Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e302e302f32322d3232203d3e20323632343835.roa
File:                     3137372e36362e302e302f32322d3232203d3e20323632343835.roa (raw, json)
Hash identifier:          Ra4sTOLTut+Hn6r0UkjyGqarCJPVSmXrX7qFuy4alQ8=
Subject key identifier:   FC:74:F1:8A:7F:BD:EF:A9:4C:C3:6A:F4:16:8A:FA:15:14:C9:1A:BF
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       79506F83C04AC9D32DCF730C95787C461340DCBD
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e302e302f32322d3232203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:48 +0000
ROA not before:           Thu 04 Apr 2024 12:30:48 +0000
ROA not after:            Thu 03 Apr 2025 12:35:48 +0000
asID:                     262485
IP address blocks:        177.66.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:50:6f:83:c0:4a:c9:d3:2d:cf:73:0c:95:78:7c:46:13:40:dc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:48 2024 GMT
            Not After : Apr  3 12:35:48 2025 GMT
        Subject: CN=FC74F18A7FBDEFA94CC36AF4168AFA1514C91ABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:76:d1:ac:bc:31:ba:ef:29:27:12:64:06:
                    82:0a:56:5d:a1:5c:a9:07:67:14:00:6f:0f:3d:fc:
                    bf:86:14:dc:06:dc:94:ca:49:67:e7:53:7f:cd:c3:
                    86:55:fd:3d:76:ca:a0:77:e9:7d:01:79:b9:ef:4f:
                    7e:c4:ee:be:f5:1f:75:10:6b:d9:d2:0e:29:99:9e:
                    fc:63:3a:ec:0c:a1:e6:9e:bd:0d:1d:de:33:0d:f6:
                    d3:41:64:3c:dd:2a:fa:71:c0:67:fd:e9:34:ac:57:
                    25:04:ea:1b:1d:7c:50:55:e5:72:51:60:27:d9:d1:
                    09:91:e9:dd:d3:3f:a8:27:24:4b:bd:88:f6:4f:e0:
                    4e:be:c9:f0:e9:8b:f3:f3:83:6a:f1:d6:a7:4f:c5:
                    f1:cc:5e:69:ec:4f:10:85:cc:c3:f9:bb:16:b8:71:
                    b6:8e:1d:8f:fe:d6:ba:c1:1a:48:a5:7a:65:50:37:
                    b5:a0:13:4a:3c:17:85:bd:c9:b0:16:c6:ac:ff:b9:
                    a7:e8:eb:60:49:f0:29:70:03:b4:c7:c2:c7:2f:45:
                    52:00:84:c4:73:d1:6b:e6:92:63:4f:0e:58:b9:79:
                    3e:e7:b4:e9:1c:50:0d:f3:22:90:b8:ae:d8:a0:08:
                    de:7d:a6:02:f2:7d:6b:2e:b6:0c:2c:a1:de:85:b8:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:74:F1:8A:7F:BD:EF:A9:4C:C3:6A:F4:16:8A:FA:15:14:C9:1A:BF
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e302e302f32322d3232203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:72:77:2b:ee:09:9c:f3:7d:00:4f:79:f2:c0:38:77:7c:c6:
         f3:e1:e2:ed:f6:96:d6:17:f2:46:54:4f:34:9c:8c:3b:3b:93:
         c5:87:fe:d8:e7:58:d5:e7:48:fc:36:d3:78:c9:50:3a:6c:5f:
         12:26:57:d1:b2:49:0b:38:04:b5:5f:6f:2d:95:51:9b:a5:b5:
         0a:1a:a9:a8:0d:e1:2f:3b:2f:4d:98:86:ff:b9:0d:55:b4:07:
         04:e1:3b:b3:ac:60:9c:a6:c3:a8:85:34:4e:c6:21:f1:dc:94:
         98:a3:10:2b:f8:97:fe:65:34:2d:0e:6b:24:06:2e:dd:25:92:
         53:ef:0d:8b:bf:86:ac:80:16:0f:7b:5b:58:06:39:60:a7:34:
         0a:bd:c9:0f:e6:3d:d7:cd:79:a3:56:bd:10:4f:58:2c:c3:1e:
         79:2a:26:ab:31:18:c8:8d:58:d5:6e:fa:80:44:7d:1a:2e:59:
         9b:6f:92:19:68:80:6e:a1:8d:e1:ae:ca:5d:df:fb:4f:7f:40:
         ad:6c:fb:ab:f7:41:63:6d:0e:e1:49:81:be:3a:4d:66:33:7f:
         0f:41:5c:14:85:79:ae:92:bf:69:a6:3f:a8:4c:4d:f3:34:de:
         5e:a7:c9:83:1b:67:6f:bd:3b:8d:1b:c7:86:94:e7:07:9e:1f:
         1e:8f:c3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org