Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/3137372e3132342e3138382e302f32322d3234203d3e203532363334.roa
File:                     3137372e3132342e3138382e302f32322d3234203d3e203532363334.roa (raw, json)
Hash identifier:          kc4f/JwhFntB08ezieuF2NpNc0HXg5xpFcuZfEwQJhg=
Subject key identifier:   27:C6:D3:66:6A:18:26:35:43:8E:6C:D1:B7:7E:44:9A:FD:76:23:0D
Certificate issuer:       /CN=B56F61CABD36A7D97FF8B7B2918E005EB040CA8A
Certificate serial:       488813EAF8220058108A15B08F3C9A33EFD5AF6B
Authority key identifier: B5:6F:61:CA:BD:36:A7:D9:7F:F8:B7:B2:91:8E:00:5E:B0:40:CA:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B56F61CABD36A7D97FF8B7B2918E005EB040CA8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/3137372e3132342e3138382e302f32322d3234203d3e203532363334.roa
Signing time:             Mon 12 Jun 2023 17:49:20 +0000
ROA not before:           Mon 12 Jun 2023 17:44:20 +0000
ROA not after:            Mon 10 Jun 2024 17:49:20 +0000
asID:                     52634
IP address blocks:        177.124.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:88:13:ea:f8:22:00:58:10:8a:15:b0:8f:3c:9a:33:ef:d5:af:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56F61CABD36A7D97FF8B7B2918E005EB040CA8A
        Validity
            Not Before: Jun 12 17:44:20 2023 GMT
            Not After : Jun 10 17:49:20 2024 GMT
        Subject: CN=27C6D3666A182635438E6CD1B77E449AFD76230D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1f:50:95:e8:1e:b4:8c:8c:1c:a1:72:ef:77:
                    65:28:4c:3a:3e:ca:88:20:c8:61:3a:99:ca:41:bf:
                    79:9b:af:79:30:67:72:80:ff:f4:62:cb:6b:58:54:
                    31:31:d0:02:c4:c1:7a:31:cb:9e:15:ab:00:8c:fb:
                    41:09:1d:9e:5a:f8:ec:12:eb:ca:b0:1a:e7:66:b7:
                    44:34:ca:36:a2:b6:da:d7:97:b0:76:93:63:91:a8:
                    23:df:fd:bf:b1:24:74:66:aa:d8:0c:28:5d:be:6d:
                    0e:4e:ee:c7:4d:85:ef:60:c8:71:be:8b:85:84:84:
                    16:ba:e0:79:98:98:76:c5:b2:c6:b9:79:22:84:2a:
                    db:28:56:84:a5:38:b4:fa:59:3b:9a:96:61:55:c3:
                    c6:b0:1d:a9:8a:b0:63:23:28:38:24:ea:be:9e:d5:
                    9f:5c:e2:2c:d3:4d:24:e6:fa:06:c6:b0:b4:8b:38:
                    b3:13:6e:56:e3:dc:ba:1e:3e:29:42:87:e1:29:23:
                    c2:11:a2:72:95:0b:4d:8b:99:05:a8:82:ab:e5:13:
                    da:02:aa:75:34:ee:e6:cc:e3:20:40:40:86:67:6e:
                    73:e4:c7:99:60:af:ae:8d:22:41:0e:56:47:1f:46:
                    7c:75:6f:02:9c:6a:ff:da:62:cd:e3:4d:05:6c:e4:
                    dd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C6:D3:66:6A:18:26:35:43:8E:6C:D1:B7:7E:44:9A:FD:76:23:0D
            X509v3 Authority Key Identifier:
                keyid:B5:6F:61:CA:BD:36:A7:D9:7F:F8:B7:B2:91:8E:00:5E:B0:40:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/B56F61CABD36A7D97FF8B7B2918E005EB040CA8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B56F61CABD36A7D97FF8B7B2918E005EB040CA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/3137372e3132342e3138382e302f32322d3234203d3e203532363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:2a:e4:e0:8e:05:a1:92:fa:11:89:1b:f7:42:ad:6b:cf:82:
         09:91:4c:87:ef:8c:ca:11:cc:2b:01:40:3e:1f:27:5a:1e:ed:
         57:a7:99:8f:97:4e:cc:13:af:aa:fe:1c:74:bc:5d:72:b0:7d:
         fd:80:4a:0f:ad:e9:1b:cb:8c:07:73:0d:6e:2a:ed:b0:a2:9c:
         9b:94:00:a1:be:ee:0e:2b:e6:a7:3a:a0:bb:0d:99:bb:02:70:
         b1:52:75:b9:0c:70:3f:cb:44:48:3b:fd:d5:00:0e:da:d1:73:
         1e:04:4d:95:5a:d5:04:f8:fd:24:65:00:64:7e:1a:f7:f9:37:
         f7:f7:7a:27:1b:5d:fe:9f:79:b7:2e:cb:8b:55:cf:c4:91:8a:
         54:0c:51:3b:1e:9a:24:67:a5:4a:54:dc:36:04:fc:9b:22:19:
         7d:84:44:c0:f8:5d:7c:91:fa:9d:10:01:fa:70:0f:37:e7:1f:
         94:db:7a:e0:07:a2:66:ae:2c:4d:9f:f7:59:f5:ad:21:d9:6d:
         cf:eb:1a:9e:9b:6b:78:27:f0:d4:8b:ef:92:40:81:d4:bb:0f:
         70:b8:a5:ef:fc:55:f8:c5:2b:a5:ab:eb:2a:e4:18:30:a3:25:
         c7:74:64:e8:13:8f:0d:27:60:eb:5b:1a:96:63:ff:60:0f:47:
         ca:cf:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org