Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e332e302f32342d3234203d3e20323632343835.roa
File:                     3137372e36362e332e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          7cJEDubZXymNRnuoIE8Qq7jRGRBX3s1qcauiv9FgGB0=
Subject key identifier:   35:13:C7:33:4C:14:81:75:C7:7A:E9:07:F7:31:73:08:28:E2:44:69
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       7E30D4A53C2EF9E39D397D3894B899FFC6547241
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e332e302f32342d3234203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:49 +0000
ROA not before:           Thu 04 Apr 2024 12:30:49 +0000
ROA not after:            Thu 03 Apr 2025 12:35:49 +0000
asID:                     262485
IP address blocks:        177.66.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:30:d4:a5:3c:2e:f9:e3:9d:39:7d:38:94:b8:99:ff:c6:54:72:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:49 2024 GMT
            Not After : Apr  3 12:35:49 2025 GMT
        Subject: CN=3513C7334C148175C77AE907F731730828E24469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:ec:98:12:f4:ed:59:41:d5:96:c1:5d:fc:
                    24:fa:f3:f8:5a:e6:9f:27:cd:b1:b6:c6:7c:3a:41:
                    68:67:ec:5e:b6:41:70:4e:43:a4:4f:74:c5:9a:0a:
                    4b:cb:43:2d:f1:28:8a:85:bf:75:d0:23:27:0b:d0:
                    4b:fc:8d:60:7c:e9:5e:6f:0f:15:00:6d:2c:ae:09:
                    7b:8f:2b:c1:43:99:ce:25:d8:e7:c2:e5:78:7c:a8:
                    a5:03:e6:44:3a:f1:a6:65:8d:75:91:dd:3c:92:ab:
                    fe:dd:ea:21:27:71:bf:7c:35:42:90:19:50:45:7d:
                    23:d8:27:3c:44:bc:71:4c:c9:01:f1:05:80:7e:b1:
                    88:48:49:89:24:53:9b:06:ce:46:74:94:c6:04:a2:
                    72:86:fa:57:6b:69:79:3f:f3:52:a1:2f:a0:99:57:
                    02:d7:26:f2:57:50:27:26:be:03:6a:58:29:fb:c4:
                    7b:e9:73:fa:c0:9d:08:2f:22:6a:55:47:a4:fc:49:
                    f2:f0:e3:e6:55:48:34:f9:19:6b:66:4d:b2:b9:09:
                    3a:c2:86:3a:0d:95:5f:9e:55:98:68:2b:22:70:36:
                    79:7e:6f:2e:20:7b:6f:d7:51:ab:82:73:99:31:38:
                    bd:e6:0c:5e:e8:29:59:76:07:47:50:f0:cc:65:6d:
                    27:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:13:C7:33:4C:14:81:75:C7:7A:E9:07:F7:31:73:08:28:E2:44:69
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3137372e36362e332e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:dd:70:f4:ac:01:4c:49:a6:b1:3d:2a:81:7f:e4:ad:cb:32:
         93:2d:c2:48:4d:a4:1e:6c:64:29:86:b4:de:aa:87:ff:05:70:
         3f:f8:ae:a9:9a:d8:09:61:76:cf:30:a1:58:f1:f0:c8:0e:92:
         f6:36:c8:fe:eb:8a:11:0f:4b:5e:9b:ef:52:f3:6c:4f:a6:fa:
         77:73:b4:31:da:b9:78:b2:a4:cb:97:57:e2:2a:f4:f8:ca:63:
         57:9a:33:dc:26:0e:06:f3:95:61:e2:13:94:84:85:28:de:bc:
         5b:36:f1:e0:0b:71:34:68:33:41:0c:9c:d1:c2:0b:1a:00:45:
         bd:a8:d6:45:49:78:76:00:2d:2c:58:f3:6f:94:20:ee:99:89:
         3d:7b:88:56:ce:07:08:f7:74:3a:b8:69:87:4b:db:58:90:84:
         78:03:c0:8e:3b:47:bc:a0:bc:a5:00:d8:dd:4e:87:49:b2:18:
         7a:13:4e:48:ff:6f:fc:ea:39:e5:f3:6f:66:19:4e:ce:ff:14:
         ab:23:75:8c:78:b3:06:d3:33:c8:ca:01:92:33:cb:3f:4b:2b:
         19:5b:71:bf:e9:cf:bf:8d:ab:85:7c:da:df:aa:38:47:9a:ec:
         9b:68:d8:09:e9:f5:af:e1:62:c7:67:16:c6:f5:2c:e4:42:fb:
         7b:9c:f9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org