Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/3137372e36362e3130342e302f32322d3234203d3e20323632343932.roa
File:                     3137372e36362e3130342e302f32322d3234203d3e20323632343932.roa (raw, json)
Hash identifier:          LwWizgcTNBjjaI6BvLfkYny4pCnrQ5UYBOEzLBtsUno=
Subject key identifier:   28:91:2E:CB:81:7D:9B:D8:D7:B7:68:34:DC:3A:B3:2A:67:2A:7D:59
Certificate issuer:       /CN=FB4BF9A320697AA48C489FC1AFF256419DED5EE1
Certificate serial:       2308A006C44C769BF2845AF0913BE5E8B31172E2
Authority key identifier: FB:4B:F9:A3:20:69:7A:A4:8C:48:9F:C1:AF:F2:56:41:9D:ED:5E:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/3137372e36362e3130342e302f32322d3234203d3e20323632343932.roa
Signing time:             Thu 11 Apr 2024 20:00:41 +0000
ROA not before:           Thu 11 Apr 2024 19:55:41 +0000
ROA not after:            Thu 10 Apr 2025 20:00:41 +0000
asID:                     262492
IP address blocks:        177.66.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:08:a0:06:c4:4c:76:9b:f2:84:5a:f0:91:3b:e5:e8:b3:11:72:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4BF9A320697AA48C489FC1AFF256419DED5EE1
        Validity
            Not Before: Apr 11 19:55:41 2024 GMT
            Not After : Apr 10 20:00:41 2025 GMT
        Subject: CN=28912ECB817D9BD8D7B76834DC3AB32A672A7D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:63:41:8b:ae:21:2c:31:87:22:97:4c:65:
                    ed:ca:e9:bf:48:b9:3c:f2:60:9f:fd:8c:57:7b:4b:
                    af:98:55:2d:bb:c7:f5:97:0b:14:6e:79:38:3f:90:
                    03:53:3a:2c:2c:b7:a3:17:5b:f2:6c:81:fc:46:b5:
                    4d:f5:30:88:96:e8:61:8b:dc:fe:60:5e:f2:8c:be:
                    61:da:5b:3e:29:e8:39:44:d4:de:27:8e:48:fd:b1:
                    a8:10:aa:f0:f1:53:2d:54:4d:e2:7f:c0:13:d7:4f:
                    90:49:8e:12:d0:ad:f7:8b:64:ed:0e:d7:d5:5d:a6:
                    e8:8e:16:ab:90:3c:bc:e1:09:8f:9d:3b:0f:38:49:
                    72:72:a7:0d:60:5c:e3:ad:2e:c5:8d:2e:02:d7:a0:
                    03:f2:03:56:51:b4:84:a3:e0:69:53:43:7b:fe:34:
                    c4:b1:d3:54:09:85:0d:95:c7:f7:f2:02:88:4c:13:
                    08:a9:95:fc:21:d6:44:4c:d0:82:f4:6f:c6:bf:16:
                    0b:40:4e:8a:fc:e8:03:69:b7:3f:7a:cd:07:a4:0b:
                    a8:e4:0d:28:25:e3:eb:72:68:40:f5:a3:af:30:27:
                    58:1d:64:3d:9d:ca:ed:b3:65:cd:28:39:b4:f1:8f:
                    e2:23:51:37:5b:1f:bb:fc:f5:5e:15:cd:79:6b:ee:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:91:2E:CB:81:7D:9B:D8:D7:B7:68:34:DC:3A:B3:2A:67:2A:7D:59
            X509v3 Authority Key Identifier:
                keyid:FB:4B:F9:A3:20:69:7A:A4:8C:48:9F:C1:AF:F2:56:41:9D:ED:5E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/3137372e36362e3130342e302f32322d3234203d3e20323632343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:64:39:41:e3:7b:fe:91:6b:fe:b7:4f:cd:d3:2b:2a:ad:8c:
         9c:b9:35:b0:40:d0:00:34:56:25:d7:bb:29:00:b0:4f:72:00:
         fb:2d:75:c7:ff:47:1e:6d:17:11:24:4f:16:c7:05:99:7c:d4:
         79:ad:e4:2c:74:0c:c7:ec:1b:84:20:b0:31:5a:df:04:71:e7:
         aa:42:44:28:cd:f4:46:3e:bd:4f:78:46:c6:e9:29:cf:97:ac:
         f4:ca:86:01:c4:e6:76:7c:39:24:97:18:2f:0e:a8:05:83:d0:
         91:61:b8:a7:c4:b6:b3:a7:d8:97:41:f9:d1:9d:45:cf:97:76:
         b0:dc:07:d8:5f:a0:04:d8:43:3a:91:d8:39:01:c0:4f:61:7a:
         bd:df:32:7c:1b:dc:3b:20:1e:6b:2f:73:11:bf:50:86:9e:2c:
         a0:85:3d:3d:73:63:00:2a:81:76:3a:68:4a:ce:9f:4b:01:6a:
         0b:8e:4b:44:86:3a:51:bb:61:18:de:49:56:2d:1e:97:be:6d:
         f7:cb:61:97:e6:f7:d5:ab:cd:36:d4:06:e9:6a:61:36:34:8d:
         b7:2d:f3:07:91:55:f5:7e:44:f9:d8:2b:51:f9:7d:18:e1:cf:
         c1:1a:b2:07:16:46:6b:76:c3:55:cc:36:02:64:ed:53:b6:31:
         ae:4e:1f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org