Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38302e302f32322d3232203d3e203533303437.roa
File:                     3137372e3130312e38302e302f32322d3232203d3e203533303437.roa (raw, json)
Hash identifier:          nP0olHoAQy842tYd5pGn0aQ/vVplNyR2CZNaoWdxE4o=
Subject key identifier:   44:F2:40:37:E9:AA:CE:38:75:33:BB:89:83:57:01:D1:8F:C3:66:33
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       524E1156D81BBEE7A73C39FC60F6C47FBCBDF6D4
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38302e302f32322d3232203d3e203533303437.roa
Signing time:             Tue 28 Nov 2023 12:09:11 +0000
ROA not before:           Tue 28 Nov 2023 12:04:11 +0000
ROA not after:            Tue 26 Nov 2024 12:09:11 +0000
asID:                     53047
IP address blocks:        177.101.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4e:11:56:d8:1b:be:e7:a7:3c:39:fc:60:f6:c4:7f:bc:bd:f6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 28 12:04:11 2023 GMT
            Not After : Nov 26 12:09:11 2024 GMT
        Subject: CN=44F24037E9AACE387533BB89835701D18FC36633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8b:fe:87:0f:92:c7:48:c8:25:17:73:66:cc:
                    ab:48:0a:1a:97:e5:ec:fb:91:13:7c:17:bd:15:20:
                    8d:ba:28:be:3b:2b:cb:4e:2b:1e:d2:7e:7b:76:1c:
                    7f:dc:b0:5e:f1:99:df:cf:ca:9f:ab:08:fd:94:c1:
                    88:bc:bf:6b:52:41:58:63:15:22:36:dd:fe:84:6f:
                    04:63:13:4f:36:ee:c6:8b:c1:2a:cf:c9:9d:79:df:
                    69:5c:e4:7a:af:d1:88:9b:65:06:9a:a9:4a:7a:77:
                    c9:2f:2e:22:2d:e5:11:0f:81:ae:57:df:f6:e4:39:
                    b5:29:27:ac:a7:d2:f3:95:03:7f:19:46:5b:66:e5:
                    9e:b6:10:3e:e2:92:48:07:13:e8:77:78:6e:d6:2f:
                    50:ab:46:76:f3:10:cd:ce:ad:9e:87:f8:93:e0:7d:
                    dd:3d:a5:fd:f8:2f:b1:08:5a:48:da:d5:70:07:00:
                    fa:51:cc:b6:66:7d:6f:c6:86:fa:98:5b:81:50:58:
                    5a:17:93:c0:97:20:69:a6:27:39:58:4b:5f:13:51:
                    ed:d9:0e:2a:7f:df:6e:02:83:a4:28:7b:93:92:b3:
                    1d:81:94:42:fa:1a:e7:61:8f:64:8f:63:32:19:0a:
                    77:0b:17:a5:c8:c3:09:91:f5:01:75:83:da:03:6c:
                    01:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F2:40:37:E9:AA:CE:38:75:33:BB:89:83:57:01:D1:8F:C3:66:33
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38302e302f32322d3232203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:2d:25:49:7d:b6:04:5a:67:0a:37:e7:6f:ef:66:54:bb:c2:
         37:47:6e:99:b7:c3:c9:c3:a2:80:2e:51:d6:b7:ba:40:58:cf:
         31:56:69:b0:de:81:dd:5a:9c:b0:25:27:ee:66:69:82:a4:da:
         e4:3b:77:fb:ab:55:bc:a9:fd:48:c9:c7:0b:f8:a0:a9:b6:6e:
         2e:b6:c4:31:12:21:a3:e7:d3:7b:43:04:5e:ca:a4:18:07:37:
         d0:8c:fd:37:30:3e:f4:50:7e:78:33:4d:d7:96:c0:ce:73:e4:
         54:59:21:da:c2:b2:2b:ea:bd:28:36:b5:ec:17:d5:15:03:bf:
         56:41:b6:4f:e4:23:d0:e4:cc:d4:a2:9e:05:2a:46:f0:94:75:
         0f:d3:c3:b9:49:0a:8a:21:fa:15:c6:f3:40:3d:c9:cf:44:c7:
         73:93:bd:7d:61:1e:e4:d9:f7:59:6c:1c:37:2d:c2:fd:e7:8d:
         f9:ba:b6:f8:c0:db:3a:ef:b4:ea:a7:aa:bc:27:c7:fa:02:46:
         63:a2:c8:1a:b1:a3:bf:89:3a:22:a1:5e:ca:a5:a7:48:7f:5c:
         16:91:a9:84:6a:40:73:78:d5:10:65:d2:91:80:b4:e0:84:b4:
         2a:7a:61:5b:ae:72:70:44:56:93:11:6c:b7:90:cb:25:54:0b:
         e9:07:55:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org