Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3137392e302f32342d3234203d3e20323632353439.roa
File:                     3137372e37322e3137392e302f32342d3234203d3e20323632353439.roa (raw, json)
Hash identifier:          EtSvzZt2myrRhpmvWDpfPiAeUvPCj5IM/VGamNe6Tf4=
Subject key identifier:   FC:5E:0E:6A:BF:66:B7:C5:57:0A:CA:D4:10:3C:08:B7:2B:E8:C0:B3
Certificate issuer:       /CN=F287460A646DEE868157EDCCABDA09DBAD094C27
Certificate serial:       260531D5953F362D0E321D5739130516AC875B9C
Authority key identifier: F2:87:46:0A:64:6D:EE:86:81:57:ED:CC:AB:DA:09:DB:AD:09:4C:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F287460A646DEE868157EDCCABDA09DBAD094C27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3137392e302f32342d3234203d3e20323632353439.roa
Signing time:             Sun 08 Jan 2023 17:48:02 +0000
ROA not before:           Sun 08 Jan 2023 17:43:02 +0000
ROA not after:            Sun 07 Jan 2024 17:48:02 +0000
asID:                     262549
IP address blocks:        177.72.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:05:31:d5:95:3f:36:2d:0e:32:1d:57:39:13:05:16:ac:87:5b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F287460A646DEE868157EDCCABDA09DBAD094C27
        Validity
            Not Before: Jan  8 17:43:02 2023 GMT
            Not After : Jan  7 17:48:02 2024 GMT
        Subject: CN=FC5E0E6ABF66B7C5570ACAD4103C08B72BE8C0B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:75:02:97:14:01:7d:6d:99:f4:79:95:fe:
                    59:59:ae:14:99:83:89:51:83:3e:da:25:86:f3:33:
                    f5:d7:28:b8:a4:f9:23:d8:ab:d7:45:b9:8b:25:21:
                    a3:b9:f4:05:dc:c1:85:07:63:f1:e1:86:82:84:5d:
                    39:fd:74:28:2b:d4:06:fd:e1:2c:64:be:78:69:48:
                    db:b8:3c:84:b2:a7:ac:f4:6b:99:21:02:1f:d6:b9:
                    69:4e:21:a7:87:e5:a0:77:b6:ce:8f:0c:cb:51:f8:
                    8c:3e:c0:a0:08:83:b2:59:2e:90:23:38:87:60:dc:
                    90:75:12:83:4f:e3:94:0c:59:12:64:20:ed:f8:9f:
                    93:d4:26:9f:3a:a7:bc:12:5c:95:3f:d8:cf:bc:2b:
                    59:f3:a5:24:65:b0:b8:a3:ce:a0:34:8d:0a:a0:af:
                    35:4b:86:cf:f4:bd:4e:04:61:c7:88:02:68:95:e8:
                    03:c3:e0:c1:ae:dd:93:71:d9:27:f1:4b:f7:55:06:
                    24:a9:1d:c8:80:22:ae:9e:7c:ff:02:a7:13:19:d1:
                    6a:e9:ad:7b:dc:9a:f4:40:01:45:b8:3c:c8:8d:e8:
                    39:46:b4:47:de:ba:0b:03:e5:ca:18:63:47:33:63:
                    61:08:a1:b5:7e:64:40:76:e4:be:df:70:a1:61:1e:
                    45:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5E:0E:6A:BF:66:B7:C5:57:0A:CA:D4:10:3C:08:B7:2B:E8:C0:B3
            X509v3 Authority Key Identifier:
                keyid:F2:87:46:0A:64:6D:EE:86:81:57:ED:CC:AB:DA:09:DB:AD:09:4C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/F287460A646DEE868157EDCCABDA09DBAD094C27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F287460A646DEE868157EDCCABDA09DBAD094C27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERfCiSbPEUrg4ycMD3LY8TatL1Cd97gS1YKJ2RWeDdP8/0/3137372e37322e3137392e302f32342d3234203d3e20323632353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:7a:dc:e7:f9:50:f4:61:0b:32:3f:32:8c:ed:85:11:5e:90:
         c9:d4:b0:34:3e:6d:88:28:93:be:2d:d7:85:12:a1:aa:ad:78:
         62:86:e2:d8:02:a3:bb:d9:16:50:b9:f0:5d:42:38:0e:45:18:
         d3:0e:6b:53:44:05:43:87:1b:0f:f9:96:8d:85:a5:94:76:68:
         0f:4b:2d:43:c1:3c:59:f0:5c:00:ff:83:55:6c:fa:3e:2c:b9:
         f5:05:ba:78:b7:4e:4f:dd:12:a5:b6:e7:cd:ca:1d:92:d0:be:
         95:e8:e2:de:98:52:8c:c1:2f:be:24:96:8a:97:98:a2:e2:bc:
         b1:d9:2e:86:fa:b2:c5:1d:cb:f7:63:f6:de:09:6e:8a:9a:19:
         8e:08:97:4d:0f:87:66:d5:93:4a:08:57:5d:c2:7c:76:44:57:
         20:c6:cc:9e:7c:32:23:20:de:97:0b:e1:f6:c5:d1:dd:77:36:
         07:58:1b:e2:da:61:55:42:71:9a:15:79:bd:4e:a7:d7:d7:53:
         b6:c4:9d:f4:33:7b:02:7f:64:4b:7f:ea:20:ed:00:17:c0:62:
         22:84:3c:da:fc:45:5f:4a:89:ab:95:ad:ee:25:7c:35:47:f9:
         25:ce:46:be:32:bc:84:69:ef:48:0e:7f:fe:aa:88:83:bf:cd:
         fb:53:7f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:06 2023 by rpki-client on console-fra.rpki-client.org