Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3137372e36362e37362e302f32322d3234203d3e20323634313137.roa
File:                     3137372e36362e37362e302f32322d3234203d3e20323634313137.roa (raw, json)
Hash identifier:          WtmmrB8/MYrpAtlcF4A9LojQ/jBqc5WiDiYTm/agDto=
Subject key identifier:   72:9C:33:F0:12:C3:63:88:34:18:41:9C:D8:76:12:90:7E:0D:F7:31
Certificate issuer:       /CN=5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18
Certificate serial:       6F6E494E19C0B133135DD04CEED97457D9714CE6
Authority key identifier: 58:05:D2:FD:3F:B9:0C:DD:18:10:8D:3B:7B:75:98:5B:2F:9D:8A:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3137372e36362e37362e302f32322d3234203d3e20323634313137.roa
Signing time:             Fri 01 Mar 2024 11:00:17 +0000
ROA not before:           Fri 01 Mar 2024 10:55:17 +0000
ROA not after:            Fri 28 Feb 2025 11:00:17 +0000
asID:                     264117
IP address blocks:        177.66.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6e:49:4e:19:c0:b1:33:13:5d:d0:4c:ee:d9:74:57:d9:71:4c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18
        Validity
            Not Before: Mar  1 10:55:17 2024 GMT
            Not After : Feb 28 11:00:17 2025 GMT
        Subject: CN=729C33F012C363883418419CD87612907E0DF731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:b1:2d:cb:ab:8e:a8:07:fb:06:b0:c0:76:
                    02:1c:a2:86:5f:a3:74:aa:10:36:91:36:20:df:a7:
                    7f:c1:f3:6a:c1:6e:fe:bd:24:59:3a:b3:13:a8:75:
                    d8:94:c6:b1:2a:5a:06:01:60:bd:d5:3c:29:db:0c:
                    ab:90:9a:10:19:4e:cd:89:d9:cd:f5:a4:fd:f0:42:
                    3b:ca:1d:f8:ec:99:7a:b2:59:3b:1e:5b:81:a9:b7:
                    7c:78:a5:60:16:d8:a6:52:70:bb:cb:82:52:48:2e:
                    53:cd:5e:63:4a:a9:2a:bb:e7:90:7a:ef:67:d9:c8:
                    d6:de:e6:f6:63:8d:9f:8a:0a:78:8a:52:e1:d3:81:
                    8d:7f:d6:d1:5a:90:f6:26:ba:78:61:35:4e:ed:37:
                    c8:cd:cd:72:0f:db:f8:8c:29:1a:5c:44:d8:e6:d7:
                    69:5f:6a:65:71:64:1e:7f:bb:3a:6d:6e:23:94:f9:
                    55:d1:47:05:b2:c9:57:3b:51:ff:50:ca:be:14:cc:
                    53:40:7a:24:2c:f1:42:c1:7d:a6:21:d3:c5:9a:84:
                    a0:95:d6:f0:e1:9a:df:6e:23:d7:9f:d8:d9:7f:c0:
                    c9:f0:c0:d7:ea:03:5d:d5:cd:e9:a8:fe:34:02:a4:
                    a1:6b:62:4b:ab:32:4f:92:3c:fe:26:5b:40:14:49:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9C:33:F0:12:C3:63:88:34:18:41:9C:D8:76:12:90:7E:0D:F7:31
            X509v3 Authority Key Identifier:
                keyid:58:05:D2:FD:3F:B9:0C:DD:18:10:8D:3B:7B:75:98:5B:2F:9D:8A:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3137372e36362e37362e302f32322d3234203d3e20323634313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:4e:b4:57:31:f8:9b:a8:21:65:30:47:2d:b3:5a:62:f0:f0:
         2b:32:01:9f:9c:38:7b:a2:fb:a3:18:c1:9d:27:8f:05:e5:41:
         33:fd:36:2f:65:63:bc:cc:0d:1e:02:81:ad:23:58:be:66:31:
         0b:3f:18:c9:37:6f:d5:3e:4b:65:6a:52:e3:d3:aa:7b:f1:ca:
         ec:11:86:5d:89:b3:8e:12:44:b4:d8:7f:80:d1:85:c8:a4:1e:
         4c:7f:15:41:0f:1c:ec:0a:a6:af:e8:4c:c7:55:97:53:61:c5:
         9e:e1:1c:db:12:9f:5c:52:0d:85:e2:02:d0:d6:3a:19:f1:59:
         28:ce:dd:8a:43:3a:91:9a:4c:fc:f2:73:d9:09:62:89:3b:40:
         2f:43:a8:7a:10:16:7f:3c:32:d1:ff:d9:f7:f3:de:c4:aa:38:
         28:e1:fb:1e:61:e2:9b:71:de:14:3c:f7:15:66:84:fb:9b:44:
         f6:1a:21:3f:1b:f4:ab:99:c7:a5:4f:15:15:1a:6e:49:34:a9:
         cb:d7:40:26:6e:8d:a3:54:9f:57:f0:dc:f7:bf:db:b4:48:ee:
         f8:d2:35:6f:5f:ba:3e:f4:7a:0e:82:f4:be:32:b8:2a:d6:7e:
         2f:1b:27:d7:fa:51:e5:d5:ec:60:1b:2d:d2:f7:b1:9b:28:2b:
         66:72:69:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org