Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32312d3231203d3e203533303138.roa
File:                     3137372e37322e3133362e302f32312d3231203d3e203533303138.roa (raw, json)
Hash identifier:          kcgrVgU0MKe2hqbAqkm/JHsXqW8I4DrRUDjcaPBVtpM=
Subject key identifier:   08:9B:AD:E1:10:91:C5:70:01:CF:67:0E:7F:93:1D:31:BE:27:7F:B6
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       5ED217EF80CE32EA5D7A50DC17A1420DC954CC93
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32312d3231203d3e203533303138.roa
Signing time:             Tue 12 Mar 2024 18:15:15 +0000
ROA not before:           Tue 12 Mar 2024 18:10:15 +0000
ROA not after:            Tue 11 Mar 2025 18:15:15 +0000
asID:                     53018
IP address blocks:        177.72.136.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d2:17:ef:80:ce:32:ea:5d:7a:50:dc:17:a1:42:0d:c9:54:cc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar 12 18:10:15 2024 GMT
            Not After : Mar 11 18:15:15 2025 GMT
        Subject: CN=089BADE11091C57001CF670E7F931D31BE277FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:25:c4:99:dd:57:e8:70:38:6b:8e:7a:3e:
                    87:29:68:c3:6a:df:1f:bc:8c:0d:6c:6b:2a:71:13:
                    02:4f:ad:ba:fe:d7:c9:00:10:a5:f2:02:c6:d5:dc:
                    9a:55:4a:a1:4f:57:73:41:71:56:84:8f:2c:d2:7f:
                    19:50:3b:db:db:5e:a9:6c:16:60:21:fc:a2:c9:21:
                    10:48:73:0e:b8:7f:57:9a:bf:89:81:6e:89:f0:5f:
                    8d:fa:bf:14:21:51:61:6b:04:ce:8b:5e:21:a7:bb:
                    4e:f9:fb:94:2d:03:2c:16:2e:8d:da:07:45:ca:61:
                    da:83:06:ca:b8:88:2f:38:61:96:c5:49:31:e5:d9:
                    4d:a6:d6:a9:d7:64:25:1b:8e:3a:8b:c8:a6:86:04:
                    6e:f2:c8:56:a0:3d:59:cd:8b:b6:47:19:5f:7d:bd:
                    1e:52:2d:3c:4d:51:e0:c9:2a:a9:7b:8d:dd:52:a0:
                    14:41:8a:93:6b:5a:38:fe:28:67:9d:7c:60:6d:0e:
                    19:1c:d6:ff:37:0d:6e:ce:28:5d:f4:fb:98:79:7f:
                    d3:c9:f5:66:f5:64:9f:77:3a:a3:9e:aa:6e:45:65:
                    8e:16:95:bd:32:4d:ae:0f:29:c2:b3:fd:8c:21:2d:
                    7c:62:e2:d7:59:bc:c3:f6:a7:ce:df:08:5e:42:3f:
                    f4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9B:AD:E1:10:91:C5:70:01:CF:67:0E:7F:93:1D:31:BE:27:7F:B6
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32312d3231203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:5a:23:5d:f3:cd:1b:ae:64:87:82:c7:6b:52:e6:48:c4:
         61:7e:8d:ee:65:74:b9:d8:85:31:3b:89:0e:f6:77:12:3b:7c:
         bb:7f:47:cd:e3:e1:eb:e8:3d:01:4f:bc:7b:2f:03:a4:d3:e5:
         9e:35:15:c8:d9:74:a3:6c:ce:dd:5e:3d:41:e1:11:ef:f6:75:
         8d:29:ea:7c:ae:12:63:49:86:a5:d4:b2:1b:66:55:6e:d1:2c:
         03:c0:79:09:95:24:43:11:f8:40:8d:0e:a9:85:bf:fd:cf:00:
         f2:6e:fd:6a:5a:d1:cc:3b:16:9e:c0:9a:60:5a:f0:bd:55:ca:
         a0:5f:55:5e:76:87:23:10:7a:7d:dd:8c:d0:95:8a:8d:61:24:
         50:36:a7:8c:4f:47:1d:18:6e:a5:42:6d:86:fc:37:a2:84:ab:
         68:e8:b0:60:e2:a8:db:ed:11:3f:0b:d2:d1:68:82:18:f8:81:
         24:a1:3a:66:34:de:f2:91:64:91:3b:b8:0c:e6:aa:7e:ce:2f:
         12:b3:d7:eb:4d:a2:8c:e1:ad:b7:fe:8d:4b:af:f3:06:48:dc:
         e6:ce:30:0e:78:74:bf:d9:68:b0:4f:ee:64:9e:8a:b0:73:c9:
         1e:99:62:45:59:5c:68:7d:9d:44:09:72:93:c3:a5:54:1a:5c:
         f8:03:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:06 2024 by rpki-client on console-ams.rpki-client.org