Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS53114.roa
File:                     AS53114.roa (raw, json)
Hash identifier:          KBnzAg84lF1Owe3B+MXLAp/YsdDK/2XUlHE/FVUeC7I=
Subject key identifier:   2E:CE:31:AF:F0:3B:6C:97:7D:5C:EB:DA:FE:5A:20:16:54:11:A9:FA
Certificate issuer:       /CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
Certificate serial:       35514DB0A8F62A7375050FCD208E1EB47DCAB02B
Authority key identifier: F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS53114.roa
Signing time:             Thu 06 Oct 2022 17:47:46 +0000
ROA not before:           Thu 06 Oct 2022 17:42:46 +0000
ROA not after:            Thu 05 Oct 2023 17:47:46 +0000
asID:                     53114
IP address blocks:        187.109.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:51:4d:b0:a8:f6:2a:73:75:05:0f:cd:20:8e:1e:b4:7d:ca:b0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8
        Validity
            Not Before: Oct  6 17:42:46 2022 GMT
            Not After : Oct  5 17:47:46 2023 GMT
        Subject: CN=2ECE31AFF03B6C977D5CEBDAFE5A20165411A9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:92:35:fb:27:e2:b5:d2:2c:78:87:9f:88:
                    56:6a:0b:ad:5a:90:eb:30:3d:ed:f5:ce:3e:4a:7b:
                    66:e4:ae:47:95:61:b8:24:00:0c:7c:5e:22:91:dc:
                    e4:bd:2a:a2:94:a5:fa:51:37:ce:47:84:31:03:dd:
                    70:64:83:35:91:aa:db:5e:00:51:8c:9d:7a:e1:e6:
                    63:8a:57:c0:62:37:e3:4b:e0:ef:05:20:90:ff:ce:
                    4e:b7:c6:3e:39:11:9a:6f:9a:e6:43:3f:8d:bc:58:
                    43:98:df:27:cd:60:57:e3:1e:9a:48:be:08:e7:ec:
                    cb:c5:47:59:55:bf:bd:d1:81:81:2c:79:f5:ee:b4:
                    12:b3:58:95:99:f8:32:fa:f6:8c:8e:f2:10:f4:a9:
                    a9:d5:22:cf:cd:b4:eb:39:71:21:1b:3c:27:60:7e:
                    90:0b:55:79:8e:27:cd:b8:bb:5d:f3:75:34:f0:78:
                    fb:ec:c4:34:4c:24:e5:04:f9:e5:00:0f:7b:59:88:
                    cf:7b:3b:a0:cc:78:24:2a:0f:2e:5c:a9:70:29:f9:
                    51:4d:68:79:db:0e:eb:1b:54:dd:dc:91:c9:4e:f0:
                    67:92:e6:94:87:84:c5:d4:70:92:5e:23:ef:1c:f2:
                    69:05:12:44:c7:7e:23:f6:83:54:c6:53:ee:ee:c1:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CE:31:AF:F0:3B:6C:97:7D:5C:EB:DA:FE:5A:20:16:54:11:A9:FA
            X509v3 Authority Key Identifier:
                keyid:F2:45:A2:0D:D7:54:10:2E:B4:C5:AD:AB:E8:FD:F7:C8:F3:0A:F3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F245A20DD754102EB4C5ADABE8FDF7C8F30AF3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/0/AS53114.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:3d:3d:28:97:3e:8d:3f:4f:a7:2a:67:d5:2c:a7:3e:4d:34:
         b5:eb:15:ad:3e:36:21:3e:57:d4:87:5c:72:b9:91:c6:de:67:
         72:1b:5c:b5:c7:09:f0:3a:cc:55:0f:1a:e3:6b:90:c1:4e:78:
         ed:2b:ff:91:50:ed:a1:c8:3d:9d:7e:d1:9f:7e:81:7c:15:1e:
         e1:0f:5f:1b:1e:4a:f8:0c:d5:d8:9c:db:42:92:fd:22:3d:96:
         8d:f9:10:95:bf:cd:a4:fa:c8:5a:45:06:95:4c:cb:86:85:4a:
         c5:65:da:00:9a:d9:2b:f5:16:ab:e6:74:3f:05:5e:aa:9e:28:
         e8:43:e7:3d:90:23:52:65:13:79:0d:cb:d2:e9:16:ec:db:5f:
         0b:42:fd:5c:29:96:0d:08:c2:1e:0c:ee:a5:32:1d:b1:93:84:
         e2:44:b2:92:78:4e:18:1e:9b:83:0a:76:b7:1a:b0:2e:34:3c:
         d4:fd:33:99:57:f1:31:8c:15:24:17:d4:f2:bd:76:70:b7:be:
         98:9d:73:20:61:eb:83:8a:c7:12:a1:40:ee:89:58:09:48:80:
         20:ef:1a:5d:82:c1:1d:4c:79:8b:77:d7:17:be:2a:9f:41:42:
         00:cb:37:cf:f3:7c:31:3f:4b:e0:d6:a7:25:5e:a0:36:e8:85:
         d0:ba:46:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org