Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbQ2X69zR7KU9YWjrek8JXqEumFqXm6PT2DdFu21eKMU/0/3137372e3135322e35362e302f32312d3231203d3e203532353139.roa
File:                     3137372e3135322e35362e302f32312d3231203d3e203532353139.roa (raw, json)
Hash identifier:          EwMiR6UHhlVbPZ71niNYO3BpBmmNY4/E4THVKKjVR1M=
Subject key identifier:   52:9D:DE:0D:6E:36:87:3E:40:01:F3:61:C9:AC:32:96:3F:BE:26:8F
Certificate issuer:       /CN=A76ADE2F23EF009BE7AE9C3676417B801D7782F6
Certificate serial:       6434A80186E4067B9FEE241909B18D7EB627FD8A
Authority key identifier: A7:6A:DE:2F:23:EF:00:9B:E7:AE:9C:36:76:41:7B:80:1D:77:82:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A76ADE2F23EF009BE7AE9C3676417B801D7782F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbQ2X69zR7KU9YWjrek8JXqEumFqXm6PT2DdFu21eKMU/0/3137372e3135322e35362e302f32312d3231203d3e203532353139.roa
Signing time:             Wed 31 Aug 2022 00:59:59 +0000
ROA not before:           Wed 31 Aug 2022 00:54:59 +0000
ROA not after:            Wed 30 Aug 2023 00:59:59 +0000
asID:                     52519
IP address blocks:        177.152.56.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:34:a8:01:86:e4:06:7b:9f:ee:24:19:09:b1:8d:7e:b6:27:fd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A76ADE2F23EF009BE7AE9C3676417B801D7782F6
        Validity
            Not Before: Aug 31 00:54:59 2022 GMT
            Not After : Aug 30 00:59:59 2023 GMT
        Subject: CN=529DDE0D6E36873E4001F361C9AC32963FBE268F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:7f:b9:42:c6:14:ec:71:68:18:e3:a5:92:
                    07:48:6e:7a:64:82:3e:b3:b2:03:a6:4b:52:3c:7c:
                    c7:8a:c2:9b:45:9c:fe:14:38:ff:18:80:3c:39:f9:
                    55:57:50:af:84:a8:09:25:c7:0b:f1:54:be:2d:df:
                    3a:dc:3e:cb:cd:25:d2:d6:f3:07:b5:b8:fe:18:35:
                    ea:62:36:34:c3:cd:bd:8f:8b:ca:d5:7d:ed:31:4d:
                    95:ed:05:88:6b:f5:a0:ed:f8:3f:f7:e7:98:65:15:
                    9e:6f:06:cc:80:8d:90:89:a5:6f:a5:14:4e:ea:71:
                    ea:da:f9:d9:8f:9d:ea:38:36:b2:af:f4:af:1e:54:
                    f1:10:a1:e1:8d:31:98:f9:12:6a:29:f1:4a:76:a5:
                    93:b2:ac:d5:c1:76:75:cd:a4:cb:6b:45:13:2d:7d:
                    5a:e3:ed:6c:18:02:d0:57:8b:8f:d3:eb:c8:ed:73:
                    fa:ad:c0:30:18:c0:a4:b2:81:42:6d:0f:15:9b:3e:
                    88:43:7e:11:97:5e:30:93:13:ac:ad:0d:5c:15:0c:
                    19:a1:69:65:c2:87:a6:8b:da:e3:80:26:af:17:52:
                    e5:13:94:68:ad:6d:d2:33:ba:13:8c:2d:92:f3:d4:
                    f4:f0:f0:62:90:c2:70:fa:6c:84:32:f6:6c:67:0b:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9D:DE:0D:6E:36:87:3E:40:01:F3:61:C9:AC:32:96:3F:BE:26:8F
            X509v3 Authority Key Identifier:
                keyid:A7:6A:DE:2F:23:EF:00:9B:E7:AE:9C:36:76:41:7B:80:1D:77:82:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbQ2X69zR7KU9YWjrek8JXqEumFqXm6PT2DdFu21eKMU/0/A76ADE2F23EF009BE7AE9C3676417B801D7782F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A76ADE2F23EF009BE7AE9C3676417B801D7782F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbQ2X69zR7KU9YWjrek8JXqEumFqXm6PT2DdFu21eKMU/0/3137372e3135322e35362e302f32312d3231203d3e203532353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:6b:90:62:2e:c7:86:4b:7c:43:93:0f:a7:df:00:5c:be:5e:
         25:2e:48:dc:37:a8:c2:de:f4:fe:56:12:b6:2f:17:82:7b:58:
         e0:8c:9e:c7:33:f3:04:99:6e:22:dc:6a:50:e2:1c:2a:c9:ea:
         4d:d7:be:7b:dc:6e:a5:54:80:0a:88:f3:00:83:13:e1:b0:de:
         dd:6e:83:3a:84:8d:e0:53:fd:5b:98:4b:3e:9f:07:5c:97:59:
         7c:e0:dd:05:32:ca:98:53:c2:80:87:fd:aa:14:65:47:7b:17:
         2a:d4:30:6f:e0:e9:04:ec:17:fc:7a:63:d0:5c:da:1a:cb:f3:
         02:8e:50:86:68:9e:7e:08:08:f4:b0:7e:ef:e0:83:36:49:62:
         42:c8:d5:cb:f3:bf:5e:e6:7b:77:e3:a0:fe:29:3b:35:fd:a7:
         3a:30:aa:18:fd:a9:2c:b8:53:65:e1:d2:89:c9:f2:a5:8d:c9:
         ce:4d:5f:d5:8e:2c:09:4b:b4:52:94:40:e8:94:2b:18:81:b3:
         25:76:8f:ab:50:93:dd:4f:88:93:59:79:47:88:46:f7:18:43:
         b9:10:20:66:5a:a6:98:6e:eb:ae:bc:bc:d2:64:1d:8a:ac:9f:
         27:a1:e6:37:f4:9c:07:6f:ee:7e:e7:d3:3c:89:66:90:54:d0:
         c0:9b:6f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org