Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/3137372e31302e302e302f32302d3234203d3e203533323330.roa
File:                     3137372e31302e302e302f32302d3234203d3e203533323330.roa (raw, json)
Hash identifier:          zwxIGssEjYpgJUun4yiWKeG0UXoioJ+a2ydwyi3qHDg=
Subject key identifier:   12:F2:99:C3:7C:32:2C:82:AD:D4:6A:ED:8F:69:98:13:0E:7F:48:20
Certificate issuer:       /CN=C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963
Certificate serial:       5084837F5C93D618DEE0CEC639AB99A09D86EA2F
Authority key identifier: C5:BA:C0:57:CD:6E:7D:6B:44:75:B5:D2:75:E1:DB:63:F3:B8:B9:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/3137372e31302e302e302f32302d3234203d3e203533323330.roa
Signing time:             Tue 19 Mar 2024 18:21:06 +0000
ROA not before:           Tue 19 Mar 2024 18:16:06 +0000
ROA not after:            Tue 18 Mar 2025 18:21:06 +0000
asID:                     53230
IP address blocks:        177.10.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:84:83:7f:5c:93:d6:18:de:e0:ce:c6:39:ab:99:a0:9d:86:ea:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963
        Validity
            Not Before: Mar 19 18:16:06 2024 GMT
            Not After : Mar 18 18:21:06 2025 GMT
        Subject: CN=12F299C37C322C82ADD46AED8F6998130E7F4820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0b:1c:81:19:e8:53:9f:40:ca:46:50:b3:ad:
                    ef:c6:c5:b1:00:9c:3e:dc:52:05:c2:c0:65:4a:d7:
                    96:88:1c:da:93:e5:e5:4c:1c:b5:3b:08:c0:e1:af:
                    93:2f:bd:f9:ef:de:61:d5:f4:67:f5:98:28:ce:3e:
                    0e:0d:40:ae:1f:9d:ff:73:fe:df:bc:29:5b:0a:dc:
                    9b:6e:98:86:0d:53:77:2c:15:fd:fd:b1:38:fe:73:
                    59:db:b1:3f:c2:32:20:df:38:b8:26:2a:9b:e7:00:
                    53:9f:10:83:bb:b0:d7:17:ee:99:b8:1d:a6:2c:bf:
                    42:4b:f2:06:6b:d4:4a:66:dc:81:a0:56:17:0d:fa:
                    62:01:be:1e:da:b3:45:c4:be:a6:fe:31:64:62:a1:
                    0d:eb:d9:34:b9:02:be:99:5f:a7:48:93:4a:53:6d:
                    96:35:9e:cc:c5:e3:09:c0:6b:8a:bd:82:79:94:d4:
                    3b:b4:8f:dd:7b:22:6e:7c:fb:f4:40:1c:f3:4c:cc:
                    7f:1f:0a:bb:2b:c7:f6:48:eb:18:4c:e5:cc:c2:f8:
                    c5:73:0b:1e:51:f1:a3:85:e3:15:97:02:7d:b2:84:
                    18:47:67:61:67:48:b2:f6:8a:cc:c4:70:fd:12:80:
                    7f:39:c1:81:f9:17:60:a6:51:f6:c7:f0:b8:ea:d7:
                    9b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F2:99:C3:7C:32:2C:82:AD:D4:6A:ED:8F:69:98:13:0E:7F:48:20
            X509v3 Authority Key Identifier:
                keyid:C5:BA:C0:57:CD:6E:7D:6B:44:75:B5:D2:75:E1:DB:63:F3:B8:B9:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5BAC057CD6E7D6B4475B5D275E1DB63F3B8B963.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/0/3137372e31302e302e302f32302d3234203d3e203533323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:ad:f7:5f:4f:5c:68:bc:db:04:8a:d4:bc:d5:43:c5:51:8d:
         cc:74:4d:68:c3:02:a1:79:30:31:3c:32:35:56:0b:63:03:fc:
         48:df:1f:ef:d1:d0:56:70:5a:a4:58:f5:c5:53:f7:98:5f:8d:
         f0:54:78:97:2f:70:18:ad:7c:af:cd:a9:d6:2c:60:d0:ea:5a:
         3f:cb:46:7f:45:f9:61:b7:66:6e:ad:40:2f:e4:9d:82:ae:b7:
         8a:43:dd:a9:00:c6:88:65:c8:cc:e5:7f:ac:43:a1:cb:c4:1e:
         52:5b:28:f1:49:47:08:39:c6:58:6f:be:6d:42:eb:7f:c8:08:
         10:df:fa:e1:04:a1:e9:2d:3f:b7:fc:f7:d9:23:57:31:a3:f3:
         b9:61:71:4c:00:1e:23:90:7e:ac:eb:7e:bb:b4:e6:cb:35:fa:
         9f:52:ff:d5:ca:14:4a:0b:3b:2b:28:aa:f0:e0:c5:4a:c2:b6:
         c2:e9:e8:d8:35:e9:ad:8d:e6:08:ba:19:ad:6b:de:4c:7c:82:
         77:25:fa:31:10:a6:68:c5:08:f7:68:e3:d1:70:62:0e:07:c8:
         42:c6:6a:50:a4:22:d2:71:bc:f4:4a:df:e1:ea:9a:17:7e:bb:
         2c:47:ad:c8:4f:3f:23:e6:91:0c:75:1b:fc:bd:cc:78:d9:c9:
         db:74:5d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org