Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35372e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e35372e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          y53KOPquVhZqTnXbZDiHHGWz8FQ25iMzblqKH8JFDws=
Subject key identifier:   A7:86:CE:AA:45:04:8D:87:4F:C0:40:90:26:3F:D5:45:5D:6A:F3:00
Certificate issuer:       /CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Certificate serial:       185E567B0E08CEE76B703BF46E2B7FDFAAA25C47
Authority key identifier: AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35372e302f32342d3234203d3e203532393330.roa
Signing time:             Sat 06 Apr 2024 17:29:14 +0000
ROA not before:           Sat 06 Apr 2024 17:24:14 +0000
ROA not after:            Sat 05 Apr 2025 17:29:14 +0000
asID:                     52930
IP address blocks:        177.185.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5e:56:7b:0e:08:ce:e7:6b:70:3b:f4:6e:2b:7f:df:aa:a2:5c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
        Validity
            Not Before: Apr  6 17:24:14 2024 GMT
            Not After : Apr  5 17:29:14 2025 GMT
        Subject: CN=A786CEAA45048D874FC04090263FD5455D6AF300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ed:75:51:28:31:0e:79:18:1c:07:52:a3:ab:
                    f9:4c:f0:73:de:87:25:1b:d4:86:2f:40:21:7e:a2:
                    79:61:72:0f:98:92:97:32:98:15:6e:2c:88:0c:85:
                    b9:93:2a:70:81:74:62:eb:32:ba:53:9d:ff:0b:70:
                    2f:c2:95:44:2f:6e:20:70:9b:e5:8e:f7:ba:30:e0:
                    1d:9f:af:38:58:25:ec:dc:64:61:ec:47:56:80:35:
                    7f:cb:fa:b4:2a:82:01:64:62:66:d6:0a:61:88:73:
                    4d:a7:72:9b:d2:0e:45:5e:b4:08:18:e3:17:33:e2:
                    df:5d:cb:8c:da:79:01:87:4c:00:95:50:08:f7:4d:
                    03:80:fc:4a:a5:5b:d2:ea:33:e8:33:bb:ce:39:48:
                    fb:a3:6b:2e:e4:bd:be:41:0f:82:db:7e:37:8e:ee:
                    e0:66:c8:50:f3:26:7c:9d:c3:cf:78:2a:34:b4:fc:
                    84:69:17:31:30:73:4d:62:15:6d:97:0a:6c:9b:3a:
                    bb:f7:92:18:ad:e5:e9:51:fb:37:fb:43:24:f2:68:
                    9a:7f:6b:83:1a:60:fd:bf:15:03:db:3e:ec:ae:a4:
                    63:9b:03:4d:63:1d:d7:05:c2:e6:97:c1:37:10:15:
                    8d:b0:ba:c2:cc:1e:5b:ac:1d:a6:5d:46:32:c3:06:
                    ff:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:86:CE:AA:45:04:8D:87:4F:C0:40:90:26:3F:D5:45:5D:6A:F3:00
            X509v3 Authority Key Identifier:
                keyid:AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35372e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:74:d1:b2:cc:2a:8a:5a:74:14:74:25:1f:bd:fc:70:ab:ae:
         c6:f3:55:b0:2f:3a:49:06:c0:a6:11:b3:27:dc:02:81:d8:75:
         89:14:e4:5b:86:9f:60:32:84:be:d7:72:81:1a:e9:94:5e:04:
         65:d1:75:6b:3a:53:59:34:e8:c2:65:61:2d:3d:39:a4:5b:0f:
         66:e4:8a:85:5a:11:a7:a7:7c:e0:30:8c:49:af:dc:07:d3:35:
         fd:ec:78:bb:e6:bf:60:b6:dc:64:ac:59:4f:b0:67:c4:b0:ee:
         c2:06:b7:1d:d0:33:9a:1d:38:06:b6:30:5f:7a:f2:3e:0d:dc:
         9f:86:30:65:e9:aa:2a:ab:fe:77:ab:22:ab:50:e2:42:67:de:
         45:b2:6c:f5:6e:03:13:47:57:9e:1b:c7:66:f9:49:99:9e:5f:
         97:8f:0f:7e:e7:2c:08:cd:3a:ce:70:0c:8e:c7:8b:42:df:71:
         03:27:20:1c:d8:17:20:c9:36:52:6f:cd:f4:68:f6:8e:c2:f4:
         c2:a6:67:6e:c9:f0:99:2a:c3:ad:ec:64:9f:c3:10:9a:d7:39:
         ea:25:d9:10:e8:c5:ad:45:a3:57:e9:6a:81:ab:4d:fd:f2:e0:
         a4:da:94:6c:e1:11:f6:38:ea:61:31:b0:0e:a6:74:cd:f7:79:
         5a:0b:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org