Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35302e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e35302e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          uKskC7g9iCnaw53FrAyNiVtEVmR0KOkJR8jU/9UnyrI=
Subject key identifier:   94:EE:AA:70:BA:30:0A:D5:A8:69:59:ED:1F:E0:B4:00:D9:03:C8:D3
Certificate issuer:       /CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Certificate serial:       1A13B79FCBCB886D9CA775C60BB4EABDE0D07343
Authority key identifier: AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35302e302f32342d3234203d3e203532393330.roa
Signing time:             Sat 06 Apr 2024 17:27:00 +0000
ROA not before:           Sat 06 Apr 2024 17:22:00 +0000
ROA not after:            Sat 05 Apr 2025 17:27:00 +0000
asID:                     52930
IP address blocks:        177.185.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:13:b7:9f:cb:cb:88:6d:9c:a7:75:c6:0b:b4:ea:bd:e0:d0:73:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
        Validity
            Not Before: Apr  6 17:22:00 2024 GMT
            Not After : Apr  5 17:27:00 2025 GMT
        Subject: CN=94EEAA70BA300AD5A86959ED1FE0B400D903C8D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:cd:81:54:6f:ff:eb:f5:7e:1c:ad:27:bc:
                    73:2f:46:90:6e:6d:54:0d:31:66:8f:2e:62:e1:9d:
                    9f:b3:1f:ef:1b:ce:c5:48:3c:0f:66:21:b7:87:d2:
                    fa:a8:91:82:ed:0e:65:14:30:1a:23:6e:1f:75:c8:
                    9f:98:89:85:d2:4f:3a:a1:11:13:6f:69:c4:0b:3f:
                    24:25:7b:33:61:ee:f6:34:29:24:fe:3e:89:1b:38:
                    63:b4:c7:2f:e9:25:7f:fa:89:0f:b0:fb:cb:59:27:
                    e6:f0:f2:f1:73:c0:4b:70:b0:ab:5d:24:a0:9e:75:
                    df:93:bc:0c:10:23:ee:30:9a:ae:38:8b:85:7a:48:
                    84:07:98:68:c7:e1:9c:f4:8e:52:96:66:f1:b6:dc:
                    98:45:7b:a7:f6:87:5d:14:78:ed:0c:15:11:85:89:
                    5e:03:d4:e8:bf:9e:34:fe:25:78:55:58:8a:60:9e:
                    4e:b5:42:40:74:41:f9:a0:da:a9:11:9e:5f:88:b6:
                    ca:23:bc:be:69:2e:69:3b:0e:cd:98:c3:3c:77:d3:
                    75:55:73:17:ef:3e:29:4a:91:16:cc:1e:e4:3d:91:
                    b6:c8:e2:0c:29:cc:0c:02:01:75:32:a4:6a:06:06:
                    d1:9c:6c:5b:4b:33:a2:89:c8:05:94:b6:2b:11:4b:
                    44:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EE:AA:70:BA:30:0A:D5:A8:69:59:ED:1F:E0:B4:00:D9:03:C8:D3
            X509v3 Authority Key Identifier:
                keyid:AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35302e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:38:ce:bb:b2:50:0f:0e:ac:b5:5b:c9:66:a7:73:2d:3b:13:
         fe:04:82:03:21:3a:48:fb:ca:e8:9f:19:17:79:4a:cb:02:bd:
         34:c0:ee:4c:91:2b:68:c7:1e:98:db:31:bf:c4:51:2d:98:81:
         b6:9b:96:e4:6a:e1:92:e8:e6:88:d8:4c:74:2b:c5:5e:6a:3c:
         63:05:29:82:e1:b2:4e:17:28:ec:2c:90:eb:28:21:e4:59:46:
         3a:f6:e0:51:cb:6c:76:f7:de:83:cd:86:d0:27:80:2a:26:d7:
         6d:02:31:52:57:94:f5:ee:b4:87:f9:3b:13:de:5d:71:86:9c:
         dd:9c:c7:7d:2a:ff:dd:2e:b1:40:55:4e:a9:bc:56:db:03:3f:
         a1:65:09:a9:76:5b:49:69:c8:22:ee:b1:1f:b1:64:b4:ed:12:
         29:d0:06:48:4b:77:2b:d8:1b:67:e5:80:9d:ff:66:ec:09:71:
         2e:27:b6:30:1d:43:57:b7:21:7c:69:ab:66:0d:d6:9c:de:5c:
         78:ec:e8:43:6e:f8:b7:80:08:ce:6d:f8:ac:32:e1:57:5d:34:
         7b:82:2c:51:50:59:60:77:e6:d9:47:9f:29:9d:1a:cb:19:f4:
         0c:34:cf:6f:26:90:39:fa:5a:4b:02:fe:9f:67:51:db:6f:f0:
         52:76:31:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org