Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa
File:                     3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          zzdkGnm/62t5rseVF1RDFcxPgac9ugdJeyjZJOVPzhI=
Subject key identifier:   2C:86:39:6F:EC:8B:F7:5B:C8:52:7A:82:02:8B:27:2A:6D:B8:56:8A
Certificate issuer:       /CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
Certificate serial:       7738EE8E76118E13D838220D0EDBC0FBE9D9558A
Authority key identifier: 59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa
Signing time:             Sun 10 Dec 2023 14:29:47 +0000
ROA not before:           Sun 10 Dec 2023 14:24:47 +0000
ROA not after:            Sun 08 Dec 2024 14:29:47 +0000
asID:                     53062
IP address blocks:        177.155.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:38:ee:8e:76:11:8e:13:d8:38:22:0d:0e:db:c0:fb:e9:d9:55:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
        Validity
            Not Before: Dec 10 14:24:47 2023 GMT
            Not After : Dec  8 14:29:47 2024 GMT
        Subject: CN=2C86396FEC8BF75BC8527A82028B272A6DB8568A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:35:ac:77:2a:6f:03:b1:9f:f5:fc:bf:5c:
                    25:ab:7f:c5:61:55:41:78:93:ce:55:a6:ca:c9:43:
                    33:b1:43:36:36:bc:e9:9d:ea:a9:08:a6:c9:16:f5:
                    32:76:a2:81:47:5e:9d:ae:ce:87:89:52:6e:d5:e3:
                    38:ce:47:3b:96:46:49:ca:e0:c3:59:08:d0:a3:9e:
                    ad:b0:d5:ab:b6:15:19:6b:8f:93:93:7b:cf:6d:77:
                    ff:20:db:97:09:4b:de:1d:0f:a8:bf:ad:5f:c1:11:
                    1e:2e:3e:92:fb:0a:26:10:9a:fb:85:40:aa:cb:80:
                    e1:f2:c7:51:13:81:60:15:ef:30:47:f2:bd:09:a8:
                    2d:2c:e2:6d:fb:87:f1:f1:04:60:d8:a7:3b:62:e0:
                    7e:ce:50:3a:e7:c9:df:c4:f6:02:44:82:96:97:b5:
                    d7:e3:df:39:38:ea:d9:56:c6:4e:92:fb:b0:6b:c7:
                    10:a6:e5:69:e6:50:88:9a:0a:94:23:71:76:25:26:
                    05:05:82:d4:4e:fc:4a:fe:a4:32:90:08:f1:d6:a9:
                    ef:2a:55:a1:bd:df:0a:e2:c3:57:53:87:29:1f:8d:
                    5c:4b:6d:e6:18:66:a1:fb:e3:74:b6:1d:b8:1a:cf:
                    ad:95:ad:34:c1:a8:bf:36:3a:3e:fc:e4:65:bc:ba:
                    c1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:86:39:6F:EC:8B:F7:5B:C8:52:7A:82:02:8B:27:2A:6D:B8:56:8A
            X509v3 Authority Key Identifier:
                keyid:59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:f7:ae:1a:93:a8:cb:6b:a2:32:da:f9:70:ad:15:62:bb:97:
         dc:94:fd:8a:9b:e6:4c:46:6f:b0:ba:66:61:e1:ec:39:82:47:
         0f:d5:de:3b:11:c5:af:5f:aa:ab:a1:ec:a4:80:28:96:3f:a7:
         3f:6d:d8:bd:87:62:a2:1e:d9:6a:2c:02:a7:a4:5f:5a:dc:0d:
         5b:c1:7a:15:49:c2:b2:b6:ac:9e:f5:87:04:3c:e7:29:e0:d6:
         48:c6:90:ca:e5:21:fa:64:8a:e9:79:71:0b:d1:bf:94:07:0a:
         80:88:61:33:bd:bf:20:5f:7d:52:f6:3d:49:0b:99:cf:9a:9b:
         0c:63:05:43:43:13:ae:f3:d3:c6:d8:6e:6e:e2:24:a6:e9:2c:
         42:6e:1a:98:d1:81:37:74:d5:70:90:fb:a7:47:a6:4a:f1:82:
         20:1c:b0:84:6b:36:45:88:7c:b2:88:2d:b6:fb:9d:d6:3b:62:
         ac:e8:d8:d4:49:47:72:57:2e:6c:37:96:d7:80:09:bf:03:c7:
         f8:ad:ca:8a:ec:ed:47:c0:36:02:ff:24:cd:42:21:f9:98:4e:
         47:fa:5e:f4:c7:72:ea:34:7e:06:05:24:cc:6d:14:20:74:7b:
         0f:bf:6b:f0:95:2a:c9:6a:68:fc:57:f0:cd:b1:0a:df:36:38:
         b5:52:6d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:51 2024 by rpki-client on console-ams.rpki-client.org