Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e322e302f32342d3234203d3e20323632343835.roa
File:                     3137372e36362e322e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          K7gCiRLwNwNT5Y3G1FORPTONi+Bj3YM+sPqIxKoFhyg=
Subject key identifier:   45:B1:18:09:37:68:EE:40:15:31:D7:6C:FE:32:7C:39:5A:84:7F:1F
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       0B56484F1EE1D9BFB16D8D8DC72CC4990BB15883
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e322e302f32342d3234203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:47 +0000
ROA not before:           Thu 04 Apr 2024 12:30:47 +0000
ROA not after:            Thu 03 Apr 2025 12:35:47 +0000
asID:                     262485
IP address blocks:        177.66.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:56:48:4f:1e:e1:d9:bf:b1:6d:8d:8d:c7:2c:c4:99:0b:b1:58:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:47 2024 GMT
            Not After : Apr  3 12:35:47 2025 GMT
        Subject: CN=45B118093768EE401531D76CFE327C395A847F1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:27:2e:9a:26:2f:61:3b:08:df:d3:7a:e2:
                    a7:aa:91:b5:0e:f5:00:61:a8:5e:00:03:67:a1:dd:
                    9a:c8:81:a5:87:d7:39:fc:f0:88:ed:95:bc:be:29:
                    b7:b7:ec:48:4b:b1:b6:2c:96:02:ee:3d:a2:66:48:
                    bc:04:4c:8c:a7:75:78:6f:92:3d:3f:bb:ee:4e:13:
                    8b:1f:b0:fb:7f:77:2a:de:49:5e:26:74:f9:bf:17:
                    6b:36:91:58:82:8e:e1:c9:40:87:bb:ff:6c:d6:81:
                    66:b8:9f:13:be:88:91:88:36:d3:f4:53:4d:0c:a1:
                    f2:84:88:e5:99:2b:0f:bb:55:13:16:ee:59:3b:8a:
                    a2:fb:2c:96:63:6c:57:1d:72:b4:15:a9:35:a7:05:
                    9b:d8:3d:92:2d:bc:10:ff:b3:72:43:13:d3:06:63:
                    1a:d4:82:8d:65:71:e3:79:c3:9d:4b:ca:10:76:e1:
                    83:e0:b5:e0:05:4f:3b:c6:14:07:1c:5c:6c:76:e0:
                    fe:d2:23:4d:71:99:9f:64:d8:12:7f:6a:2b:a9:e3:
                    70:34:dd:92:22:10:f6:d1:1f:d9:d2:fe:3e:29:38:
                    8f:f6:d6:ff:48:42:8f:08:ff:9f:8c:99:86:b2:28:
                    fe:8b:d9:e1:22:d1:86:f7:d3:fd:7c:20:64:ff:0d:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B1:18:09:37:68:EE:40:15:31:D7:6C:FE:32:7C:39:5A:84:7F:1F
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e322e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:1a:69:ce:bd:d0:ca:7d:be:d8:51:d2:62:bd:ef:28:99:4d:
         8c:06:12:3e:c2:a7:cd:b1:1d:a2:54:b6:af:74:8e:1a:86:5c:
         2f:88:87:d7:b8:67:4b:2f:b1:a0:48:6e:04:a2:04:c2:7b:c8:
         5c:b6:d7:9e:b8:93:1e:53:48:d0:5d:31:38:15:9b:54:34:7f:
         38:18:ac:fb:fd:98:ac:80:2a:1c:89:fc:59:b5:21:2d:fc:04:
         25:3d:c8:00:84:98:44:8a:97:31:9d:10:5b:66:77:cd:dc:4e:
         83:81:e1:51:11:a7:1d:5e:71:dc:02:ea:c3:79:1e:e8:62:be:
         c2:57:ea:e0:2f:0d:21:a6:dc:03:02:30:09:bd:04:e6:ab:eb:
         bb:23:df:c7:e0:34:bb:87:98:b8:41:29:44:54:a0:ac:be:50:
         b5:c3:58:54:28:a4:a5:69:3f:f0:05:0b:61:d8:0e:a1:77:30:
         35:5f:07:6c:0b:72:68:3f:06:86:1a:da:1f:01:98:dd:51:c8:
         76:ac:76:8e:53:cc:12:ba:ac:56:57:e3:d7:c4:56:b3:7a:ee:
         4e:5b:13:bf:65:12:84:d9:f7:f7:d6:a7:c1:42:00:8e:32:84:
         00:19:3d:98:1d:96:67:6b:8f:5f:ba:7b:ab:f1:07:c0:00:72:
         d3:8c:ca:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org