Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38382e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          HBvVuqkW0ChQZFgiOPZ9DS/ENsLiftql4/6quBKBY/Y=
Subject key identifier:   B6:8E:A1:CE:F8:E1:6C:54:47:EC:E3:FD:B7:C1:E8:32:BC:76:62:9D
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       37FED3A0489BF2FF5ABC7528B5C124BBE760CF36
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32332d3233203d3e203533303437.roa
Signing time:             Tue 28 Nov 2023 13:09:16 +0000
ROA not before:           Tue 28 Nov 2023 13:04:16 +0000
ROA not after:            Tue 26 Nov 2024 13:09:16 +0000
asID:                     53047
IP address blocks:        177.101.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fe:d3:a0:48:9b:f2:ff:5a:bc:75:28:b5:c1:24:bb:e7:60:cf:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 28 13:04:16 2023 GMT
            Not After : Nov 26 13:09:16 2024 GMT
        Subject: CN=B68EA1CEF8E16C5447ECE3FDB7C1E832BC76629D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8b:3c:16:94:6b:d1:d7:60:56:22:cc:b8:13:
                    b2:7d:37:76:3b:17:25:fc:54:be:5b:9e:48:68:93:
                    9c:3d:5d:49:53:8d:f4:d2:56:f6:d7:71:4c:00:a2:
                    42:58:52:16:c3:3f:41:df:31:ab:3d:50:3c:04:78:
                    28:37:12:45:c2:34:57:17:2f:61:7e:43:db:58:db:
                    1e:83:3d:5e:23:90:70:bf:7f:9c:6d:31:0c:fd:22:
                    14:08:30:49:5c:e7:71:fe:01:56:04:f5:76:81:1e:
                    88:74:fd:2d:67:ad:9e:35:21:17:33:ae:71:1a:2a:
                    a4:41:0b:4a:bf:a2:f5:ad:9a:8c:3f:43:34:1c:9c:
                    10:0b:3c:1c:36:26:25:68:85:1a:11:6b:6e:fe:ba:
                    aa:60:14:47:6d:ef:bf:1f:b0:e9:be:1f:84:47:e0:
                    62:e0:e2:38:78:28:60:c2:88:03:e9:cc:d2:4f:e3:
                    90:db:55:1b:75:15:11:39:8a:73:31:67:e6:5d:7e:
                    c5:7c:7b:c2:a7:72:ef:74:52:01:75:7f:79:48:30:
                    41:2a:53:a7:3a:04:3e:fa:27:36:b7:58:63:f0:0c:
                    b6:d6:06:8e:34:e5:54:3f:2d:42:c3:8a:cd:02:84:
                    10:2f:31:00:60:0a:19:4a:19:c9:8d:98:87:3f:89:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8E:A1:CE:F8:E1:6C:54:47:EC:E3:FD:B7:C1:E8:32:BC:76:62:9D
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:4c:58:dc:6b:03:75:e8:e6:62:77:17:d3:6a:9d:d6:93:56:
         a9:1a:71:bb:bd:f8:0a:e8:c2:55:80:e5:25:ca:13:9d:c3:50:
         f3:ab:76:fe:16:65:bb:2c:d1:ee:1c:a3:6c:b1:20:13:f8:3a:
         2d:ce:e2:db:6c:3e:5a:78:75:b4:bc:b8:b6:42:2b:9a:49:b1:
         12:25:72:61:6b:00:4b:93:ca:ed:79:25:86:46:1d:58:b9:79:
         ee:df:9f:5a:67:02:0e:61:b1:22:2d:5a:3f:c5:5f:f8:4c:83:
         ea:74:ff:ea:5a:e6:02:0f:cd:f5:ce:35:8f:11:a1:95:63:fd:
         0e:a5:10:c2:c3:f7:05:33:7a:b1:ef:25:95:22:ad:54:5e:69:
         04:68:9e:26:f4:55:ae:80:30:75:95:ae:71:f9:31:a8:3f:4e:
         b9:1b:3f:ed:ed:f3:a7:56:80:0f:ba:1e:0b:76:ab:2c:42:64:
         38:64:15:3b:6c:b9:02:13:c7:ba:0f:f6:38:58:bf:4f:c0:5a:
         56:ac:59:91:77:02:4d:ee:9e:f4:d7:74:4a:75:5f:86:56:d9:
         dc:c0:f4:ea:e6:62:3c:54:74:76:c1:6e:d8:98:86:89:28:85:
         e5:70:ef:09:48:90:bc:ef:7b:4c:35:2a:b4:ff:0f:5d:63:a0:
         bc:1c:43:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org