Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134302e302f32322d3234203d3e203533303138.roa
File:                     3137372e37322e3134302e302f32322d3234203d3e203533303138.roa (raw, json)
Hash identifier:          aho6hKQmnB5YTXe9qBE7j+leb6LJpYh2wE1cuvbdbVE=
Subject key identifier:   E2:FB:85:23:0E:A9:CC:80:0B:54:27:FB:4A:2F:A2:DA:F6:05:A4:3A
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       6EE5794F1C69AD7A15754DFD2D395C0FAD3CC9B3
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134302e302f32322d3234203d3e203533303138.roa
Signing time:             Tue 12 Mar 2024 18:15:33 +0000
ROA not before:           Tue 12 Mar 2024 18:10:33 +0000
ROA not after:            Tue 11 Mar 2025 18:15:33 +0000
asID:                     53018
IP address blocks:        177.72.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e5:79:4f:1c:69:ad:7a:15:75:4d:fd:2d:39:5c:0f:ad:3c:c9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar 12 18:10:33 2024 GMT
            Not After : Mar 11 18:15:33 2025 GMT
        Subject: CN=E2FB85230EA9CC800B5427FB4A2FA2DAF605A43A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0e:ae:b8:e4:b4:11:8d:51:1e:80:c9:a8:17:
                    4b:89:13:e2:38:14:ca:da:da:4a:56:e9:08:8f:df:
                    32:9d:fa:de:e3:52:2a:55:e3:ce:08:ee:25:21:ed:
                    d3:16:1b:0a:83:e6:9c:c2:00:f4:b7:3d:8e:8b:11:
                    4e:69:63:ac:c7:77:a3:47:8a:65:0a:93:ec:e7:ab:
                    07:e2:39:9b:91:9f:ae:d6:c5:62:a5:94:20:5a:f9:
                    a6:98:30:86:9c:c1:cc:3f:a5:a7:23:7f:a5:f3:13:
                    2e:77:98:af:e8:0c:76:c4:fa:1e:5a:af:ff:64:cc:
                    30:99:a7:40:f8:a5:c2:79:98:f1:10:b3:c1:f5:66:
                    a1:dc:ff:98:4a:4e:73:30:42:80:c1:18:fe:06:55:
                    33:c8:49:b3:00:ed:8a:aa:92:00:a9:15:a2:32:68:
                    3a:f0:94:03:da:bf:db:a9:6a:af:76:56:e5:71:fc:
                    f9:4d:28:cc:58:4b:2e:fa:fb:aa:7b:b0:dc:41:a7:
                    52:c6:97:56:70:c3:34:a5:9b:0d:08:28:7a:e5:e6:
                    2b:c6:5f:93:df:44:62:20:29:50:81:4a:01:9a:c6:
                    dd:88:cc:bc:c2:8d:87:2a:07:3d:2f:02:e4:9d:94:
                    4c:92:cd:6a:c9:d6:f8:c5:b1:58:24:1e:cf:51:61:
                    56:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FB:85:23:0E:A9:CC:80:0B:54:27:FB:4A:2F:A2:DA:F6:05:A4:3A
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134302e302f32322d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:88:25:27:af:a5:c0:de:b8:7b:d5:d4:43:14:54:18:bf:0d:
         1f:53:ce:e3:13:a6:29:d7:fa:76:db:ee:e8:61:64:a6:24:32:
         c0:2c:39:18:a8:25:c9:4f:22:99:ad:4d:5c:1c:44:8e:9d:13:
         95:da:c3:87:b9:71:82:d1:b8:2f:5f:31:70:78:a6:8f:bf:19:
         30:81:c4:49:37:d6:17:98:c4:b3:a2:7b:08:9d:6a:b2:58:f9:
         34:45:39:8e:0f:4c:2e:8b:81:80:f2:44:50:44:58:70:99:1a:
         b5:9d:f4:5d:f5:44:90:87:7f:8a:ac:d2:aa:9f:56:15:c8:27:
         3a:ae:e8:99:29:c4:bd:43:69:52:25:cb:16:61:48:7c:ad:50:
         a8:b8:61:19:7e:a7:ff:35:c4:7d:4f:b0:e2:af:4e:9b:f8:e3:
         cd:fe:11:f0:c4:7c:19:40:cb:e5:38:67:1e:32:86:7c:30:1f:
         e4:50:6e:86:b2:24:f9:2e:cb:62:99:b0:f1:c5:96:e8:84:e9:
         15:4a:4f:35:ba:36:c0:6a:9d:23:91:9e:b3:41:3f:aa:0f:b8:
         a6:90:22:0a:dd:8b:e6:78:1c:c0:85:f6:34:ba:73:82:55:03:
         e7:0d:b4:2a:4c:1f:0e:99:b0:a1:72:68:25:56:b5:fa:c0:01:
         f7:61:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org