Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/3137372e35352e3231362e302f32312d3231203d3e20323632353331.roa
File:                     3137372e35352e3231362e302f32312d3231203d3e20323632353331.roa (raw, json)
Hash identifier:          csxhUzPcNGfUvpBn8InrAturNPo594jrZyQ93idT8Y8=
Subject key identifier:   9A:88:CF:D5:8A:D6:17:29:A9:D3:ED:23:7B:5B:C5:0C:E0:0E:10:CD
Certificate issuer:       /CN=FE8A729B6C84483723F5592F7ABC49F8CDEA6403
Certificate serial:       68C9A4E98D1D340F06027A8C26DC4327CA62D796
Authority key identifier: FE:8A:72:9B:6C:84:48:37:23:F5:59:2F:7A:BC:49:F8:CD:EA:64:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE8A729B6C84483723F5592F7ABC49F8CDEA6403.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/3137372e35352e3231362e302f32312d3231203d3e20323632353331.roa
Signing time:             Thu 02 Sep 2021 18:47:46 +0000
ROA not before:           Thu 02 Sep 2021 18:42:46 +0000
ROA not after:            Thu 01 Sep 2022 18:47:46 +0000
asID:                     262531
IP address blocks:        177.55.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c9:a4:e9:8d:1d:34:0f:06:02:7a:8c:26:dc:43:27:ca:62:d7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE8A729B6C84483723F5592F7ABC49F8CDEA6403
        Validity
            Not Before: Sep  2 18:42:46 2021 GMT
            Not After : Sep  1 18:47:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:db:9e:e0:39:e1:99:d9:66:74:2a:15:e5:d5:
                    e0:ef:99:1c:90:14:29:22:0a:b4:83:aa:21:dc:5a:
                    de:18:16:70:e8:bb:95:26:61:2f:1b:3d:e0:26:97:
                    b6:22:66:db:6c:e3:1b:11:04:e7:db:6b:2d:db:14:
                    e7:c5:2e:cf:93:21:78:19:6c:ad:36:5d:16:e2:0d:
                    aa:27:7d:01:fc:8b:af:37:94:19:2e:f3:12:dc:40:
                    9a:e4:08:e5:d3:97:b5:63:ee:03:8b:f9:d4:08:5e:
                    31:6a:a1:d7:24:b2:6c:0d:2d:22:bd:c6:7b:f7:c4:
                    e7:8a:5f:ad:62:70:80:41:e4:4b:e0:33:79:79:e7:
                    da:0f:64:4b:a5:76:a9:02:0e:ba:fa:af:ba:ce:7c:
                    7e:3e:b1:ac:c3:4a:cc:bd:24:25:40:b0:51:6d:cb:
                    45:e0:4f:9a:6f:54:da:c2:6f:1d:4b:9a:02:be:3c:
                    6b:1c:c2:6d:5b:33:a2:c5:9d:b8:39:ab:eb:78:4e:
                    8a:5f:fb:ec:f9:08:56:9a:aa:de:06:32:af:1f:15:
                    f6:2a:bd:65:7f:8c:37:4f:3b:9f:56:c1:53:0e:c4:
                    e1:45:75:71:0f:9b:eb:cb:b7:52:6d:c8:58:10:57:
                    7d:d6:fb:8a:e5:8d:c4:d9:ea:a4:18:8f:83:6d:a7:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:88:CF:D5:8A:D6:17:29:A9:D3:ED:23:7B:5B:C5:0C:E0:0E:10:CD
            X509v3 Authority Key Identifier:
                keyid:FE:8A:72:9B:6C:84:48:37:23:F5:59:2F:7A:BC:49:F8:CD:EA:64:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/FE8A729B6C84483723F5592F7ABC49F8CDEA6403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE8A729B6C84483723F5592F7ABC49F8CDEA6403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/0/3137372e35352e3231362e302f32312d3231203d3e20323632353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:d3:87:a4:6c:a6:af:63:2c:94:13:e0:44:53:a6:0b:b1:2d:
         ad:a4:38:f2:f9:e2:67:02:b6:3b:9d:f6:49:30:25:33:9f:4f:
         9b:16:4f:0b:23:cf:c0:b6:b1:52:3b:80:ed:33:fa:80:14:fa:
         88:ba:d2:5a:ba:3d:93:64:30:1b:b3:c2:28:0c:6d:4c:e0:22:
         df:64:51:59:00:6f:6b:df:3e:2e:0c:f1:18:61:53:03:d7:1a:
         80:3d:80:60:67:54:cf:4e:d0:07:c5:c5:51:bd:95:7d:3e:75:
         a0:16:b1:64:a4:76:1d:c9:b8:ac:36:cc:e8:77:8a:1f:35:f3:
         9b:b0:34:d0:ca:5d:d3:70:7f:f8:36:7c:34:9b:ad:25:16:49:
         19:9d:50:fc:c4:9b:e8:d0:6e:30:71:14:bb:e9:dd:28:34:3e:
         5a:6d:cb:b6:fe:ff:33:9e:81:0e:34:ee:3f:bf:76:49:fc:8f:
         9e:9b:45:cf:a0:46:9c:90:7c:8a:8f:2a:3d:93:b4:e0:a4:a0:
         95:4a:a9:1a:61:14:2d:82:52:86:fe:31:1e:ac:5a:ad:1b:c7:
         e6:26:0c:05:0d:55:27:37:7e:01:35:e3:af:b5:32:a1:58:fa:
         b7:04:5b:58:42:c7:4b:73:3b:74:21:96:46:18:6a:38:3f:84:
         70:6e:07:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org