Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35322e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e35322e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          P71+HGl0kArdFsIGYIj3peN/cVzYMAMOgCVAsBTzpw0=
Subject key identifier:   19:EE:9C:69:A2:7F:BA:04:77:55:43:07:A0:D2:88:71:CC:3C:0F:84
Certificate issuer:       /CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Certificate serial:       613EEC93113C06A4241F0E79E2E6FA12267F6B7A
Authority key identifier: AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35322e302f32342d3234203d3e203532393330.roa
Signing time:             Sat 06 Apr 2024 17:27:09 +0000
ROA not before:           Sat 06 Apr 2024 17:22:09 +0000
ROA not after:            Sat 05 Apr 2025 17:27:09 +0000
asID:                     52930
IP address blocks:        177.185.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3e:ec:93:11:3c:06:a4:24:1f:0e:79:e2:e6:fa:12:26:7f:6b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
        Validity
            Not Before: Apr  6 17:22:09 2024 GMT
            Not After : Apr  5 17:27:09 2025 GMT
        Subject: CN=19EE9C69A27FBA0477554307A0D28871CC3C0F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:70:29:4f:24:2e:6b:2f:c9:c1:7c:b0:bb:b2:
                    b4:00:9c:c5:38:c7:c0:2b:2b:1f:3d:ca:83:eb:18:
                    d0:9d:02:d8:83:52:b3:8d:8e:c8:5d:81:48:b6:d9:
                    1e:ab:61:13:c8:ee:5b:c5:38:58:0e:b0:1f:ef:41:
                    35:12:0d:6f:7d:60:26:d2:c8:02:93:39:9b:d7:b5:
                    06:9d:7a:0c:22:96:67:6d:4e:ab:f7:09:0f:e7:1f:
                    8f:ad:08:33:6c:f5:3f:4e:88:10:c2:50:f4:07:32:
                    7a:03:fe:c3:e9:02:6e:6d:d9:be:ab:76:69:1b:00:
                    06:f1:47:ec:59:ff:7d:cf:f2:c4:3c:7c:4a:44:4e:
                    19:4c:42:db:06:43:86:45:1b:a4:3b:46:5a:24:b3:
                    e9:96:e4:e4:78:c0:f5:de:d6:df:8f:4d:ff:10:80:
                    2e:21:14:74:4a:de:05:91:f7:ff:10:ed:56:77:1c:
                    a8:8c:19:86:26:59:6b:09:1a:76:57:c2:44:1d:fe:
                    71:93:44:ef:92:df:95:7a:d2:e9:b8:78:bd:80:f1:
                    fd:09:8a:87:a3:2c:c6:09:15:8d:73:53:91:a1:34:
                    0e:39:d3:27:a1:c2:c6:c1:0c:69:4c:17:a9:6d:ed:
                    60:d9:31:7e:1f:5f:57:91:51:6c:89:e4:b6:e3:86:
                    e5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EE:9C:69:A2:7F:BA:04:77:55:43:07:A0:D2:88:71:CC:3C:0F:84
            X509v3 Authority Key Identifier:
                keyid:AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35322e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:08:a0:7e:7c:d6:e4:ed:fe:21:f0:7d:53:37:39:01:73:
         f7:fc:9c:48:83:74:e3:b5:ae:e2:d2:4a:f2:be:3e:4d:1c:91:
         91:23:3f:a9:44:47:6c:27:aa:a0:6e:5e:bd:82:2f:04:7f:ac:
         9c:9f:d8:a8:41:93:82:fa:fd:10:e5:b1:c2:f7:e8:79:1a:76:
         21:26:78:e7:f2:62:6f:f5:4c:3e:a9:3d:81:d0:2a:ff:ce:0d:
         ec:08:ab:e3:73:0d:3e:ec:48:50:db:bc:d3:4e:d5:a7:1a:78:
         30:e8:5f:a7:78:f6:6a:d7:da:48:e6:3d:4d:68:af:51:b3:e4:
         cf:00:a2:d2:d2:c2:58:d5:f4:cf:c3:4b:eb:9d:f4:ed:bc:8b:
         f3:bf:d9:8a:b3:63:f7:6d:63:31:4a:74:d9:49:c8:b7:2d:f9:
         80:ff:0b:b7:4f:dd:80:b8:ac:92:cd:0c:62:ba:e9:b9:90:50:
         4b:eb:5f:78:bb:d0:a3:ca:b8:6b:00:6c:d3:14:55:6a:10:c3:
         80:d7:ef:47:1c:fb:f3:87:8b:2e:df:66:f7:30:fb:20:1d:ed:
         b8:c7:f3:e3:59:3c:f9:3c:cc:7f:8e:78:12:07:27:05:91:32:
         42:0d:4a:86:fe:39:8d:b8:4c:7c:e6:33:3e:ee:50:17:b3:da:
         15:3c:ea:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org