Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137372e33392e3132302e302f32312d3234203d3e203532373635.roa
File:                     3137372e33392e3132302e302f32312d3234203d3e203532373635.roa (raw, json)
Hash identifier:          jcBp7IvhU7SMYCsIep64u8odFRYgOF3V8xZqrxi82Zg=
Subject key identifier:   C5:FF:29:D5:05:11:34:F2:1D:70:78:71:78:4B:C8:D0:A6:6C:BA:8F
Certificate issuer:       /CN=FB525337D26D99E0349C464F7EFB30E81515732D
Certificate serial:       29EC234D777611645AFE8F58E3A10D91349067EA
Authority key identifier: FB:52:53:37:D2:6D:99:E0:34:9C:46:4F:7E:FB:30:E8:15:15:73:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB525337D26D99E0349C464F7EFB30E81515732D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137372e33392e3132302e302f32312d3234203d3e203532373635.roa
Signing time:             Wed 13 Mar 2024 12:39:48 +0000
ROA not before:           Wed 13 Mar 2024 12:34:48 +0000
ROA not after:            Wed 12 Mar 2025 12:39:48 +0000
asID:                     52765
IP address blocks:        177.39.120.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ec:23:4d:77:76:11:64:5a:fe:8f:58:e3:a1:0d:91:34:90:67:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB525337D26D99E0349C464F7EFB30E81515732D
        Validity
            Not Before: Mar 13 12:34:48 2024 GMT
            Not After : Mar 12 12:39:48 2025 GMT
        Subject: CN=C5FF29D5051134F21D707871784BC8D0A66CBA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:70:92:8c:4a:09:92:71:24:7c:4c:b4:c1:e3:
                    47:95:7f:9e:f1:53:02:5e:62:dd:be:e8:7b:94:7d:
                    8b:75:48:d8:0f:58:54:c0:5f:49:b6:85:3a:4e:fe:
                    0f:e1:a3:e4:9f:ce:06:81:22:eb:65:04:07:d8:41:
                    c4:e5:3f:8c:d0:25:4b:1d:71:79:85:3c:e6:c0:d9:
                    14:fb:d4:8d:b5:d9:49:b4:a5:2d:52:0d:57:06:66:
                    01:3b:61:83:b2:8d:3e:3b:cb:b7:d6:3c:14:50:fb:
                    8e:c9:17:37:64:18:05:23:be:08:54:80:12:78:ee:
                    16:7f:30:6c:f4:c9:a0:21:7c:6c:d4:3b:a6:e5:f2:
                    87:9d:ce:71:09:45:9f:d0:8a:25:a9:c1:1e:e0:af:
                    80:51:0a:c1:27:7f:14:81:13:cd:7b:45:db:1c:74:
                    70:f4:a1:bc:29:33:60:b7:5e:b2:db:ca:6f:9a:0f:
                    55:c8:5c:e9:a8:19:8a:3d:ef:60:81:78:d4:de:4c:
                    85:bb:56:da:4e:c4:95:92:f2:23:f9:66:2c:41:4e:
                    75:55:6d:9f:aa:65:0c:8a:e5:8c:23:71:06:14:27:
                    c5:41:b8:53:b1:83:b7:24:f4:e2:3d:d3:7c:83:ef:
                    1d:60:0a:f6:aa:94:c0:81:62:9a:72:6f:7e:9e:76:
                    67:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FF:29:D5:05:11:34:F2:1D:70:78:71:78:4B:C8:D0:A6:6C:BA:8F
            X509v3 Authority Key Identifier:
                keyid:FB:52:53:37:D2:6D:99:E0:34:9C:46:4F:7E:FB:30:E8:15:15:73:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/FB525337D26D99E0349C464F7EFB30E81515732D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB525337D26D99E0349C464F7EFB30E81515732D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137372e33392e3132302e302f32312d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:fc:d0:0b:90:39:9a:16:16:88:37:32:93:29:e4:54:0c:de:
         a1:ef:76:db:3c:af:7b:21:e3:57:82:a9:c6:dc:cb:68:93:09:
         5d:2c:12:79:da:b2:ed:c2:7e:f0:dc:00:b8:ac:e1:5b:cb:5b:
         7f:88:2b:9e:1e:e2:88:99:c4:d3:fc:91:a6:ea:1b:96:72:0c:
         cc:2d:30:32:e1:a8:48:67:1a:87:62:5f:28:1b:b2:93:03:22:
         b2:ff:85:0d:12:20:1d:89:1e:47:42:8e:25:41:dc:09:ec:f7:
         84:d0:3b:fc:d7:60:49:5a:d5:4d:2d:05:28:31:59:c6:0d:51:
         62:c9:36:52:2f:b6:2a:06:4d:e4:f9:c4:54:73:fa:94:a2:2b:
         80:4d:9b:ca:02:89:61:a9:5f:c5:a6:a1:b7:50:60:c4:06:e8:
         ff:5c:f0:45:db:a9:1f:a0:f3:42:bd:18:0c:e9:4d:6d:d1:5d:
         4d:82:e4:0f:38:1d:38:cf:cc:c3:62:dc:12:e6:2b:a0:db:c7:
         fa:f3:ab:9d:f6:31:37:a4:f1:80:cf:b9:43:f0:03:58:84:f8:
         b8:33:9b:b8:4b:fb:b8:21:c5:17:05:17:74:11:7c:44:ba:a2:
         4b:1a:ce:19:e4:6e:89:7f:63:f3:4d:44:4a:d7:7d:3e:21:29:
         41:f4:ba:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org