Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e33312e302f32342d3234203d3e20323633333834.roa
File:                     3137372e38372e33312e302f32342d3234203d3e20323633333834.roa (raw, json)
Hash identifier:          IKegk0Osq02M7wlQnLI4fE5a2uJjfrB04QPAYorLpuo=
Subject key identifier:   B0:83:39:39:BF:68:C1:CA:87:8A:52:D8:3E:9D:B1:5D:04:BF:B9:51
Certificate issuer:       /CN=42069E8E68759D7E92CA70711619EA4DC4E27721
Certificate serial:       014ACB948C5FF3BECAF8B170EA50353D9FE18D06
Authority key identifier: 42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e33312e302f32342d3234203d3e20323633333834.roa
Signing time:             Thu 23 Nov 2023 20:11:13 +0000
ROA not before:           Thu 23 Nov 2023 20:06:13 +0000
ROA not after:            Thu 21 Nov 2024 20:11:13 +0000
asID:                     263384
IP address blocks:        177.87.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4a:cb:94:8c:5f:f3:be:ca:f8:b1:70:ea:50:35:3d:9f:e1:8d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Validity
            Not Before: Nov 23 20:06:13 2023 GMT
            Not After : Nov 21 20:11:13 2024 GMT
        Subject: CN=B0833939BF68C1CA878A52D83E9DB15D04BFB951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:72:b2:9f:c8:1f:d2:06:16:f9:a3:f3:3c:
                    c9:ba:20:89:b9:04:60:bb:63:84:4a:60:ba:ca:9b:
                    47:df:2d:00:11:c0:7d:f8:c7:85:bd:e3:d9:c1:57:
                    69:6c:c0:0e:cb:58:38:d3:37:32:69:44:c6:b2:91:
                    b4:b0:d4:9a:5b:ca:2f:21:60:ce:bd:af:d4:7d:68:
                    54:f8:15:d8:e9:93:ff:3a:80:b1:0d:13:45:04:5e:
                    4b:97:a3:ef:87:11:ab:fa:9b:d8:c5:1e:61:5b:f2:
                    6c:f1:26:78:52:a5:57:1b:41:4d:9e:96:df:c4:3e:
                    9c:a4:71:3a:3a:dd:ff:65:8f:ae:41:4a:dc:60:9a:
                    dd:31:29:18:04:b3:b7:da:05:e8:8e:34:77:81:ce:
                    8e:4c:de:2a:5e:03:40:88:7a:27:a4:b5:7b:67:ed:
                    91:97:19:58:11:b2:09:db:b2:f5:0b:92:48:18:ce:
                    d6:18:c6:79:f0:55:f2:af:7a:26:88:23:f5:23:33:
                    e7:58:68:9d:d0:c3:29:80:4a:67:78:8c:a0:f2:0b:
                    b3:b5:8e:61:74:76:34:e8:18:a4:30:f8:5f:67:c3:
                    ec:2c:80:2a:bb:3a:19:c1:9f:37:cd:1f:41:89:d3:
                    c8:d1:b8:c3:9d:f2:35:e5:ac:18:8f:10:d6:df:46:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:83:39:39:BF:68:C1:CA:87:8A:52:D8:3E:9D:B1:5D:04:BF:B9:51
            X509v3 Authority Key Identifier:
                keyid:42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e33312e302f32342d3234203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:51:e3:ff:a2:be:82:b4:68:17:12:01:68:db:99:e2:0b:39:
         98:79:c8:fe:9b:dd:b9:6c:38:59:48:69:c3:7e:96:20:4f:46:
         92:99:81:3f:64:c6:8a:84:41:58:4a:1f:44:50:5c:e1:fa:1c:
         2e:26:10:05:53:15:6a:d5:be:ad:a1:ee:7a:bc:22:c0:ad:d2:
         3a:90:27:e2:35:ee:58:c4:4e:e7:ab:90:47:f9:22:78:bf:3d:
         2f:0a:2a:57:d3:1d:5f:0e:17:49:e5:0b:6a:68:15:90:97:2a:
         75:ff:86:ee:20:c4:d3:3c:9c:39:30:84:46:ae:e1:99:d9:24:
         b6:6a:15:21:5a:13:88:1b:dd:e6:76:45:b1:f4:95:3c:e4:62:
         54:5c:4f:b5:ee:1c:3f:50:f0:08:4a:51:77:bf:68:f1:41:dc:
         22:36:81:db:ff:0d:b8:07:56:35:3b:71:70:3b:1e:bd:49:2c:
         8d:0a:54:6b:82:b1:a6:65:75:e9:7b:07:f2:10:9e:db:7a:27:
         55:27:f4:9d:6d:f7:e4:26:88:59:8e:c1:68:21:1d:f8:4b:d2:
         f8:1a:13:93:35:57:14:c3:92:73:27:2b:9e:01:3e:ba:2e:3c:
         16:3d:2b:67:14:70:1c:75:ee:50:b6:61:34:9d:3c:79:3e:72:
         a2:be:fa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org