Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32322d3232203d3e203533303437.roa
File:                     3137372e3130312e39322e302f32322d3232203d3e203533303437.roa (raw, json)
Hash identifier:          rboYa4gy2ggmP9dAtkY1lV5uK4+PsdG7ymro6QdOXKQ=
Subject key identifier:   E5:8F:A9:69:03:AD:16:F2:1B:9E:D1:A9:0A:44:7F:C5:9A:73:C7:22
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       28C3801DF55B7381C9A161D60E5F0AAB55FC587D
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32322d3232203d3e203533303437.roa
Signing time:             Tue 28 Nov 2023 13:09:20 +0000
ROA not before:           Tue 28 Nov 2023 13:04:20 +0000
ROA not after:            Tue 26 Nov 2024 13:09:20 +0000
asID:                     53047
IP address blocks:        177.101.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c3:80:1d:f5:5b:73:81:c9:a1:61:d6:0e:5f:0a:ab:55:fc:58:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 28 13:04:20 2023 GMT
            Not After : Nov 26 13:09:20 2024 GMT
        Subject: CN=E58FA96903AD16F21B9ED1A90A447FC59A73C722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:00:89:7c:5f:c0:59:4b:3b:90:25:d5:0b:68:
                    b6:37:11:f7:37:02:b9:0b:97:06:ef:d0:c7:8b:22:
                    eb:07:c6:eb:90:d6:c8:f4:7a:8c:b2:90:39:e2:53:
                    2b:76:82:e4:e7:c8:fd:4e:4e:d9:d3:3d:b4:90:15:
                    9c:64:65:35:46:00:da:47:23:2a:59:b7:1a:4f:aa:
                    77:bd:1f:52:f6:ed:81:be:6c:d8:9a:08:b1:b7:70:
                    d4:08:85:7f:7c:aa:04:6e:4e:57:82:2e:73:7c:88:
                    9c:a9:19:7b:6e:85:11:9d:44:c2:5d:fa:36:cb:f9:
                    1d:04:ab:d2:9a:b3:36:61:12:a2:88:79:f7:88:79:
                    e7:fc:17:a4:46:a5:21:a2:01:09:90:72:81:68:45:
                    49:4b:71:de:b9:3f:e8:6b:e5:31:9b:7f:11:e5:29:
                    39:91:e9:85:c8:54:68:a5:02:4f:21:99:58:0e:db:
                    8d:79:5c:ed:86:88:e1:b5:52:d8:2f:ce:4d:63:0d:
                    d3:57:b6:d4:13:b9:b5:51:84:50:a2:14:5a:06:86:
                    fb:46:d6:d5:ae:be:cd:f9:d0:f8:92:10:7a:3d:c4:
                    63:b9:da:0f:7b:ac:40:96:51:3c:bd:8d:5d:cf:4c:
                    34:e0:2e:64:7f:f3:a0:36:38:fa:7e:f6:b1:d4:73:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8F:A9:69:03:AD:16:F2:1B:9E:D1:A9:0A:44:7F:C5:9A:73:C7:22
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32322d3232203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:bb:34:60:4c:4e:35:2e:e8:63:65:47:c8:02:9e:38:0b:cb:
         ed:99:4d:56:fd:cc:1f:04:a9:9d:46:a7:da:b5:86:1e:2a:d3:
         9f:84:73:71:43:92:cf:81:ef:2f:90:dd:66:5b:fa:3b:92:0f:
         1b:ac:10:1c:d1:d5:16:00:8a:2c:1e:1d:89:4b:44:1a:51:b2:
         8a:9a:42:cc:66:64:37:e8:53:92:fb:c2:55:50:c7:a4:9c:29:
         e8:bc:82:3e:5f:4f:ae:83:18:0d:bd:b3:67:19:a7:00:1d:9c:
         5c:7b:b6:b2:3b:da:60:1f:d5:47:61:ac:78:7d:f4:b9:54:f9:
         ab:c6:cd:dc:7c:53:e1:55:a5:c3:fa:9b:f7:bf:28:73:dd:38:
         10:04:2e:dc:c2:70:cc:13:40:62:c2:c0:25:8c:7b:9a:1c:f7:
         13:f7:5f:4b:91:da:10:64:df:4f:b2:9b:83:6a:06:48:80:eb:
         cd:11:ba:ba:a5:06:0d:fa:f5:3f:8e:36:fa:3e:90:99:d4:86:
         cf:81:4b:15:56:2a:00:06:66:44:4d:0d:67:03:24:b1:0e:7e:
         76:e3:2f:d9:38:d0:28:09:92:cd:93:a0:4e:78:47:ea:b3:ac:
         02:ac:1a:ac:0a:2a:b9:07:5d:b7:ca:af:65:09:f7:b4:03:92:
         e1:ab:57:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org