Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38312e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38312e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          lP6DEvZ5xc+nMNip2DHZG+B8zY0EAqW+1MV85UM5gv8=
Subject key identifier:   0E:D4:78:1B:31:B4:A2:51:B0:14:4A:B2:1D:79:23:E2:97:C0:94:5B
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       70C03C1194E2B7E11603B63335C276B8C35ED3B9
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38312e302f32342d3234203d3e203533303437.roa
Signing time:             Tue 28 Nov 2023 12:09:12 +0000
ROA not before:           Tue 28 Nov 2023 12:04:12 +0000
ROA not after:            Tue 26 Nov 2024 12:09:12 +0000
asID:                     53047
IP address blocks:        177.101.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c0:3c:11:94:e2:b7:e1:16:03:b6:33:35:c2:76:b8:c3:5e:d3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 28 12:04:12 2023 GMT
            Not After : Nov 26 12:09:12 2024 GMT
        Subject: CN=0ED4781B31B4A251B0144AB21D7923E297C0945B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:34:29:66:d4:f5:90:88:6c:bb:df:e4:4d:4e:
                    a1:7d:02:c5:77:f2:6a:41:d3:77:3d:c2:da:a4:33:
                    bb:47:3b:ce:ff:23:41:a0:77:6a:fe:b0:d2:b8:9e:
                    d0:99:0e:7c:b5:0e:6c:dc:d9:75:6b:2a:2e:2b:89:
                    87:8a:1e:ec:80:c7:c6:8e:87:56:51:f5:36:e3:c4:
                    f5:c8:8c:44:5f:09:e4:77:53:48:e0:38:e0:af:9a:
                    7d:bc:8e:54:f5:7c:1f:db:7d:34:09:5f:5a:27:b1:
                    96:1d:64:e0:19:ab:83:95:67:73:35:43:ca:a2:72:
                    e0:67:d7:cb:e7:64:32:8d:14:9f:cf:5b:c5:f9:0b:
                    5b:70:d7:04:cf:f0:8f:64:54:9f:81:3b:84:64:8a:
                    4c:9b:bf:c5:03:70:0c:46:ba:c6:08:bc:93:16:1f:
                    6f:3d:be:1f:04:31:d9:27:19:79:0f:9a:2b:b7:2c:
                    7a:bd:b2:11:8f:15:b2:92:5a:ff:e9:1d:42:1b:ce:
                    5c:a8:cb:2f:f0:15:5a:e1:f1:33:10:b4:7d:48:04:
                    22:03:f4:c3:4a:20:a5:4f:b3:33:a6:32:44:c2:80:
                    d1:be:34:28:09:20:40:9d:dd:35:07:38:42:77:f8:
                    dc:25:e7:f4:6e:69:dc:b8:d7:3c:3e:0c:30:e1:8c:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D4:78:1B:31:B4:A2:51:B0:14:4A:B2:1D:79:23:E2:97:C0:94:5B
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38312e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:17:e4:4b:de:c5:43:0c:3e:c4:54:ec:ec:3b:15:bf:23:1d:
         26:40:a7:cb:51:3b:e1:36:b8:28:d4:51:3f:9a:8c:15:48:7f:
         30:37:17:2a:42:f9:e9:99:2c:6d:86:3a:30:41:df:d2:2b:e7:
         f8:d1:ea:ce:43:6e:f6:8a:35:77:4a:b8:5c:88:43:36:40:f6:
         87:e8:1a:93:e1:40:40:ee:eb:6c:af:be:16:77:be:43:ab:52:
         ae:d6:dc:66:a2:2d:ad:18:8d:10:41:30:c3:09:57:98:d1:a4:
         82:be:c5:1a:15:2b:94:a8:fa:c0:ca:05:b3:f4:07:e7:72:59:
         f3:da:76:8a:87:8d:c9:40:5a:f9:74:6c:e8:d1:aa:c0:5e:c0:
         11:3c:16:09:7b:34:a7:52:f4:71:9a:19:bb:23:fe:1b:2b:4d:
         98:4b:41:e4:b2:c3:57:8b:d6:e3:f3:f5:7e:01:91:d5:76:1f:
         a8:84:98:aa:8b:60:9f:aa:a9:5a:0b:8d:e5:27:84:ca:a8:4b:
         69:67:6e:34:09:92:2f:2b:54:33:2e:73:72:61:41:54:56:cd:
         dd:38:f5:1e:b2:2f:9f:09:b6:d4:95:25:18:d9:13:7a:41:2c:
         84:66:cc:a4:8b:44:9b:4e:71:e2:79:cc:50:95:f6:c9:6a:b6:
         1b:61:75:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org