Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3132382e302f32312d3232203d3e203533303138.roa
File:                     3137372e37322e3132382e302f32312d3232203d3e203533303138.roa (raw, json)
Hash identifier:          ezAJ4dpu3CkhzUf3nHPlP5nO2Khdlp9TTHEW0cwsMs0=
Subject key identifier:   46:C5:05:2E:18:F9:10:68:BB:FB:BB:40:32:D1:27:EE:E0:7F:70:06
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       3DFD7E21767F2D33CA350512C0586AA4A0B57EE8
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3132382e302f32312d3232203d3e203533303138.roa
Signing time:             Fri 08 Mar 2024 18:59:42 +0000
ROA not before:           Fri 08 Mar 2024 18:54:42 +0000
ROA not after:            Fri 07 Mar 2025 18:59:42 +0000
asID:                     53018
IP address blocks:        177.72.128.0/21 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fd:7e:21:76:7f:2d:33:ca:35:05:12:c0:58:6a:a4:a0:b5:7e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar  8 18:54:42 2024 GMT
            Not After : Mar  7 18:59:42 2025 GMT
        Subject: CN=46C5052E18F91068BBFBBB4032D127EEE07F7006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:3b:74:90:6b:ed:42:a8:45:9c:90:a8:fc:
                    8f:7c:0e:24:23:0b:33:7b:76:3f:b3:a7:f2:72:68:
                    07:ab:26:a8:37:56:22:20:c2:aa:ef:50:1b:29:ba:
                    54:5e:15:08:9e:a4:d5:f4:6a:8b:aa:29:01:3c:7a:
                    19:b7:0f:47:76:90:d5:47:a0:e8:59:2a:ca:1c:d6:
                    30:14:33:32:0a:f1:41:cf:bf:b0:0d:b8:40:98:a6:
                    3e:3f:fb:c5:a6:5a:8b:49:b1:0e:8f:3c:ae:f0:8b:
                    e2:93:b2:8e:5c:cd:2a:6c:df:90:71:24:97:ff:73:
                    b5:36:52:76:03:9f:bc:86:1b:e3:68:16:b2:16:94:
                    c5:27:af:76:b7:bb:cc:5b:a5:78:e2:dd:2c:be:34:
                    54:9e:f8:04:24:d4:2b:f9:2a:1a:07:62:1d:34:d0:
                    77:c0:8a:f0:98:66:84:44:15:d1:e3:4f:53:f2:98:
                    46:f1:3a:b5:c9:71:f8:cd:58:22:3b:a7:11:97:d7:
                    b6:f0:1a:54:8c:12:5f:51:6c:24:96:38:95:80:38:
                    7c:74:e9:0c:a8:54:69:6d:ba:4c:c0:1b:8d:4e:d2:
                    8d:30:f9:b9:da:0e:1d:1e:c2:7a:5b:6d:9f:ee:51:
                    f7:5f:9a:3c:13:c7:b1:05:8a:54:f6:88:3e:c1:53:
                    50:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C5:05:2E:18:F9:10:68:BB:FB:BB:40:32:D1:27:EE:E0:7F:70:06
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3132382e302f32312d3232203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:32:8f:05:c1:d8:94:b8:a6:21:3d:22:c7:79:e2:68:f5:
         c8:79:d4:04:43:a2:42:d1:ad:39:26:cf:2c:e2:19:5c:8d:2f:
         cf:16:8d:cb:46:ea:cc:b8:21:a8:7c:15:bb:9f:82:89:40:01:
         a7:95:8e:38:b6:e2:59:03:cb:77:9c:d9:04:18:89:5c:ae:c0:
         c1:0d:1e:20:0e:d4:8a:b1:a0:60:1b:16:15:88:8c:3e:f2:76:
         45:54:1e:f1:1f:e9:21:f5:a3:34:e3:33:80:f5:e2:b4:05:37:
         bf:ee:0f:54:e4:a6:8e:d9:72:ef:91:7a:04:26:55:e3:e5:08:
         83:5b:71:5d:98:45:2f:3d:22:f5:ec:a6:83:68:0c:ee:a4:53:
         db:91:41:ab:af:08:fa:af:e6:cc:1f:fa:d7:b0:96:14:e1:b0:
         6b:e6:30:38:ee:d7:d5:ea:38:af:e2:57:64:68:34:fc:78:98:
         f6:73:9b:78:06:14:ee:30:b7:f9:08:18:df:d4:cc:f4:9c:9a:
         a7:dd:d1:81:08:f4:cd:53:6f:49:f4:ef:06:f8:d7:a1:43:cd:
         0b:b5:cb:19:7b:f0:18:9e:ec:78:e0:a5:73:1c:9c:fd:93:92:
         b7:1b:c6:50:e4:8f:69:c4:28:77:3f:e8:48:99:d1:a5:18:1a:
         25:d9:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org