Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/3137372e36362e3135322e302f32322d3232203d3e20323632343939.roa
File:                     3137372e36362e3135322e302f32322d3232203d3e20323632343939.roa (raw, json)
Hash identifier:          47ud8IHc0hy3czK3WmeKmT90STF3w8c6og7l+bEJ3/I=
Subject key identifier:   BA:ED:24:7A:59:4A:5F:43:99:C2:61:13:89:20:F3:41:52:4F:32:B1
Certificate issuer:       /CN=FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA
Certificate serial:       38809146AC0E8FC49AD8DFA463C0919ECC6E7953
Authority key identifier: FB:69:29:18:40:0F:03:EA:4A:51:C4:E3:6D:DD:21:BB:B7:ED:9D:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/3137372e36362e3135322e302f32322d3232203d3e20323632343939.roa
Signing time:             Wed 21 Feb 2024 20:00:00 +0000
ROA not before:           Wed 21 Feb 2024 19:55:00 +0000
ROA not after:            Wed 19 Feb 2025 20:00:00 +0000
asID:                     262499
IP address blocks:        177.66.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:80:91:46:ac:0e:8f:c4:9a:d8:df:a4:63:c0:91:9e:cc:6e:79:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA
        Validity
            Not Before: Feb 21 19:55:00 2024 GMT
            Not After : Feb 19 20:00:00 2025 GMT
        Subject: CN=BAED247A594A5F4399C261138920F341524F32B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:5a:b7:b3:d7:5e:74:23:88:cc:8e:10:39:
                    a0:84:2b:de:72:8e:eb:ef:ff:75:92:86:b0:2b:a0:
                    31:cb:11:2b:bd:51:3c:c7:5e:4d:d4:48:89:66:7f:
                    65:72:04:66:67:c6:71:23:96:74:fd:18:4a:e8:88:
                    4b:4d:12:21:2d:5d:19:7b:bb:3e:a2:3b:80:ee:a2:
                    01:13:83:e6:56:f5:1e:79:71:21:eb:df:f5:8a:d3:
                    a2:ad:3f:ec:68:24:8a:91:d4:a2:16:81:d9:4a:ef:
                    13:05:5b:b9:6f:50:5c:68:f7:c5:48:59:a0:f0:ff:
                    d0:87:95:4e:26:4e:63:e1:f5:8c:0d:19:cd:ff:bf:
                    c6:39:6c:8c:1f:0f:29:53:6a:ea:3b:36:b4:bf:aa:
                    6a:4b:95:39:02:89:1c:3e:28:c5:12:4a:e3:d9:8a:
                    a2:6d:00:be:e6:45:25:2a:94:fc:9e:a2:5b:dc:35:
                    69:b0:a3:e2:70:29:bc:d3:f3:bc:61:4a:80:88:69:
                    bf:fc:72:e8:f0:cb:23:3a:a1:66:7b:a7:f1:4c:ed:
                    e6:19:5f:70:44:51:f4:4f:88:a4:a5:06:c4:7a:34:
                    8d:29:ec:2e:00:1d:e6:39:2a:f7:37:eb:5d:4d:9f:
                    42:8a:1b:32:45:1b:40:f1:be:f5:25:67:df:90:ad:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:ED:24:7A:59:4A:5F:43:99:C2:61:13:89:20:F3:41:52:4F:32:B1
            X509v3 Authority Key Identifier:
                keyid:FB:69:29:18:40:0F:03:EA:4A:51:C4:E3:6D:DD:21:BB:B7:ED:9D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB692918400F03EA4A51C4E36DDD21BBB7ED9DDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/46z5DuL8Aio3sZtEJmsPidWRHgkHL3unkxxcCTMydCAY/0/3137372e36362e3135322e302f32322d3232203d3e20323632343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:01:27:10:06:1e:85:8b:69:90:0d:20:47:66:98:7a:82:ae:
         a2:8b:11:e9:3d:b7:96:9a:f9:7b:4c:50:39:4e:2f:ea:f1:d6:
         a0:cd:84:c4:6b:07:9b:c7:09:d3:c8:be:2a:48:46:b7:e2:30:
         f8:5e:5a:70:9b:8c:f1:3e:ae:71:0e:26:d7:bb:4e:04:dc:c4:
         af:59:c8:1c:f0:de:ef:f9:4e:db:f2:b7:fb:82:c6:9d:00:e6:
         8b:75:02:fc:38:3d:cb:6e:3b:55:c4:c2:bb:4d:bd:00:2d:11:
         43:f5:34:87:51:96:d0:8a:00:8b:fe:58:fb:e6:f2:42:cc:e9:
         23:01:f0:b7:cc:84:32:f4:0c:96:33:5a:63:99:b7:46:5b:07:
         36:db:49:84:60:37:32:19:a6:88:b5:a4:99:55:84:81:b4:d5:
         33:6c:35:af:86:74:5f:a9:fa:ba:9b:28:96:66:36:78:56:1d:
         e4:a0:7a:91:3e:c6:47:36:86:1f:96:e4:7d:1e:4b:2f:ed:ff:
         a0:d4:9c:9f:ec:9c:06:06:d1:96:30:95:6e:55:16:3d:08:4d:
         1f:5e:d9:80:43:09:21:97:04:5c:5f:0a:5c:f1:7b:25:dc:1a:
         9e:2e:d1:ba:62:10:2c:77:16:ee:19:c4:e1:60:85:28:76:ff:
         08:2e:1b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org