A8:1D:C5:64:D6:BF:A9:4E
            X509v3 Authority Key Identifier:
                keyid:12:2A:09:06:A8:5B:BC:29:8F:80:98:D0:F5:53:D1:1D:5D:A3:74:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122A0906A85BBC298F8098D0F553D11D5DA374D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CXp6AYrm9LbrYNnCWaL1AM15DuR9BDDXL4qbbU6XQtGK/1/3137372e35342e38302e302f32322d3234203d3e20323632323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:1f:39:bb:6c:f2:82:00:9e:36:70:58:08:c8:35:0b:31:29:
         27:68:2c:14:cb:3d:66:24:e2:5d:e9:df:19:e8:86:f1:42:23:
         29:da:db:de:f4:28:f9:e4:34:aa:ee:19:8d:28:8c:51:5e:23:
         a9:5a:a8:47:ad:44:18:e8:1c:dd:5e:73:76:8d:db:fc:6c:62:
         f0:25:12:8f:e7:e5:5a:51:3d:1c:db:4a:2b:e0:2e:24:b5:62:
         d0:84:28:f7:f8:5c:37:df:f5:62:ef:bb:f6:5d:61:42:c1:a5:
         74:d1:41:42:cc:dd:86:32:cb:7c:90:fc:f5:a7:71:d0:47:a8:
         4a:e9:81:cf:02:56:55:a4:de:f4:06:03:82:88:27:8a:2e:78:
         6f:c1:d7:db:c4:d6:56:04:8f:3b:21:76:87:ec:ba:db:88:d6:
         9d:f9:bb:e0:cb:98:bd:91:35:b3:1d:41:ad:9f:b3:a5:0c:24:
         67:9f:2a:44:cd:f3:02:94:b5:f6:d0:26:bb:5a:4f:77:3c:92:
         f3:a5:b9:06:7b:49:2b:81:1c:1f:cb:74:98:ef:0d:45:3a:d8:
         4e:23:b3:9a:15:30:34:c9:cb:af:6a:ca:87:8b:39:a6:e3:99:
         12:27:ca:c6:f8:cf:20:ac:e8:8a:be:a0:90:10:76:22:66:20:
         02:5b:cb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org