Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/0/3137372e35332e3137362e302f32322d3234203d3e20323632343735.roa
File:                     3137372e35332e3137362e302f32322d3234203d3e20323632343735.roa (raw, json)
Hash identifier:          YToZPvn4JR45O9dRqO/iC+8rYM18gthNApvyd4z1lZs=
Subject key identifier:   29:31:95:11:3D:4C:91:20:68:B9:BC:BC:B3:31:59:3F:17:A9:E6:E0
Certificate issuer:       /CN=3E5507FF839B31FBD17EEC9088B45AE80EC19683
Certificate serial:       712A47849E4487B453591F72299AABFC688B0E9E
Authority key identifier: 3E:55:07:FF:83:9B:31:FB:D1:7E:EC:90:88:B4:5A:E8:0E:C1:96:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E5507FF839B31FBD17EEC9088B45AE80EC19683.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/0/3137372e35332e3137362e302f32322d3234203d3e20323632343735.roa
Signing time:             Tue 25 Jul 2023 20:34:42 +0000
ROA not before:           Tue 25 Jul 2023 20:29:42 +0000
ROA not after:            Tue 23 Jul 2024 20:34:42 +0000
asID:                     262475
IP address blocks:        177.53.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2a:47:84:9e:44:87:b4:53:59:1f:72:29:9a:ab:fc:68:8b:0e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E5507FF839B31FBD17EEC9088B45AE80EC19683
        Validity
            Not Before: Jul 25 20:29:42 2023 GMT
            Not After : Jul 23 20:34:42 2024 GMT
        Subject: CN=293195113D4C912068B9BCBCB331593F17A9E6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:e3:71:9e:af:2e:78:58:90:74:00:22:92:
                    0a:f5:64:cc:bc:03:93:eb:47:3d:00:13:5f:d6:17:
                    21:ae:a9:a4:e6:7a:47:ae:19:3a:62:9b:ec:88:51:
                    0c:60:7f:9c:85:5f:ad:fb:3e:08:ff:d2:03:ab:ed:
                    4a:be:70:2e:87:09:c2:23:38:95:a7:91:00:fd:37:
                    8b:1b:c6:39:14:9c:71:27:ae:ea:d3:bb:64:d6:b4:
                    81:d5:07:f7:b0:9c:59:ec:e5:7a:97:d4:87:4e:39:
                    28:fa:57:4a:8b:09:17:f8:f0:82:1e:d6:b6:d0:82:
                    98:14:17:cd:5a:68:d0:d8:12:d3:ea:5d:ed:84:42:
                    3e:aa:ef:b0:a6:dd:92:00:44:62:f6:a4:d9:70:14:
                    ba:da:ee:d4:50:d8:10:25:00:a6:f5:88:1c:38:3e:
                    86:ef:e7:77:f1:95:d0:b1:72:ef:ae:d7:d7:37:b9:
                    ef:dd:d3:d0:f4:7a:ca:76:a6:b3:0a:6d:d5:40:6f:
                    8c:4e:ac:a1:8f:74:52:1c:dd:32:ff:71:2f:ab:b2:
                    63:18:39:83:c2:54:ee:f9:df:9c:e6:9d:ab:e7:3c:
                    cf:52:36:5e:02:8f:21:50:68:7f:18:73:02:8f:3f:
                    eb:50:9a:6a:e4:f0:43:1e:4a:4b:d8:4c:eb:d2:f9:
                    26:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:31:95:11:3D:4C:91:20:68:B9:BC:BC:B3:31:59:3F:17:A9:E6:E0
            X509v3 Authority Key Identifier:
                keyid:3E:55:07:FF:83:9B:31:FB:D1:7E:EC:90:88:B4:5A:E8:0E:C1:96:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/0/3E5507FF839B31FBD17EEC9088B45AE80EC19683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E5507FF839B31FBD17EEC9088B45AE80EC19683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDu7qDnQhpraJirn4hutp5jpeEFkCRG2MkZmDAWdZzKj/0/3137372e35332e3137362e302f32322d3234203d3e20323632343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:5d:19:a5:ed:7d:5b:f3:0f:81:a8:ef:15:5d:6f:41:7e:e1:
         e0:2a:a0:57:d7:95:e2:91:53:7b:7d:93:8f:b1:06:19:cf:89:
         00:aa:a5:9c:82:6d:d0:8c:18:59:2d:d6:64:28:6e:50:1b:96:
         97:32:43:24:fd:dd:1a:50:d3:2b:3d:0c:2d:7d:bc:fa:7f:bb:
         11:02:53:5c:c1:ab:dd:94:b7:12:73:9e:49:dd:75:42:dc:d2:
         c6:45:c1:05:b7:ef:7d:5e:d2:9d:02:89:66:a6:68:77:6c:ce:
         ce:9a:87:c1:16:d4:ce:1f:6e:3a:2e:13:ed:73:4c:5e:7b:bc:
         7d:28:f8:a7:af:b1:21:53:c1:f9:de:02:0d:a5:42:f0:ba:f8:
         0d:a6:02:b1:53:46:e5:4d:f3:15:da:5e:ec:7e:e6:71:cb:51:
         4a:c4:5f:79:75:f3:0f:1a:27:dc:3f:a5:f5:0d:f6:b8:a9:dd:
         33:9b:55:3a:ff:86:aa:d1:80:85:0e:67:c9:07:cb:40:3f:02:
         8f:dc:3c:bb:26:08:15:8e:e5:f5:6c:30:1c:22:4c:43:1a:0f:
         d3:96:ee:0d:dc:5f:e2:b7:d6:b0:40:72:12:cf:b9:5a:5e:cf:
         44:be:a9:89:26:11:b3:10:81:2f:eb:1e:c0:36:75:ac:c7:da:
         ec:41:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org