Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38392e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38392e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          FzW191ULt3WJv++NA1MiObu9GB/QCUjodJ58C5MbtzM=
Subject key identifier:   26:1F:A5:0C:CF:24:77:A9:38:A4:9A:18:2C:1C:6B:1E:9B:F8:41:A2
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       48E74F7413766C98587150E6D77CC1F01CEA7C71
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38392e302f32342d3234203d3e203533303437.roa
Signing time:             Tue 28 Nov 2023 13:09:16 +0000
ROA not before:           Tue 28 Nov 2023 13:04:16 +0000
ROA not after:            Tue 26 Nov 2024 13:09:16 +0000
asID:                     53047
IP address blocks:        177.101.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e7:4f:74:13:76:6c:98:58:71:50:e6:d7:7c:c1:f0:1c:ea:7c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 28 13:04:16 2023 GMT
            Not After : Nov 26 13:09:16 2024 GMT
        Subject: CN=261FA50CCF2477A938A49A182C1C6B1E9BF841A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:04:8b:4b:60:bf:9d:d9:0e:7a:9c:81:d8:b9:
                    8b:f1:19:9e:09:d9:48:fc:0c:ba:b2:b4:51:a2:34:
                    25:35:7b:8e:15:c0:aa:16:87:9c:fe:3d:ff:51:5b:
                    01:f0:77:92:16:40:9f:96:7a:70:ad:62:b5:7d:50:
                    e6:a5:8b:37:1b:9c:ab:07:d6:e0:80:6e:10:a1:92:
                    40:00:f3:8c:d9:6e:c8:75:9c:f1:07:b7:51:76:a6:
                    69:4b:c0:17:6b:de:cf:69:f9:8f:77:e7:60:40:28:
                    a0:1a:e3:6f:4b:d9:fd:21:ef:80:a4:6f:09:d2:ba:
                    76:bf:4b:23:1e:10:b8:bf:a7:ca:a9:e1:e3:67:e1:
                    23:ba:fe:bb:4d:0e:a9:68:d2:7a:43:c9:dc:ca:cf:
                    d0:1a:dd:0a:64:d0:f1:da:ef:9c:3e:05:2a:0e:f5:
                    14:d6:3a:13:06:18:28:a6:5f:ec:37:2b:2d:e1:43:
                    ea:5f:85:09:e3:9c:66:9b:fb:98:95:d7:c3:18:d0:
                    0c:80:3a:08:31:00:7f:55:e5:41:45:96:eb:97:ab:
                    82:09:7b:4d:88:f8:4d:72:8d:67:6d:ae:92:fe:69:
                    2b:72:97:d7:47:df:7c:95:13:72:ad:76:c1:4f:d9:
                    8c:29:ab:50:2e:15:fd:79:8b:c9:b1:87:92:74:25:
                    70:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1F:A5:0C:CF:24:77:A9:38:A4:9A:18:2C:1C:6B:1E:9B:F8:41:A2
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38392e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:5e:77:9b:f3:44:a0:31:a9:4d:f4:f6:8b:41:dd:90:80:
         51:28:dd:59:39:b6:b6:06:90:e9:11:73:ab:c9:9b:31:0b:54:
         9e:55:98:06:1a:46:a1:23:87:81:4d:bc:21:5a:77:e7:69:fd:
         83:ec:15:ff:b3:82:f6:4c:45:7d:7a:8d:29:4b:16:f6:ed:b4:
         02:2e:e1:c6:64:71:cf:a0:85:35:b9:5c:d6:11:68:5a:2d:a0:
         f9:2d:da:18:ef:32:f2:74:c6:74:47:c0:da:c5:03:d4:aa:f4:
         03:cb:91:25:17:cc:1d:48:08:6e:29:ab:1b:82:c1:46:79:b9:
         73:00:87:4d:73:d9:9c:8b:31:da:58:c4:4c:a3:ce:4b:3c:5d:
         66:4e:4c:c6:49:ab:e0:24:3d:54:9e:18:17:1a:93:2b:0b:8f:
         39:2b:13:22:57:33:ec:12:fc:34:5f:f0:cc:b4:70:2b:fd:ca:
         bd:69:66:b6:55:fe:d0:97:eb:a6:00:d0:bd:24:f5:14:5b:70:
         ee:ba:65:1e:5a:96:88:56:d1:9b:95:08:69:98:84:17:1d:e3:
         4a:87:f6:20:71:e0:c8:60:29:8c:57:17:98:64:c9:07:46:f0:
         22:8c:15:f3:42:80:69:29:30:b5:7d:a4:a1:36:39:2c:5d:ce:
         50:d8:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org