Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/3137372e31312e36342e302f32312d3231203d3e20323632383732.roa
File:                     3137372e31312e36342e302f32312d3231203d3e20323632383732.roa (raw, json)
Hash identifier:          wQNXSq6OOvmhWkWdmP+L+f3lafY0msi4AkJJY44CDNk=
Subject key identifier:   2E:15:5B:11:A5:A9:BC:C9:04:BA:AE:D9:C2:23:BD:15:60:99:B3:61
Certificate issuer:       /CN=583C53DFDDAB3EB051313E58E5B82EE854B961C7
Certificate serial:       71498AD8EDB7D5661110579A76D19BA8252C3E05
Authority key identifier: 58:3C:53:DF:DD:AB:3E:B0:51:31:3E:58:E5:B8:2E:E8:54:B9:61:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/3137372e31312e36342e302f32312d3231203d3e20323632383732.roa
Signing time:             Sat 07 Jan 2023 11:25:34 +0000
ROA not before:           Sat 07 Jan 2023 11:20:34 +0000
ROA not after:            Sat 06 Jan 2024 11:25:34 +0000
asID:                     262872
IP address blocks:        177.11.64.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:49:8a:d8:ed:b7:d5:66:11:10:57:9a:76:d1:9b:a8:25:2c:3e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583C53DFDDAB3EB051313E58E5B82EE854B961C7
        Validity
            Not Before: Jan  7 11:20:34 2023 GMT
            Not After : Jan  6 11:25:34 2024 GMT
        Subject: CN=2E155B11A5A9BCC904BAAED9C223BD156099B361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:dc:99:9d:b3:68:90:72:30:14:eb:f2:45:
                    ac:c0:01:8b:0e:e4:06:7f:2f:7e:65:15:cf:9c:38:
                    eb:4e:ba:11:a0:1d:b6:63:15:22:49:1a:95:08:52:
                    3f:b4:73:89:79:21:dc:48:2d:6a:f8:3b:0f:30:19:
                    ab:1c:89:a0:be:d2:57:92:3c:70:3a:d5:01:ca:a0:
                    f2:c0:ac:4b:64:32:11:f6:76:b3:b6:73:48:f0:62:
                    33:8e:9c:e8:ca:5d:d6:dc:b9:e7:12:03:3e:de:cc:
                    e1:7f:57:0a:cf:5c:15:f7:18:7f:fd:78:11:d9:8a:
                    77:04:7c:d6:e9:2f:d2:83:fa:b6:da:18:8d:7c:78:
                    39:87:61:70:96:3b:06:8c:a9:c6:d1:0d:db:b0:f4:
                    2d:cd:e3:b0:79:3e:bb:37:ba:ac:66:1d:05:73:61:
                    2f:4e:54:1d:6d:da:92:af:f4:fd:ab:3e:b3:57:76:
                    62:72:b0:5e:d0:d2:1e:e1:cd:d7:61:c4:ff:21:ee:
                    d6:2e:27:a5:c8:22:96:da:bc:f6:d7:66:b9:83:9f:
                    f8:7f:28:ea:2b:65:9e:c6:da:00:74:16:83:ea:c4:
                    f8:92:a3:68:2c:9e:15:62:18:25:b8:71:17:a6:45:
                    ef:13:d8:6c:94:d1:22:23:9a:25:03:b4:e3:e3:58:
                    3e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:15:5B:11:A5:A9:BC:C9:04:BA:AE:D9:C2:23:BD:15:60:99:B3:61
            X509v3 Authority Key Identifier:
                keyid:58:3C:53:DF:DD:AB:3E:B0:51:31:3E:58:E5:B8:2E:E8:54:B9:61:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/583C53DFDDAB3EB051313E58E5B82EE854B961C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/0/3137372e31312e36342e302f32312d3231203d3e20323632383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:36:bd:6e:67:cf:a5:b2:a5:2d:c2:5e:b0:3c:c6:6e:84:88:
         d4:e7:75:c4:49:45:34:dd:07:e2:d5:b5:50:15:55:c9:a9:ad:
         13:03:0a:49:8c:4f:e2:f0:ee:ef:ab:3e:b6:7a:2a:1e:75:ca:
         dc:14:12:37:b1:64:98:65:16:9e:44:20:c5:ae:91:cf:33:14:
         cb:ee:c3:5e:03:31:d2:0b:1d:2d:c6:5e:50:63:9c:7e:7f:17:
         04:f6:75:f5:ad:b6:e8:5a:19:c4:7f:c4:43:15:3e:ba:ec:75:
         0c:c3:fb:22:09:67:59:60:66:25:0f:90:fb:0f:99:69:68:d7:
         55:ec:73:dc:17:bb:8b:81:d1:4a:56:d8:c3:0d:5a:11:99:35:
         5c:56:6d:39:e3:bf:7c:aa:b0:0f:8c:27:45:b1:57:37:55:12:
         3c:43:4a:5b:15:1d:15:e4:e5:31:64:5d:77:45:d4:bb:bc:b6:
         b6:ee:7b:ab:b2:46:69:3b:42:2a:08:df:76:e9:09:ae:cb:b4:
         3d:d4:15:52:f7:17:c8:1a:cb:74:db:58:cf:27:ad:d5:52:57:
         db:36:ea:a4:17:8c:81:47:3e:34:c6:ee:d6:09:32:67:d5:a4:
         f0:56:cc:29:f2:28:12:d3:1f:c0:c4:19:27:ce:4f:7a:29:0f:
         49:31:ff:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org