Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/3137372e32322e302e302f32302d3234203d3e20323632383833.roa
File:                     3137372e32322e302e302f32302d3234203d3e20323632383833.roa (raw, json)
Hash identifier:          ui/u9Z1pNlHtaiIfZ165D3KC+gtfuYKho4yHaHKzMiA=
Subject key identifier:   3B:B3:67:55:77:21:6B:92:83:33:91:A3:62:52:8C:B7:39:5C:2B:98
Certificate issuer:       /CN=E5754BC58952E3CFD46152E05FECC3D0D1B5429C
Certificate serial:       42D4A0D8D0BFE1969FA0C99A9ED467D3B7DE4178
Authority key identifier: E5:75:4B:C5:89:52:E3:CF:D4:61:52:E0:5F:EC:C3:D0:D1:B5:42:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/3137372e32322e302e302f32302d3234203d3e20323632383833.roa
Signing time:             Fri 25 Aug 2023 12:00:00 +0000
ROA not before:           Fri 25 Aug 2023 11:55:00 +0000
ROA not after:            Fri 23 Aug 2024 12:00:00 +0000
asID:                     262883
IP address blocks:        177.22.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d4:a0:d8:d0:bf:e1:96:9f:a0:c9:9a:9e:d4:67:d3:b7:de:41:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5754BC58952E3CFD46152E05FECC3D0D1B5429C
        Validity
            Not Before: Aug 25 11:55:00 2023 GMT
            Not After : Aug 23 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:91:f2:08:cc:40:94:5b:0a:83:54:d0:d5:d4:
                    29:d0:31:84:85:a8:ba:d0:6e:7a:68:a0:cd:d9:68:
                    df:e8:53:33:0e:e5:77:6e:e1:ed:33:ac:b0:42:d7:
                    6f:14:27:38:d0:f8:9e:5d:c9:62:f7:39:91:06:c6:
                    5d:47:78:ef:47:97:80:06:51:aa:a5:87:b8:b3:2c:
                    41:3a:47:35:b9:7a:96:ba:8f:ff:b9:94:b8:40:93:
                    2c:0a:d5:90:c2:d1:7d:f9:0a:65:b1:b5:f5:bf:c4:
                    24:2f:cb:87:a3:32:8e:de:be:b9:4a:77:1e:75:73:
                    71:ed:62:79:b7:16:74:50:97:29:ce:a1:7a:79:f7:
                    c0:2f:72:6c:c8:61:92:d7:cd:13:14:88:fe:7a:da:
                    bd:65:e4:30:6b:c0:12:3d:be:8c:b9:5e:6a:59:39:
                    af:f0:62:72:f9:5a:05:12:ed:d9:41:be:e9:39:cc:
                    c7:f6:7a:b4:9b:43:23:48:89:f6:a5:b7:7b:88:73:
                    3b:96:c3:28:21:6d:f7:c1:52:b0:78:7b:1f:ac:22:
                    a9:eb:8e:df:d3:b5:3d:df:5b:26:0e:bf:36:67:53:
                    65:0b:4e:80:fc:7c:e9:bf:64:68:df:c2:93:33:8e:
                    f8:86:c0:25:49:93:3d:cf:07:4a:b9:b2:d2:1e:46:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B3:67:55:77:21:6B:92:83:33:91:A3:62:52:8C:B7:39:5C:2B:98
            X509v3 Authority Key Identifier:
                keyid:E5:75:4B:C5:89:52:E3:CF:D4:61:52:E0:5F:EC:C3:D0:D1:B5:42:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/3137372e32322e302e302f32302d3234203d3e20323632383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:1b:cf:29:85:f9:cd:10:15:f3:d6:e3:0c:f2:ca:4d:a9:a9:
         36:8b:5c:94:8c:07:07:f1:1c:6f:e4:75:6c:27:4a:b0:d6:41:
         51:85:02:5c:a6:a3:c5:0d:da:59:b2:15:f7:f7:c1:ee:14:ce:
         3d:33:a5:c3:ce:40:7f:72:1f:d8:45:68:ad:d7:66:ba:96:48:
         c8:82:61:67:e3:8b:f8:f6:e1:5e:f2:f9:41:c0:cb:15:19:38:
         b9:c6:9a:63:3f:9a:81:dd:83:ca:de:f4:92:8c:7c:0d:bd:b5:
         10:12:35:33:d6:5b:7f:c2:de:e6:e9:fc:61:08:d4:36:ad:ab:
         26:7e:f8:e6:51:87:40:da:33:b8:72:89:df:ff:83:c3:35:95:
         90:e5:69:29:42:06:1e:42:6e:94:40:d0:7e:4a:5d:64:b3:fa:
         1c:06:50:dc:49:55:9b:41:90:d3:ff:b7:fc:08:70:ee:31:16:
         68:83:3b:e6:8f:83:5e:71:4e:e0:dd:48:4a:07:c6:38:c5:b7:
         05:e8:00:fb:70:09:66:6b:f5:90:de:75:e2:17:5b:f7:2f:e9:
         3a:2d:da:3b:c5:36:99:db:cb:30:b4:05:5f:e0:70:c7:7a:04:
         fa:a1:29:ff:86:c4:39:9f:67:67:55:4a:7d:81:79:45:a4:5c:
         2d:65:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org