Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/3137372e37342e3137362e302f32322d3232203d3e20323638323035.roa
File:                     3137372e37342e3137362e302f32322d3232203d3e20323638323035.roa (raw, json)
Hash identifier:          il/CqpkFU27N230ePUcyOkGD7Kiik58Pwojy50TxO9g=
Subject key identifier:   58:78:47:08:73:AC:BE:FD:6C:01:7B:65:3D:E6:F0:B4:45:6A:C0:4B
Certificate issuer:       /CN=154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532
Certificate serial:       095FD8CE55A7FB9EDC15FB27BC8426A6C7B89B37
Authority key identifier: 15:4C:1B:45:8D:0C:AC:7F:C3:D6:34:4F:92:C0:EB:41:CE:5B:25:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/3137372e37342e3137362e302f32322d3232203d3e20323638323035.roa
Signing time:             Tue 07 Feb 2023 10:12:20 +0000
ROA not before:           Tue 07 Feb 2023 10:07:20 +0000
ROA not after:            Tue 06 Feb 2024 10:12:20 +0000
asID:                     268205
IP address blocks:        177.74.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5f:d8:ce:55:a7:fb:9e:dc:15:fb:27:bc:84:26:a6:c7:b8:9b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532
        Validity
            Not Before: Feb  7 10:07:20 2023 GMT
            Not After : Feb  6 10:12:20 2024 GMT
        Subject: CN=5878470873ACBEFD6C017B653DE6F0B4456AC04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d2:bf:ea:12:74:eb:e0:31:ee:cc:d8:6f:92:
                    2b:d7:e0:56:87:21:32:26:ec:ae:0d:ce:60:e6:f5:
                    28:66:4f:4a:e9:14:f6:b3:d9:c4:3f:fc:1c:e1:36:
                    f7:e0:6b:d9:fe:4d:6b:11:ce:30:b5:0e:25:28:f2:
                    de:58:d6:fc:70:bf:ed:c9:ed:b3:27:a6:2f:01:f4:
                    f0:55:25:bd:71:6c:f7:44:31:79:4b:7f:aa:dd:9d:
                    01:b1:11:85:fb:f7:62:b7:0c:a2:6d:f4:35:51:8f:
                    b6:d8:ed:05:c8:87:76:af:b0:b5:38:e4:c5:8f:99:
                    f7:3c:45:07:df:f3:f2:79:a1:83:f9:2a:cf:7b:22:
                    c3:06:fc:0b:73:6b:5c:55:8f:73:c0:8a:1d:ed:a7:
                    dc:c0:81:c6:1e:b1:f1:c6:fe:64:9c:58:b3:b6:2d:
                    e0:3e:32:90:dc:87:d8:42:20:26:cb:f9:49:96:25:
                    4f:5c:9a:2a:67:fa:f8:01:ea:ea:cc:0e:db:8d:90:
                    61:d3:95:2b:b8:26:8a:af:a4:5c:d8:6e:b6:88:2e:
                    a9:2f:af:45:af:b4:3e:d9:f4:4c:09:05:97:3c:a9:
                    a8:86:ae:7e:69:2c:cc:d1:71:d5:0c:25:95:b5:43:
                    4a:4a:98:7d:20:c7:4a:d8:b7:65:ea:ae:44:3c:3d:
                    48:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:78:47:08:73:AC:BE:FD:6C:01:7B:65:3D:E6:F0:B4:45:6A:C0:4B
            X509v3 Authority Key Identifier:
                keyid:15:4C:1B:45:8D:0C:AC:7F:C3:D6:34:4F:92:C0:EB:41:CE:5B:25:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/3137372e37342e3137362e302f32322d3232203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:c8:46:62:7e:02:c0:fc:9d:76:10:95:8d:b6:6c:b5:0d:68:
         a4:c0:96:9b:7c:b6:6c:23:18:15:94:45:d7:8f:c0:6c:71:ab:
         b6:36:61:05:59:d0:aa:27:5f:eb:73:8d:ed:b7:81:17:ae:89:
         4f:3b:bd:dc:8a:66:a3:c5:de:14:52:42:eb:0b:c9:b6:82:62:
         a5:8b:d6:c4:a2:b9:2e:46:dc:e3:b8:3f:6c:a7:4f:13:4f:43:
         c6:36:ad:44:aa:71:30:c6:4a:f0:c2:75:7c:d2:5d:44:cf:7e:
         3f:fe:9d:bd:8e:42:49:f9:3b:3f:fb:15:ed:5b:f5:ee:63:67:
         94:7b:c7:18:75:0e:7f:49:c8:50:8b:3f:5c:77:ed:65:ec:ec:
         d3:f6:10:d8:5b:d2:85:48:77:d5:1a:6b:1d:d6:7e:d5:65:b2:
         c9:32:4b:28:7e:28:f1:87:f3:de:44:28:e8:a5:23:ff:b8:9f:
         34:65:66:20:c2:4a:e6:68:b9:51:d7:6a:5d:11:5f:7c:be:f3:
         09:63:65:4b:85:3d:0f:ad:71:53:49:a1:3f:36:c2:9a:11:c3:
         be:4c:26:3a:cd:64:30:85:a7:6e:af:d5:79:c8:f2:e3:bd:16:
         1d:3e:92:a0:d1:9d:72:ce:cf:46:8b:45:cd:6b:3c:63:f0:8f:
         2f:c2:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org