Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/3137372e38362e32382e302f32322d3234203d3e20323632343932.roa
File:                     3137372e38362e32382e302f32322d3234203d3e20323632343932.roa (raw, json)
Hash identifier:          +Avtqd2R4MoAQrmfT3u7ARPj9iw4nsvDZPGjn0jngGM=
Subject key identifier:   A6:B7:04:01:B1:81:12:79:33:40:81:1B:5E:B8:6F:85:1B:33:55:E2
Certificate issuer:       /CN=FB4BF9A320697AA48C489FC1AFF256419DED5EE1
Certificate serial:       7A3121B9F44520E12509A024C9608803A9148408
Authority key identifier: FB:4B:F9:A3:20:69:7A:A4:8C:48:9F:C1:AF:F2:56:41:9D:ED:5E:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/3137372e38362e32382e302f32322d3234203d3e20323632343932.roa
Signing time:             Thu 11 Apr 2024 20:00:41 +0000
ROA not before:           Thu 11 Apr 2024 19:55:41 +0000
ROA not after:            Thu 10 Apr 2025 20:00:41 +0000
asID:                     262492
IP address blocks:        177.86.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:31:21:b9:f4:45:20:e1:25:09:a0:24:c9:60:88:03:a9:14:84:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4BF9A320697AA48C489FC1AFF256419DED5EE1
        Validity
            Not Before: Apr 11 19:55:41 2024 GMT
            Not After : Apr 10 20:00:41 2025 GMT
        Subject: CN=A6B70401B18112793340811B5EB86F851B3355E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:4c:3c:90:86:eb:08:d4:ac:7e:a1:93:8b:
                    81:47:fe:9d:d2:6c:4f:e3:af:60:4e:16:f2:96:4c:
                    5c:95:49:f9:ff:af:58:ee:b0:75:7c:b5:39:72:5a:
                    a9:f2:4c:d4:c9:0a:9b:ed:9d:50:ed:84:36:28:ed:
                    9e:75:fc:51:54:32:06:00:25:48:9b:ba:29:c4:93:
                    0f:a7:a4:da:15:32:d4:fd:61:1a:72:f0:0f:21:53:
                    14:eb:de:73:d1:c0:da:fc:3e:7d:b4:c6:59:0b:4c:
                    08:73:8a:3b:0e:95:36:8c:a8:03:d1:ac:90:08:fb:
                    a7:be:98:98:99:96:00:6b:db:d5:2b:eb:a6:12:e8:
                    1d:c5:07:e3:c4:69:ac:fa:84:c3:f6:8b:7f:49:1c:
                    0c:37:e2:21:e7:e0:1b:fa:22:1d:98:6f:9f:6b:8f:
                    a9:6e:b4:4f:7e:fb:ac:05:52:c4:2d:d7:3f:66:4a:
                    18:81:ee:47:8d:34:c6:30:f8:35:df:40:69:a5:2e:
                    87:cc:e2:47:3d:41:99:04:d6:eb:2e:1e:16:a8:6f:
                    98:bc:9f:5b:ba:4c:74:e9:93:85:d0:4b:80:f6:19:
                    93:fa:45:c0:74:8e:1e:11:49:c2:c9:55:d8:bb:60:
                    99:f1:87:5e:26:e2:4f:46:a2:5f:3d:a1:cb:eb:8b:
                    5f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B7:04:01:B1:81:12:79:33:40:81:1B:5E:B8:6F:85:1B:33:55:E2
            X509v3 Authority Key Identifier:
                keyid:FB:4B:F9:A3:20:69:7A:A4:8C:48:9F:C1:AF:F2:56:41:9D:ED:5E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/3137372e38362e32382e302f32322d3234203d3e20323632343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:8b:ee:d6:35:14:fa:bc:36:7e:df:15:5a:a2:90:34:b6:92:
         71:90:f1:13:c9:28:a8:a2:e4:8a:ed:9a:99:c5:7f:50:8c:d2:
         e1:92:28:7f:c1:58:29:40:69:84:91:e3:e5:18:da:2b:9d:75:
         eb:79:3c:60:f2:37:4a:55:fe:f3:a9:75:86:bd:fc:0c:9e:8f:
         d0:05:f5:43:4e:b4:81:31:96:41:84:bb:6a:b4:79:1f:3f:6d:
         71:cf:5c:8e:a6:70:c1:3b:a0:b8:0a:6c:b6:37:ce:02:a5:bd:
         cb:81:b4:06:ff:95:7b:8c:d6:0d:2d:16:ca:ae:be:7d:f3:17:
         73:43:b2:cc:7f:6d:95:ae:06:7f:07:68:65:45:59:2d:80:fc:
         2f:ba:98:03:e3:08:af:20:cb:16:75:68:cf:45:4c:ef:b2:36:
         0d:95:35:c2:3f:8f:0f:56:73:11:e6:1e:a5:b0:2b:22:0c:a8:
         e1:32:bc:72:b9:83:35:2d:02:70:a0:13:21:59:9c:6d:e9:cf:
         f6:fc:bd:13:4c:a0:18:d7:cd:45:cc:ba:c3:b6:04:ca:85:64:
         9e:eb:33:7b:cf:26:39:a6:ed:a2:b6:70:7f:d3:97:21:f1:cf:
         3f:0a:a6:e5:83:22:d7:9b:f1:9e:25:50:ac:b7:57:2c:0e:0b:
         37:cc:73:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org