Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3231342e302f32332d3234203d3e203532393635.roa
File:                     3137372e37322e3231342e302f32332d3234203d3e203532393635.roa (raw, json)
Hash identifier:          8rZWjXf5a8E9XAlEjk7QNY8RSntgGqZ43bZxvsfdtQU=
Subject key identifier:   88:A2:9F:77:B1:84:7B:C6:5F:3D:0A:43:38:07:42:5B:4D:23:CD:81
Certificate issuer:       /CN=3235A266D447CA3B72A35513BA9761F5805F23E2
Certificate serial:       5A6AA13C11456EBE3F706ACC3EBAA87E140C53E9
Authority key identifier: 32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3231342e302f32332d3234203d3e203532393635.roa
Signing time:             Fri 10 Mar 2023 11:07:21 +0000
ROA not before:           Fri 10 Mar 2023 11:02:21 +0000
ROA not after:            Fri 08 Mar 2024 11:07:21 +0000
asID:                     52965
IP address blocks:        177.72.214.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6a:a1:3c:11:45:6e:be:3f:70:6a:cc:3e:ba:a8:7e:14:0c:53:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3235A266D447CA3B72A35513BA9761F5805F23E2
        Validity
            Not Before: Mar 10 11:02:21 2023 GMT
            Not After : Mar  8 11:07:21 2024 GMT
        Subject: CN=88A29F77B1847BC65F3D0A433807425B4D23CD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e5:c8:f3:91:ef:e6:11:66:c7:7f:d8:45:c5:
                    d1:6c:b7:c2:d0:dc:e6:17:c3:ae:e9:0f:2f:a1:08:
                    27:44:1a:75:32:29:29:20:51:9c:a0:6c:c0:f6:61:
                    24:31:9e:99:56:69:67:94:c5:46:c3:5d:dc:85:dd:
                    97:b0:00:a8:77:ac:31:64:58:db:96:66:5d:f0:d2:
                    a7:d3:55:14:90:bb:67:e6:55:c8:7f:00:cb:d6:8b:
                    f0:fc:e2:48:10:78:63:65:98:27:aa:75:11:68:f5:
                    33:43:ec:b7:45:58:b2:32:72:8a:63:3e:3a:95:54:
                    79:cd:c7:ba:d5:2e:3c:14:d8:35:33:0e:d8:fb:c0:
                    03:d4:e8:e3:50:3a:32:d5:7c:fe:9d:9c:af:f2:ad:
                    d6:15:15:31:ff:d1:5c:db:8c:9c:a7:89:97:b0:46:
                    7c:e0:be:2b:f9:b8:f1:60:9f:9d:97:db:07:63:8d:
                    8d:c3:dc:4b:a3:7f:d9:b9:0f:09:71:a2:33:b9:eb:
                    15:c8:ef:59:90:94:ff:69:c9:ed:60:51:52:20:1b:
                    a6:83:ab:a0:22:c9:44:eb:10:76:47:a4:89:ae:28:
                    00:d4:df:e8:19:3c:3b:40:91:77:7c:dc:fa:79:86:
                    cb:10:e4:81:d9:f7:cc:03:86:5f:98:c6:35:44:51:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A2:9F:77:B1:84:7B:C6:5F:3D:0A:43:38:07:42:5B:4D:23:CD:81
            X509v3 Authority Key Identifier:
                keyid:32:35:A2:66:D4:47:CA:3B:72:A3:55:13:BA:97:61:F5:80:5F:23:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3235A266D447CA3B72A35513BA9761F5805F23E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3235A266D447CA3B72A35513BA9761F5805F23E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/1/3137372e37322e3231342e302f32332d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:8a:7f:4b:17:8f:05:07:d2:cd:29:cb:52:89:ce:b6:22:68:
         11:2c:6b:b3:6f:ba:86:5d:f7:c9:0d:7f:2a:43:fc:b9:2d:5a:
         9f:cd:3f:c9:72:ae:f8:7d:7f:ac:f8:eb:44:d3:49:62:fa:56:
         06:82:9f:94:ad:eb:99:49:a0:2f:1e:68:2d:97:91:f3:11:ed:
         ad:15:97:1f:67:42:89:15:56:0f:a8:91:a7:fd:56:5c:0e:fa:
         55:95:e9:87:39:b4:27:85:65:fb:e4:ed:eb:3f:a9:c2:68:6a:
         44:9d:43:76:a8:f2:6a:e8:ce:f9:6b:27:e0:93:f6:83:14:6e:
         8e:c2:5c:cc:68:63:66:9a:cb:8c:fe:e5:5b:bd:86:df:ea:a4:
         6e:5c:b8:95:9a:fb:b4:62:d0:db:97:26:b5:30:4b:a1:cd:09:
         95:71:b1:38:54:c7:47:c8:ea:12:37:2c:11:b5:5b:ab:ad:5a:
         e4:8b:51:b5:5a:e7:b8:f4:79:5e:59:e0:b5:f6:da:88:d8:30:
         30:55:db:31:5e:9a:2f:06:dd:16:36:5e:dd:15:5a:75:db:f3:
         75:a0:3d:ea:c9:b0:1e:20:90:cb:eb:87:9c:25:a0:86:9c:21:
         fc:00:f3:83:fa:83:60:8c:2e:72:e6:2d:55:ea:61:13:0c:01:
         98:ed:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org