Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133362e302f32322d3232203d3e20323731303830.roa
File:                     3137372e38362e3133362e302f32322d3232203d3e20323731303830.roa (raw, json)
Hash identifier:          moZJVFKevjKbta9Qf4PxzZEk+DmcuH4FIzRaRwj9DMs=
Subject key identifier:   1D:DA:FC:B3:FD:DB:41:FE:0E:3B:89:81:C8:68:17:16:EA:F8:FB:55
Certificate issuer:       /CN=FB5F10DC1979BB0F9EA6DEC44580D00CF370D233
Certificate serial:       7ED61CED0E8102436E9E38003321092A142684B2
Authority key identifier: FB:5F:10:DC:19:79:BB:0F:9E:A6:DE:C4:45:80:D0:0C:F3:70:D2:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB5F10DC1979BB0F9EA6DEC44580D00CF370D233.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133362e302f32322d3232203d3e20323731303830.roa
Signing time:             Tue 29 Nov 2022 16:50:53 +0000
ROA not before:           Tue 29 Nov 2022 16:45:53 +0000
ROA not after:            Tue 28 Nov 2023 16:50:53 +0000
asID:                     271080
IP address blocks:        177.86.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d6:1c:ed:0e:81:02:43:6e:9e:38:00:33:21:09:2a:14:26:84:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB5F10DC1979BB0F9EA6DEC44580D00CF370D233
        Validity
            Not Before: Nov 29 16:45:53 2022 GMT
            Not After : Nov 28 16:50:53 2023 GMT
        Subject: CN=1DDAFCB3FDDB41FE0E3B8981C8681716EAF8FB55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bd:49:41:e8:84:b7:21:b9:df:56:b6:68:09:
                    0a:f9:63:d5:63:0b:4b:e9:3c:1c:75:a8:b4:72:1b:
                    a4:a4:58:4d:c0:c7:cc:00:b8:15:ae:da:c7:f7:6b:
                    46:6e:2e:50:86:3c:63:5e:21:a8:4d:5a:28:cc:f3:
                    33:57:d2:ee:f4:73:1d:61:92:2b:b9:63:99:95:71:
                    81:55:61:fe:59:d7:6a:bf:f4:ba:a9:7c:77:4e:67:
                    19:d3:80:9f:63:0b:48:a1:0f:61:b9:5c:53:47:33:
                    ac:a6:67:1c:c6:f3:2c:3e:0e:c4:42:82:6c:83:0f:
                    98:23:67:97:58:10:da:f0:3e:e9:0a:f5:06:26:35:
                    32:f4:ce:4f:c8:fa:6b:ab:6d:50:6d:12:7d:4a:a8:
                    87:43:22:a0:75:00:c3:96:63:8b:f2:7e:33:c8:27:
                    d1:11:14:6e:fb:3c:21:eb:79:f1:13:78:bc:9e:94:
                    c1:43:cf:12:70:1d:4d:0f:04:73:da:c5:15:bb:2d:
                    bf:1f:9b:28:1f:42:8f:7f:9c:c3:56:45:a8:0c:39:
                    d0:06:f1:78:fe:57:b9:5b:7d:d1:e9:e8:30:0c:44:
                    e6:5b:b0:20:80:ed:06:83:45:fb:f8:e7:55:1e:de:
                    3d:d4:09:d6:9e:bc:f8:b9:89:86:26:1f:ff:cd:e6:
                    8f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DA:FC:B3:FD:DB:41:FE:0E:3B:89:81:C8:68:17:16:EA:F8:FB:55
            X509v3 Authority Key Identifier:
                keyid:FB:5F:10:DC:19:79:BB:0F:9E:A6:DE:C4:45:80:D0:0C:F3:70:D2:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/FB5F10DC1979BB0F9EA6DEC44580D00CF370D233.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB5F10DC1979BB0F9EA6DEC44580D00CF370D233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133362e302f32322d3232203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:4e:24:ea:5c:db:f8:1b:06:b7:29:74:df:45:8b:b9:0e:7e:
         0b:ab:d2:07:0e:0b:df:2a:5d:97:45:17:6a:eb:5b:34:5e:d1:
         f3:44:51:36:17:48:39:d5:cb:92:de:00:7c:01:53:62:bf:3e:
         e6:f4:18:59:b3:67:3c:88:6d:b9:c3:6c:03:24:f2:b0:93:54:
         e7:6e:57:55:36:ae:ec:34:f0:6c:95:ec:73:30:ad:1e:68:e7:
         e7:c9:cd:b8:29:f0:e3:31:04:2f:a4:59:4a:e6:ab:8e:6d:8d:
         9c:27:25:53:54:0c:01:a8:6e:ad:eb:86:40:0f:b6:42:95:f3:
         7c:b1:ba:fe:bd:b5:58:59:2a:a0:6a:1a:fe:87:8c:ed:00:1b:
         6f:00:2b:b5:8a:9d:d8:90:63:23:df:d9:2d:5d:7e:1e:0e:25:
         17:39:67:2a:12:db:83:2c:fa:71:c5:e7:0e:70:0a:78:62:88:
         2c:f1:7a:1a:f2:a5:62:00:ca:11:b2:25:cf:1b:6f:66:90:eb:
         d4:01:22:a5:79:ed:db:bd:cd:e5:45:c5:a8:e4:be:74:83:77:
         a3:fc:bc:05:85:6e:46:97:2d:dc:9d:a7:9d:26:ea:d2:fd:80:
         64:1b:35:8e:15:72:6d:15:bd:2c:a0:0b:e2:55:7e:fd:d4:07:
         ac:bc:cc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org