Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3132382e302f32312d3234203d3e203533303138.roa
File:                     3137372e37322e3132382e302f32312d3234203d3e203533303138.roa (raw, json)
Hash identifier:          PZblKtn3pDkh2CF2oCM/j/ZsuP24u7aky0Kq0pf7ZuI=
Subject key identifier:   BF:9A:A4:88:68:5A:67:C8:FC:92:12:0C:BC:80:FB:79:08:E6:50:8E
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       10C239CB6D19D078CED76B01E14BD81DCA0E2923
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3132382e302f32312d3234203d3e203533303138.roa
Signing time:             Tue 12 Mar 2024 18:15:10 +0000
ROA not before:           Tue 12 Mar 2024 18:10:10 +0000
ROA not after:            Tue 11 Mar 2025 18:15:10 +0000
asID:                     53018
IP address blocks:        177.72.128.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c2:39:cb:6d:19:d0:78:ce:d7:6b:01:e1:4b:d8:1d:ca:0e:29:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar 12 18:10:10 2024 GMT
            Not After : Mar 11 18:15:10 2025 GMT
        Subject: CN=BF9AA488685A67C8FC92120CBC80FB7908E6508E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c2:12:5c:a7:c5:5a:c0:ca:6f:a7:27:1f:2f:
                    0d:36:a4:be:45:7b:18:0d:3e:3d:33:a4:d7:17:54:
                    cc:77:81:4f:0a:96:70:1b:3a:b0:4e:a6:02:5f:26:
                    de:59:31:b8:3a:c8:a8:54:bf:7b:86:de:e1:82:dd:
                    b6:4d:05:7c:41:6c:e6:d4:d0:54:f6:14:c7:fb:ec:
                    19:d7:88:06:77:2f:d2:82:f4:0e:2c:99:d3:bb:88:
                    21:22:ad:b4:38:2a:03:0a:42:86:9c:5e:30:ef:49:
                    4e:5f:99:98:0c:4e:e1:8f:8c:23:ad:99:5e:00:0a:
                    96:ad:35:c7:1a:bc:04:d2:48:60:b1:11:88:c8:63:
                    2a:ce:47:05:c0:91:12:b1:6a:9d:a2:b0:da:08:3a:
                    c0:0d:b4:fd:92:5f:6d:a2:b0:3a:f3:d0:64:2b:83:
                    cd:82:27:69:57:fe:7f:6c:6a:6d:ae:1a:87:96:b9:
                    fe:56:3e:ed:65:01:04:f5:50:19:82:54:76:99:ff:
                    f5:fb:e1:5f:f1:06:f7:74:22:e5:91:ef:7a:9d:96:
                    e3:ff:2f:a0:c9:96:75:a7:0f:90:cc:29:ac:bf:0c:
                    82:cc:7a:82:22:be:d5:42:ce:b4:4e:4e:de:f6:06:
                    12:e4:b3:5c:60:90:e9:4c:37:6b:ef:a8:4d:3c:9d:
                    65:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9A:A4:88:68:5A:67:C8:FC:92:12:0C:BC:80:FB:79:08:E6:50:8E
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3132382e302f32312d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:8c:10:51:07:da:13:33:c3:ac:82:22:75:08:ab:3f:4c:c2:
         13:15:36:83:d9:df:5f:f2:99:ca:79:30:20:c1:ea:7e:b3:25:
         ec:1d:44:d6:6f:db:da:f3:6b:67:30:dd:c6:58:d2:8d:40:6f:
         87:ac:19:d7:71:09:7b:31:2a:3f:a2:25:09:b1:42:19:58:4f:
         92:42:27:ca:3f:6a:22:d6:c1:f6:48:9f:d7:70:84:3d:a1:91:
         28:49:84:4a:37:59:b7:6c:41:a0:f4:df:15:ce:66:87:d6:d3:
         6d:3d:99:1a:9a:34:ca:88:ca:e4:14:d5:0b:37:91:0a:c2:b9:
         86:71:0c:cb:ea:e6:fb:ec:28:bb:6a:2e:d4:8b:a5:1b:0b:7a:
         12:c6:55:2b:d8:e6:cc:5d:da:92:db:0a:68:30:af:0e:6b:e8:
         38:d8:94:40:b6:c8:be:26:96:aa:ab:f5:64:87:98:8c:41:e6:
         c8:a3:4a:54:b7:54:70:3f:98:0e:2f:19:3a:f7:2e:1a:89:c4:
         db:88:92:79:88:6d:75:4d:7a:29:2a:8e:fb:89:24:b1:04:e7:
         42:14:22:64:47:fd:fc:36:02:f1:02:f7:0e:19:5b:6d:4a:ed:
         32:62:51:12:60:a2:79:66:30:54:78:e0:36:22:28:00:41:6c:
         74:74:d8:50
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEMI5y20Z0HjO12sB4UvYHcoOKSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYyMDBFNEM3MUYzODJEODdBRTQzMTU1OURENkJENzRE
MTkyMjM2QjAeFw0yNDAzMTIxODEwMTBaFw0yNTAzMTExODE1MTBaMDMxMTAvBgNV
BAMTKEJGOUFBNDg4Njg1QTY3QzhGQzkyMTIwQ0JDODBGQjc5MDhFNjUwOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcwhJcp8VawMpvpycfLw02pL5F
exgNPj0zpNcXVMx3gU8KlnAbOrBOpgJfJt5ZMbg6yKhUv3uG3uGC3bZNBXxBbObU
0FT2FMf77BnXiAZ3L9KC9A4smdO7iCEirbQ4KgMKQoacXjDvSU5fmZgMTuGPjCOt
mV4ACpatNccavATSSGCxEYjIYyrORwXAkRKxap2isNoIOsANtP2SX22isDrz0GQr
g82CJ2lX/n9sam2uGoeWuf5WPu1lAQT1UBmCVHaZ//X74V/xBvd0IuWR73qdluP/
L6DJlnWnD5DMKay/DILMeoIivtVCzrROTt72BhLks1xgkOlMN2vvqE08nWWxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUv5qkiGhaZ8j8khIMvID7eQjmUI4wHwYDVR0j
BBgwFoAU/yAOTHHzgth65DFVnda9dNGSI2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMC9GRjIwMEU0QzcxRjM4MkQ4N0FFNDMxNTU5REQ2QkQ3NEQxOTIyMzZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGMjAwRTRDNzFGMzgyRDg3
QUU0MzE1NTlERDZCRDc0RDE5MjIzNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzAv
MzEzNzM3MmUzNzMyMmUzMTMyMzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsUiAMA0GCSqGSIb3DQEBCwUAA4IBAQCajBBRB9oT
M8OsgiJ1CKs/TMITFTaD2d9f8pnKeTAgwep+syXsHUTWb9va82tnMN3GWNKNQG+H
rBnXcQl7MSo/oiUJsUIZWE+SQifKP2oi1sH2SJ/XcIQ9oZEoSYRKN1m3bEGg9N8V
zmaH1tNtPZkamjTKiMrkFNULN5EKwrmGcQzL6ub77Ci7ai7Ui6UbC3oSxlUr2ObM
XdqS2wpoMK8Oa+g42JRAtsi+Jpaqq/Vkh5iMQebIo0pUt1RwP5gOLxk69y4aicTb
iJJ5iG11TXopKo77iSSxBOdCFCJkR/38NgLxAvcOGVttSu0yYlESYKJ5ZjBUeOA2
IigAQWx0dNhQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org