Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3137372e35332e3232342e302f32312d3234203d3e203533313338.roa
File:                     3137372e35332e3232342e302f32312d3234203d3e203533313338.roa (raw, json)
Hash identifier:          gK9DfjuhuMrorDH5hpYkgoLtXjoeXrPBX4deGHQ22ek=
Subject key identifier:   8B:3C:3D:23:0F:6E:FF:30:0B:DC:1C:B5:C1:14:AF:58:DC:6F:A2:40
Certificate issuer:       /CN=9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3
Certificate serial:       1704B3C60BFEED8BD20989D152A717706800ECC8
Authority key identifier: 9F:7B:B8:1C:7C:61:11:73:1D:1A:97:D3:C8:F3:93:5E:48:48:C3:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3137372e35332e3232342e302f32312d3234203d3e203533313338.roa
Signing time:             Mon 23 May 2022 18:22:52 +0000
ROA not before:           Mon 23 May 2022 18:17:52 +0000
ROA not after:            Mon 22 May 2023 18:22:52 +0000
asID:                     53138
IP address blocks:        177.53.224.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:04:b3:c6:0b:fe:ed:8b:d2:09:89:d1:52:a7:17:70:68:00:ec:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3
        Validity
            Not Before: May 23 18:17:52 2022 GMT
            Not After : May 22 18:22:52 2023 GMT
        Subject: CN=8B3C3D230F6EFF300BDC1CB5C114AF58DC6FA240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:98:be:80:5f:6d:39:97:81:35:b9:d8:02:f9:
                    cc:32:58:97:57:3b:2f:7a:0f:5f:cf:48:f1:4e:2f:
                    93:ad:c5:1c:33:e1:43:9d:77:12:93:48:93:ff:22:
                    3c:54:cf:3d:5c:7e:f3:c9:97:66:23:82:07:d0:5c:
                    6f:fd:f0:0d:88:8d:ba:b7:11:d2:cb:7d:3f:f6:d8:
                    bb:62:34:4a:5f:06:a2:5a:42:83:c2:9c:ff:67:ee:
                    b0:1c:c4:bf:fc:2a:97:2e:a5:2b:f4:54:c0:35:12:
                    8e:c2:23:e4:c2:e1:bc:c9:59:df:59:00:d8:7d:4e:
                    50:1a:ea:1e:1e:2b:b1:2f:34:6a:ec:74:4a:38:cb:
                    4b:a0:f3:67:f6:69:0d:1a:cc:2d:8d:6c:88:93:f1:
                    c7:89:cc:f5:4f:54:70:8e:77:ae:26:cc:7f:99:39:
                    a2:42:9e:04:e6:42:5b:a2:26:f7:5a:ef:e0:29:c5:
                    ae:b4:f1:4f:65:c4:96:45:4c:eb:4c:74:41:fa:73:
                    68:7d:6a:73:65:c7:97:b2:ba:b4:b6:b4:74:b3:fb:
                    15:6f:0d:65:71:ba:b8:94:76:68:93:ef:4e:dd:f1:
                    fe:02:ce:37:55:1d:e1:b0:39:bb:26:f3:fd:77:13:
                    40:ae:6b:d0:3a:87:d0:d1:65:44:97:0f:6d:0a:97:
                    8d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3C:3D:23:0F:6E:FF:30:0B:DC:1C:B5:C1:14:AF:58:DC:6F:A2:40
            X509v3 Authority Key Identifier:
                keyid:9F:7B:B8:1C:7C:61:11:73:1D:1A:97:D3:C8:F3:93:5E:48:48:C3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3137372e35332e3232342e302f32312d3234203d3e203533313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:d3:79:95:be:d0:a8:0a:ba:b6:ce:08:38:e4:f8:ef:7a:
         82:3b:f0:26:00:28:f9:75:b9:37:77:35:c8:dc:7a:7c:c0:70:
         60:c8:63:4b:db:e8:fe:27:e1:e1:b0:40:22:19:2a:fd:df:77:
         bc:32:1f:b6:51:8c:0e:74:70:0a:f9:2e:50:c1:ce:4c:75:67:
         55:7c:34:80:a6:f0:fd:a6:47:e6:f8:6b:d6:ab:5b:a3:dd:2f:
         58:42:ec:b9:ea:95:8b:92:84:13:29:5e:d1:77:de:43:ca:d2:
         00:30:94:e8:b5:9b:b1:18:5a:91:5e:01:f6:ad:09:7f:99:cc:
         a5:85:c1:49:13:e1:8c:f3:41:00:cb:31:cc:a0:92:66:a3:4d:
         4d:c2:64:5d:b2:15:e7:7a:19:4b:bd:01:bc:eb:d4:58:6d:be:
         5e:98:a4:ee:d3:e6:de:68:d9:44:9a:f3:79:57:cd:d6:24:e8:
         d0:4b:c8:99:89:2e:dc:2e:cc:8f:f0:ae:25:8e:75:8f:a0:8c:
         75:3d:1d:9b:49:46:77:80:9e:b7:1f:d2:6e:03:6a:d6:7f:46:
         ed:14:55:2b:53:af:89:48:2b:54:d1:d5:eb:53:cf:09:87:1a:
         eb:13:c9:3b:2a:be:39:65:0d:c3:cc:c5:5b:e3:fe:84:1f:4d:
         39:05:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org