Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35382e302f32342d3234203d3e203532393330.roa
File:                     3137372e3138352e35382e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          OBkrUhXmmvVjsIqaf4AY3VP5ZEyhw7+epS1RIOM8Q14=
Subject key identifier:   B9:39:18:45:80:BD:E7:62:3A:90:68:DE:E6:3D:AF:E2:60:B7:E1:F6
Certificate issuer:       /CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Certificate serial:       074503245C620DF3C47B0AC958AD8E5BCBE2500F
Authority key identifier: AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35382e302f32342d3234203d3e203532393330.roa
Signing time:             Sat 06 Apr 2024 17:29:21 +0000
ROA not before:           Sat 06 Apr 2024 17:24:21 +0000
ROA not after:            Sat 05 Apr 2025 17:29:21 +0000
asID:                     52930
IP address blocks:        177.185.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:45:03:24:5c:62:0d:f3:c4:7b:0a:c9:58:ad:8e:5b:cb:e2:50:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
        Validity
            Not Before: Apr  6 17:24:21 2024 GMT
            Not After : Apr  5 17:29:21 2025 GMT
        Subject: CN=B939184580BDE7623A9068DEE63DAFE260B7E1F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:75:e4:41:03:13:e6:d8:27:de:8f:90:ed:
                    b1:6e:fa:eb:b6:cc:07:20:96:eb:87:a4:0f:16:f0:
                    b2:ec:d3:69:59:0c:12:1c:40:de:98:79:37:f3:29:
                    09:25:f3:5b:a1:41:37:be:f9:cf:4d:9e:a1:f6:5c:
                    3a:98:50:05:db:fa:29:b3:1c:25:78:15:b5:59:d8:
                    9d:61:74:cb:ce:6e:2e:a5:b7:8d:80:77:ee:b7:9f:
                    59:96:7e:0e:3f:d4:6b:53:21:46:8a:a2:5f:16:51:
                    de:ab:39:b3:f2:c0:5c:8a:e0:f1:32:bc:08:15:c1:
                    e2:dc:88:02:b5:1c:78:c7:c0:77:a5:18:e7:91:38:
                    c5:16:99:ac:db:58:fc:d9:85:08:e5:4d:df:d5:9d:
                    91:bc:77:d4:5f:b3:0c:c6:16:95:ac:75:c9:98:26:
                    f3:20:73:0f:29:13:74:0b:8b:77:83:30:92:62:dd:
                    da:60:09:90:88:e9:8f:ca:37:57:0f:f4:e2:72:b0:
                    a7:2c:4f:d8:af:3a:33:a6:45:f3:76:62:9f:b8:05:
                    64:73:d2:61:a2:a0:de:69:c1:30:51:5e:7a:24:5d:
                    ba:e3:8a:38:55:96:8a:1d:09:d5:74:31:26:44:dd:
                    4b:9f:85:95:c4:b5:10:b8:a3:54:c4:4a:a3:a7:10:
                    b7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:39:18:45:80:BD:E7:62:3A:90:68:DE:E6:3D:AF:E2:60:B7:E1:F6
            X509v3 Authority Key Identifier:
                keyid:AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3137372e3138352e35382e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:8c:0e:42:9b:d9:71:87:40:9b:4e:5c:4f:f2:81:2b:9b:83:
         b9:67:e0:9b:81:5f:ee:fb:ed:30:3b:cc:7e:20:f5:fc:c1:33:
         d2:65:28:a8:76:27:89:26:d8:66:5c:f1:3f:81:7a:34:c8:03:
         65:46:2e:6d:36:8e:e7:30:16:1a:37:14:b2:b4:6e:bc:19:b9:
         c4:09:9c:59:e9:9a:4c:e1:be:3a:3d:9d:14:d8:6c:c2:15:5f:
         a0:9e:c7:41:5e:5e:29:91:28:2b:17:ba:c3:a1:6b:3d:f3:7b:
         d5:08:ee:b9:83:ee:a7:cf:ad:dd:4b:8f:25:c7:f5:69:86:85:
         3e:0a:1f:9b:61:36:d6:d5:30:6d:0e:65:c1:bf:1d:23:0b:4e:
         72:97:67:d0:83:4a:14:76:9a:ed:8e:61:56:90:dc:e9:be:16:
         ff:a4:f5:f6:ec:5c:cb:61:b0:b8:7d:4a:24:2d:c6:e3:27:5b:
         e2:ab:d1:6e:e7:af:f1:76:46:97:f5:4b:64:aa:1e:00:d3:07:
         ee:01:76:9a:c4:ee:0f:b7:4a:4b:42:2d:bc:1e:0c:ca:92:47:
         bc:74:ad:1f:42:63:bd:c5:54:9e:35:a1:6c:ea:df:00:42:52:
         20:16:2e:66:e0:78:fc:ef:ec:87:97:2c:4b:34:55:86:01:6f:
         e3:c0:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org