Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e322e302f32332d3233203d3e20323632343835.roa
File:                     3137372e36362e322e302f32332d3233203d3e20323632343835.roa (raw, json)
Hash identifier:          Qm2kQljm4RuK6MMJNFKSy5SpSF1v7G2BcKodMuOcdFM=
Subject key identifier:   F5:43:A6:D3:FB:F5:41:4D:E8:08:EF:97:1D:36:C9:3D:04:B4:BA:06
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       4A5D47A799555464301DDE5A962EA9194097CC53
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e322e302f32332d3233203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:49 +0000
ROA not before:           Thu 04 Apr 2024 12:30:49 +0000
ROA not after:            Thu 03 Apr 2025 12:35:49 +0000
asID:                     262485
IP address blocks:        177.66.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5d:47:a7:99:55:54:64:30:1d:de:5a:96:2e:a9:19:40:97:cc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:49 2024 GMT
            Not After : Apr  3 12:35:49 2025 GMT
        Subject: CN=F543A6D3FBF5414DE808EF971D36C93D04B4BA06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:5a:4b:c3:4e:ed:fd:69:1b:a0:44:5e:c5:
                    0d:31:6e:a7:50:85:0c:15:f8:e9:e5:b2:85:20:93:
                    1b:a2:f3:5c:73:a0:39:03:ec:c1:ef:2f:a6:af:32:
                    2e:72:ca:93:0f:9e:ed:06:17:76:ba:08:0f:99:31:
                    63:b6:2c:79:09:33:01:93:d8:bf:c2:33:38:31:16:
                    37:1a:be:c9:a8:c8:0d:76:b8:c2:fb:46:17:92:38:
                    4f:b8:3b:f6:a6:95:d2:f2:e4:62:54:af:5c:0e:b9:
                    f1:f2:a5:db:d8:62:99:44:da:98:6d:43:83:0e:a1:
                    e5:cf:05:12:58:41:2a:eb:dd:b4:f7:bb:c9:f5:27:
                    ec:4b:fe:bb:6e:ea:45:3a:af:6a:f7:72:a0:1d:d4:
                    8e:70:f6:29:84:ef:58:bd:d5:68:fa:2c:3c:7b:97:
                    c1:67:14:cd:c6:91:47:c1:3d:c7:84:6c:d8:50:d1:
                    42:bd:76:b8:5e:f3:2f:44:4a:59:a9:e5:d7:aa:d6:
                    ef:bc:91:c7:f0:66:f2:93:83:56:1c:ee:75:71:a0:
                    ad:62:52:0f:18:71:e4:4d:24:ac:ef:af:6c:5f:ce:
                    c7:99:96:b7:b4:d0:49:8a:ce:32:77:7b:e8:4f:e5:
                    02:19:22:9e:fa:04:56:36:05:5d:2f:3a:92:58:81:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:43:A6:D3:FB:F5:41:4D:E8:08:EF:97:1D:36:C9:3D:04:B4:BA:06
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e322e302f32332d3233203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:ea:3e:f4:93:5a:96:f5:8f:8c:77:86:79:ed:7b:a5:26:26:
         e3:16:4e:4d:d0:3c:14:49:01:54:1c:e9:e1:47:43:b0:24:7c:
         06:75:14:ac:66:85:a8:2c:9e:03:8b:50:51:79:81:55:43:4f:
         7f:48:bd:86:4c:9d:0f:7e:4d:d8:a4:09:c3:b9:37:c7:c8:55:
         29:10:d0:1a:a0:9e:7c:55:9f:c4:6b:b7:d1:38:28:05:96:54:
         89:7a:a3:39:27:d0:d4:8e:f3:37:b2:8f:fe:67:e4:67:73:da:
         6b:99:1d:73:bc:46:f9:c3:cc:b1:f1:ce:86:1b:00:d3:5a:97:
         88:c3:6c:95:a1:2a:96:74:77:60:4b:c7:1b:e5:e2:2a:0b:65:
         19:f6:15:97:52:ac:2a:91:f3:82:9d:80:13:e3:ef:75:d2:3b:
         bb:01:0f:dd:d0:53:93:51:64:c5:44:d8:e2:64:a6:d5:0b:6b:
         ba:a1:09:78:ff:66:69:af:b9:16:fd:b1:5d:b7:0d:98:ab:14:
         80:38:21:9a:4f:c2:50:16:0c:97:e8:9d:34:7c:4a:b3:20:37:
         fa:8d:97:ec:e9:37:c6:2d:98:8e:ce:f4:65:7a:70:49:2d:e6:
         be:e0:bc:73:6b:e3:ee:c3:06:48:b3:8f:6b:03:5a:17:08:da:
         77:f2:11:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org