Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e39322e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          hDTmAMX7L8dPSyHaqmzAIZKe/69OCEALaYdoOQwaNNI=
Subject key identifier:   3E:F9:2A:93:15:9D:5B:5E:A3:B0:21:28:F6:34:32:68:ED:BC:00:01
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       2CF8217D7F8CDE2474FDAE5A09007D8A509C3C21
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32332d3233203d3e203533303437.roa
Signing time:             Tue 28 Nov 2023 13:09:19 +0000
ROA not before:           Tue 28 Nov 2023 13:04:19 +0000
ROA not after:            Tue 26 Nov 2024 13:09:19 +0000
asID:                     53047
IP address blocks:        177.101.92.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f8:21:7d:7f:8c:de:24:74:fd:ae:5a:09:00:7d:8a:50:9c:3c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 28 13:04:19 2023 GMT
            Not After : Nov 26 13:09:19 2024 GMT
        Subject: CN=3EF92A93159D5B5EA3B02128F6343268EDBC0001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4d:44:e0:2b:87:a1:f5:a9:3a:b0:7e:e4:4f:
                    9f:3a:f9:dc:ad:e8:c2:86:09:76:5e:42:50:e4:9d:
                    2c:08:2a:54:90:1a:02:71:23:d6:40:15:ed:07:62:
                    00:96:c9:36:58:1b:b4:12:33:ce:84:26:76:d4:8f:
                    74:c7:5a:0a:f0:84:15:62:4c:83:c1:12:07:e3:eb:
                    76:22:52:3e:4d:8a:6c:bc:88:f4:ab:17:68:5e:11:
                    91:04:3b:7b:87:1b:59:2c:f6:79:f2:23:23:83:c4:
                    84:50:ba:c7:df:a6:cf:2c:7b:57:a0:cd:01:2e:30:
                    95:35:3a:99:84:a1:b5:03:2c:da:2d:cc:ea:3e:bd:
                    8d:5e:7a:d7:5a:64:a0:72:f8:98:40:3a:03:e9:91:
                    d6:c0:c2:fe:a5:b2:6f:24:dc:e9:dd:78:da:3a:0e:
                    25:83:fd:1b:57:66:a2:27:1f:0d:8f:6d:a3:a6:ee:
                    ee:57:01:d5:66:28:c1:07:b9:8b:ad:db:de:3c:07:
                    81:60:d7:57:05:8e:b2:b6:bb:26:4a:72:87:bf:d9:
                    f4:d9:ee:c4:7b:31:b2:62:f6:5f:62:43:fd:06:50:
                    25:d5:89:19:3d:bb:7c:e4:ea:d6:a6:c6:23:29:6b:
                    a7:c4:35:58:55:55:c9:c1:28:10:6b:d4:07:0c:37:
                    d2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F9:2A:93:15:9D:5B:5E:A3:B0:21:28:F6:34:32:68:ED:BC:00:01
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39322e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         f6:e9:79:83:ad:78:cd:bb:cd:ca:59:bf:cb:8f:02:80:d5:03:
         92:2a:a1:d3:ee:ae:f0:16:03:ea:29:2e:0b:e7:98:bc:7a:85:
         aa:e2:2d:82:58:6c:ea:20:83:70:00:0e:05:e1:e8:66:c4:da:
         7b:a7:b5:27:54:30:79:6b:b2:0b:f0:27:e0:39:14:5f:49:be:
         b6:84:ff:2c:b1:77:c9:59:a0:f2:a6:d1:61:06:85:3b:fc:39:
         83:47:9c:2e:cf:c8:26:fb:c7:55:d9:c2:1e:6c:6f:19:73:9e:
         21:88:3c:e2:4d:fd:cd:96:db:16:c9:07:54:88:cb:0d:85:d4:
         74:a7:fc:49:46:d5:13:27:54:49:58:e6:11:46:66:5a:29:46:
         d9:be:da:bf:20:8d:e2:3c:80:d0:ef:38:a6:d8:a8:cb:73:95:
         c0:28:a1:40:36:4c:56:68:08:a8:fe:02:e0:a0:28:e0:90:d3:
         c1:76:99:1c:67:97:df:0b:b0:57:63:af:df:66:5f:94:b7:f4:
         d2:66:21:93:99:7f:00:34:d7:b5:fe:75:82:9a:fe:d3:ac:7e:
         23:1e:46:0e:12:d9:92:16:57:da:83:4c:f1:f6:5b:d0:cc:3b:
         3d:53:15:28:ee:58:fa:7c:03:52:c4:45:24:02:c3:e5:18:ce:
         d6:b9:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org