Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38382e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          aRnBsRSpmhMFddm3ec1wXyOCrGMGw/vYkYRKWFvtkmU=
Subject key identifier:   DF:65:5E:E9:3E:4E:49:39:13:2B:90:24:9F:53:B6:4E:1D:6E:42:21
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       3CFEF6F1E64D7D4D9B6C83BF645AE7DFB5B4E080
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32342d3234203d3e203533303437.roa
Signing time:             Tue 28 Nov 2023 13:09:20 +0000
ROA not before:           Tue 28 Nov 2023 13:04:20 +0000
ROA not after:            Tue 26 Nov 2024 13:09:20 +0000
asID:                     53047
IP address blocks:        177.101.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fe:f6:f1:e6:4d:7d:4d:9b:6c:83:bf:64:5a:e7:df:b5:b4:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 28 13:04:20 2023 GMT
            Not After : Nov 26 13:09:20 2024 GMT
        Subject: CN=DF655EE93E4E4939132B90249F53B64E1D6E4221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:73:0d:63:22:a4:7f:10:58:c5:35:c4:03:7d:
                    7f:60:9c:bb:79:7d:b4:5f:a8:7d:8c:0c:0a:07:72:
                    f3:b9:4f:15:f1:4b:2b:f2:6e:72:5f:07:34:e9:cf:
                    8b:8f:c3:95:3e:6b:b4:11:3a:d9:27:97:6e:e2:1e:
                    68:8c:31:a2:e1:a9:3e:86:43:6b:51:06:4f:22:74:
                    f0:2f:39:e3:55:d1:9c:3a:5e:b2:01:6e:3d:ae:b8:
                    fe:5e:bb:4c:3a:24:91:05:9c:7a:74:c1:f8:30:dc:
                    ef:01:93:4b:e0:55:6a:a8:79:4e:98:3e:d0:a5:a8:
                    82:b9:0e:c3:d4:57:bd:06:19:d3:2a:93:69:2a:79:
                    2b:cf:34:f5:ff:31:4c:75:89:df:65:66:ad:30:79:
                    fd:89:f9:a5:cd:d7:9f:f2:71:89:8b:09:4d:74:f0:
                    5c:44:3f:0a:00:b2:5f:a0:01:41:b3:87:78:63:0c:
                    b7:37:7a:43:8a:b6:2a:a9:12:f2:d9:d4:27:07:9c:
                    f9:98:64:0f:2a:1a:69:0d:0d:f1:e0:81:43:07:cc:
                    93:86:a8:39:95:bf:f9:ef:99:67:81:71:7e:30:e4:
                    fc:ff:51:ce:e9:8a:c3:0d:a7:34:cc:33:91:3a:c0:
                    89:63:b5:fb:99:5b:7a:86:10:2b:4f:96:18:99:d8:
                    6a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:65:5E:E9:3E:4E:49:39:13:2B:90:24:9F:53:B6:4E:1D:6E:42:21
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:5a:f8:f5:8d:3a:31:46:eb:ef:a3:e4:9f:01:d1:de:64:ca:
         77:22:d4:70:1b:99:52:13:48:40:34:b7:7f:ea:50:6c:cd:ab:
         5c:38:85:a1:d1:3c:56:97:10:5b:a6:ca:c3:95:e4:0b:bb:46:
         e4:45:01:4a:18:0f:4f:b7:3b:55:fd:ea:d4:51:be:f2:90:ce:
         35:2e:05:d8:ca:5f:d0:0b:5b:62:fa:dc:25:21:c0:77:30:7a:
         01:df:ef:35:e8:77:78:e9:c8:9f:b5:9b:6b:bf:33:6d:74:fe:
         07:67:66:86:d9:3d:b0:37:8e:a6:c5:d1:9e:14:20:f0:99:ca:
         e3:0a:63:82:f5:28:b3:e8:77:75:85:58:7e:8c:3e:a3:e2:55:
         2d:6f:ee:78:da:fe:33:79:28:c9:c7:ea:2b:b7:dc:b6:72:27:
         00:7b:02:23:1a:0e:3a:8b:9c:25:da:7a:f3:76:59:bb:d9:1d:
         b3:6e:8c:58:49:e6:a3:d7:d6:c1:72:a6:c6:76:a5:1d:5e:9a:
         1b:3c:0c:9d:2b:75:d7:fb:19:a7:17:ed:40:cf:c3:0e:c1:fd:
         84:19:09:c2:42:e4:d3:f3:19:56:be:db:9e:1b:42:01:be:27:
         67:76:81:f5:5e:a4:33:c3:b1:2c:02:6a:d7:cf:a8:dc:c1:de:
         d1:a6:a8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org