Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38342e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          Ch4/1N2LvWxme7w1/Z7pir0XbCd9gf0L95acOA9/UOM=
Subject key identifier:   0D:3D:2E:66:2E:FE:0E:81:DE:68:BA:AE:AF:E7:93:17:A9:DE:26:27
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       3339DAD2D9115215D322F0661BB0E0C868C44BEA
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa
Signing time:             Tue 28 Nov 2023 13:09:18 +0000
ROA not before:           Tue 28 Nov 2023 13:04:18 +0000
ROA not after:            Tue 26 Nov 2024 13:09:18 +0000
asID:                     53047
IP address blocks:        177.101.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:39:da:d2:d9:11:52:15:d3:22:f0:66:1b:b0:e0:c8:68:c4:4b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 28 13:04:18 2023 GMT
            Not After : Nov 26 13:09:18 2024 GMT
        Subject: CN=0D3D2E662EFE0E81DE68BAAEAFE79317A9DE2627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:ce:88:bf:6f:86:ba:d1:b3:53:05:90:2b:
                    de:17:db:7b:49:62:46:c8:e8:c3:0e:26:16:02:1b:
                    ee:6a:24:c0:39:a8:38:bf:7a:e8:a5:76:2f:f7:d0:
                    91:6c:5c:d6:bf:bc:3c:76:24:2d:3e:90:66:a8:c4:
                    c6:59:be:17:b2:fb:c9:55:11:a2:1b:90:7e:06:81:
                    bc:83:01:ea:ae:50:88:24:d2:9a:c2:ef:47:ad:15:
                    35:7a:04:4a:75:90:35:2b:00:68:4d:9b:8f:a4:e3:
                    72:a1:67:fe:b9:c4:41:ad:4b:81:6a:12:b9:ed:08:
                    4a:2a:ed:3a:f3:53:c5:c1:82:aa:ea:8b:62:53:b3:
                    c8:3c:d8:af:94:d3:c2:0b:4d:a3:16:9f:21:5d:6e:
                    9a:72:72:4d:33:5b:70:3b:30:c6:8c:a2:05:dc:f4:
                    be:fb:11:24:53:fb:f3:e5:ab:71:c3:ad:d0:38:65:
                    ca:fb:11:83:71:5f:4e:c7:27:56:de:cc:43:c8:69:
                    f7:a8:8d:14:f4:ec:f1:dc:91:d9:60:71:b5:70:6b:
                    b4:71:28:1d:7a:25:92:57:d4:94:be:b9:51:aa:10:
                    30:a0:9a:e6:b2:17:c4:0c:cc:cf:12:4c:c1:f7:f2:
                    05:5c:2a:d4:75:68:0c:c7:cd:ad:ed:56:36:72:de:
                    0e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3D:2E:66:2E:FE:0E:81:DE:68:BA:AE:AF:E7:93:17:A9:DE:26:27
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:dd:af:fa:c7:0a:d8:92:e2:f4:d6:00:7a:6d:ab:73:1c:fd:
         4b:a6:df:08:ec:48:e7:ff:bc:53:66:62:aa:86:5f:e0:2b:75:
         f0:4f:96:a8:9c:bb:86:ef:c8:3a:2f:3b:37:4d:9d:2c:63:5e:
         99:60:13:24:e0:76:2e:b5:3c:97:a2:b4:a8:83:e8:0b:6f:2d:
         c0:ac:da:c7:7a:2b:33:c8:d1:3d:ae:32:1b:1c:d4:76:81:19:
         36:b4:2a:5a:f0:e8:95:60:e7:20:be:fa:d9:a7:f5:b8:ab:43:
         32:71:bd:5b:d7:67:33:2d:9f:81:29:a0:0f:39:41:c1:81:26:
         31:ea:ae:4b:81:69:14:a5:1e:81:8f:63:46:b5:e6:8f:89:e2:
         f3:92:2d:ff:53:49:9e:08:b5:76:38:92:3d:29:10:86:fa:9d:
         f0:c4:43:fc:96:ca:66:84:eb:bc:f7:9b:73:5f:36:27:de:cf:
         14:61:70:cb:b7:5d:cf:f1:b9:6d:5c:22:cf:bd:a6:43:56:b5:
         8d:2f:e3:58:cd:3e:41:bf:31:64:91:f8:62:6f:23:bd:f7:f3:
         be:a2:35:7e:36:49:04:7b:a5:bb:b2:4f:8e:48:d9:bc:f5:a4:
         b6:69:cb:a8:6c:ca:d9:70:41:fc:e2:f1:8a:ca:b0:a6:e7:76:
         2e:86:7e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:05 2024 by rpki-client on console-ams.rpki-client.org