Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e302e302f32332d3233203d3e20323632343835.roa
File:                     3137372e36362e302e302f32332d3233203d3e20323632343835.roa (raw, json)
Hash identifier:          304JjWf7mmhoQbu8VLoXTRxuVUAh1JTx5QL5rifGJOA=
Subject key identifier:   93:2B:00:4A:AE:14:4C:E8:46:02:9B:62:C3:41:0D:8B:9E:2F:B3:E4
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       11694DDD90614B9874759756F5B2B2E1DF6F71A2
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e302e302f32332d3233203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:49 +0000
ROA not before:           Thu 04 Apr 2024 12:30:49 +0000
ROA not after:            Thu 03 Apr 2025 12:35:49 +0000
asID:                     262485
IP address blocks:        177.66.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:69:4d:dd:90:61:4b:98:74:75:97:56:f5:b2:b2:e1:df:6f:71:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:49 2024 GMT
            Not After : Apr  3 12:35:49 2025 GMT
        Subject: CN=932B004AAE144CE846029B62C3410D8B9E2FB3E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:e2:bf:ea:0d:0c:a7:ec:f8:d6:59:78:3c:
                    48:c1:11:56:21:df:ab:82:1b:b6:d3:26:8e:e2:21:
                    b1:4c:e7:36:6e:d9:d2:89:f3:9c:a7:e9:a6:5c:d2:
                    7c:45:d4:09:4e:2a:56:b9:08:28:a3:ab:96:f2:9d:
                    a5:ec:1a:89:9a:ac:1b:a4:d5:69:34:58:35:3e:e8:
                    e2:fb:d6:c6:ad:61:cf:68:d8:7b:53:5e:5a:b5:ef:
                    a6:12:be:53:01:d5:f6:67:b1:68:95:92:d5:2b:fd:
                    8c:dc:80:75:17:7c:84:fa:dd:29:37:9d:0c:45:9c:
                    64:87:19:be:46:d7:ef:68:5e:07:7a:41:5d:37:ee:
                    91:b7:d4:41:de:84:f7:2b:ca:a5:d7:8d:1c:a4:f8:
                    67:b0:4a:f4:8e:d2:22:cb:16:72:db:d3:75:74:d4:
                    82:f3:e8:97:e3:14:94:77:c3:18:6e:78:85:90:fb:
                    e1:b5:e6:06:b3:d3:ce:17:3a:8a:e7:65:c4:0a:72:
                    d3:09:69:24:c4:e4:41:32:ab:d3:15:de:ae:a3:ae:
                    f1:fe:34:b1:83:1e:36:1f:8c:01:11:98:f9:e8:1f:
                    83:51:87:9c:33:9a:55:c4:27:22:df:6a:cf:93:50:
                    6f:65:1e:0b:0e:8e:31:1d:67:6d:ec:67:0b:60:8d:
                    e8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2B:00:4A:AE:14:4C:E8:46:02:9B:62:C3:41:0D:8B:9E:2F:B3:E4
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e302e302f32332d3233203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:47:ce:95:60:9a:67:66:36:79:03:94:3f:b4:75:82:3d:86:
         fb:e3:b6:27:b7:09:8c:92:ea:d2:10:6e:f5:c2:7b:96:32:f8:
         6c:fd:47:22:71:da:99:11:98:80:d0:bd:25:8f:9a:5e:e2:23:
         c3:f4:ce:98:c4:64:e2:21:5a:16:1a:12:3b:6a:c2:eb:c3:da:
         5f:ab:81:f4:5d:ff:b1:a7:50:aa:32:da:fb:ed:ae:1a:eb:6e:
         5f:6c:1c:81:a0:d2:ac:cf:fb:f3:97:d3:90:a5:d9:49:bf:9b:
         d8:ad:f3:da:ee:43:79:b6:e9:8c:87:f8:99:cb:a3:b0:1e:d2:
         37:31:94:94:90:6d:33:1d:dd:06:a1:11:eb:79:2f:77:1d:c9:
         53:d9:55:48:96:a7:9b:70:44:a5:96:2b:a1:4e:43:be:1c:ab:
         ec:94:f1:52:76:38:cc:b4:b1:70:5e:ee:ab:c7:94:c8:68:5a:
         07:d0:5f:f8:32:23:e0:a4:a4:e8:aa:80:9e:3e:27:bb:75:8f:
         be:1e:46:cc:24:03:70:a1:81:d3:43:62:41:0a:90:0b:6f:6f:
         e6:f9:fb:bf:90:bd:57:49:56:20:af:2e:9a:08:ab:8a:35:ac:
         af:99:0b:72:b8:2a:22:c7:bd:7c:21:88:e8:82:2d:ad:9c:e9:
         df:cd:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org