Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3132382e302f32332d3234203d3e203533303138.roa
File:                     3137372e37322e3132382e302f32332d3234203d3e203533303138.roa (raw, json)
Hash identifier:          XI9PSFmSLOr0Fw+dt/UYw/I7WxdIPY+mWijpc88UXqc=
Subject key identifier:   5E:A0:5A:80:04:1F:A7:DF:65:AA:92:A7:40:76:B6:5A:55:8C:E3:D8
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       717BF11E27E33710D50EF6D377064319DA605832
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3132382e302f32332d3234203d3e203533303138.roa
Signing time:             Fri 08 Mar 2024 19:00:13 +0000
ROA not before:           Fri 08 Mar 2024 18:55:13 +0000
ROA not after:            Fri 07 Mar 2025 19:00:13 +0000
asID:                     53018
IP address blocks:        177.72.128.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7b:f1:1e:27:e3:37:10:d5:0e:f6:d3:77:06:43:19:da:60:58:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar  8 18:55:13 2024 GMT
            Not After : Mar  7 19:00:13 2025 GMT
        Subject: CN=5EA05A80041FA7DF65AA92A74076B65A558CE3D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:dc:2d:3b:73:30:58:95:2c:53:a1:57:bb:d7:
                    37:93:bf:5e:bb:39:40:5a:b4:0c:2e:37:af:76:6f:
                    09:6f:59:07:18:01:ed:98:02:cd:07:23:98:76:c8:
                    c2:d4:38:52:37:92:63:b0:59:76:42:45:1d:d5:e5:
                    19:60:e5:85:38:db:ed:01:73:fc:03:40:d4:b0:81:
                    a4:a8:50:12:a9:a9:20:d9:36:04:d9:2f:9d:bf:15:
                    d1:f9:29:00:e9:5f:a3:c3:b8:26:da:e4:ab:bc:b4:
                    53:8a:14:6e:90:62:48:40:7f:3d:98:30:1b:d6:e2:
                    a8:50:fa:87:40:cb:f6:3f:0f:cc:26:3b:57:76:b5:
                    e8:be:bb:56:00:4b:02:b8:38:8f:14:6a:fe:83:21:
                    63:ba:cb:ef:2c:60:95:a2:14:81:ff:32:ab:6a:70:
                    e1:9f:de:a6:8e:f3:e7:23:7f:f1:d2:1e:ea:ac:4d:
                    c2:cd:14:86:3f:dc:82:e1:34:2a:9a:47:28:1d:14:
                    00:0c:63:68:35:b4:3b:08:3e:79:82:b2:45:6b:f2:
                    4f:5c:ac:d0:54:18:2c:10:6d:3a:7a:df:e5:68:08:
                    6a:d5:25:60:fc:52:9b:d0:96:3e:7a:34:87:6c:62:
                    b0:8b:54:09:57:88:eb:fa:ac:6d:f4:5f:77:58:ff:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A0:5A:80:04:1F:A7:DF:65:AA:92:A7:40:76:B6:5A:55:8C:E3:D8
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3132382e302f32332d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:d2:bd:25:9d:bf:50:1e:13:fe:8b:f0:e6:78:9a:2b:f6:74:
         5d:a9:fc:aa:35:57:37:20:53:34:cd:0b:d0:f9:30:94:73:67:
         c0:4f:d3:fe:a7:24:23:cf:3a:b8:62:4a:1d:ca:c3:b3:ce:db:
         2a:e2:ca:5b:cc:3a:ce:34:d6:c0:3c:51:a5:eb:9d:10:35:a8:
         15:65:dc:30:06:45:fd:01:6c:6d:34:08:52:9e:89:87:6d:b9:
         de:af:ea:5c:55:4b:7a:00:ee:ae:30:9f:ab:1f:73:e1:3e:b8:
         2c:6d:a4:41:72:8b:2e:25:bb:42:09:5f:77:46:40:09:65:bb:
         a7:93:8b:51:d7:bc:07:6f:3f:2e:5e:29:50:24:aa:2d:d2:68:
         bf:6a:82:89:f1:7a:3c:40:70:3c:33:8c:2b:a3:28:99:ab:27:
         f0:ec:59:a8:99:50:06:4b:dd:63:e9:e1:27:aa:61:18:b5:bc:
         93:49:27:e6:d6:76:a3:f6:c4:c5:a5:f1:a6:d1:7f:7e:92:00:
         46:93:24:33:64:b0:ea:53:6b:2f:e9:60:46:c1:5e:88:f0:8d:
         20:e3:39:f1:7d:a0:7c:05:f3:62:bf:76:d7:45:dc:41:31:9e:
         1d:85:fc:64:a9:77:c2:72:fd:ba:eb:b1:5c:e4:a9:ae:8a:84:
         15:ff:b1:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcXvxHifjNxDVDvbTdwZDGdpgWDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYyMDBFNEM3MUYzODJEODdBRTQzMTU1OURENkJENzRE
MTkyMjM2QjAeFw0yNDAzMDgxODU1MTNaFw0yNTAzMDcxOTAwMTNaMDMxMTAvBgNV
BAMTKDVFQTA1QTgwMDQxRkE3REY2NUFBOTJBNzQwNzZCNjVBNTU4Q0UzRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD83C07czBYlSxToVe71zeTv167
OUBatAwuN692bwlvWQcYAe2YAs0HI5h2yMLUOFI3kmOwWXZCRR3V5Rlg5YU42+0B
c/wDQNSwgaSoUBKpqSDZNgTZL52/FdH5KQDpX6PDuCba5Ku8tFOKFG6QYkhAfz2Y
MBvW4qhQ+odAy/Y/D8wmO1d2tei+u1YASwK4OI8Uav6DIWO6y+8sYJWiFIH/Mqtq
cOGf3qaO8+cjf/HSHuqsTcLNFIY/3ILhNCqaRygdFAAMY2g1tDsIPnmCskVr8k9c
rNBUGCwQbTp63+VoCGrVJWD8UpvQlj56NIdsYrCLVAlXiOv6rG30X3dY/9bBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXqBagAQfp99lqpKnQHa2WlWM49gwHwYDVR0j
BBgwFoAU/yAOTHHzgth65DFVnda9dNGSI2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMC9GRjIwMEU0QzcxRjM4MkQ4N0FFNDMxNTU5REQ2QkQ3NEQxOTIyMzZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGMjAwRTRDNzFGMzgyRDg3
QUU0MzE1NTlERDZCRDc0RDE5MjIzNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzAv
MzEzNzM3MmUzNzMyMmUzMTMyMzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsUiAMA0GCSqGSIb3DQEBCwUAA4IBAQAG0r0lnb9Q
HhP+i/DmeJor9nRdqfyqNVc3IFM0zQvQ+TCUc2fAT9P+pyQjzzq4YkodysOzztsq
4spbzDrONNbAPFGl650QNagVZdwwBkX9AWxtNAhSnomHbbner+pcVUt6AO6uMJ+r
H3PhPrgsbaRBcosuJbtCCV93RkAJZbunk4tR17wHbz8uXilQJKot0mi/aoKJ8Xo8
QHA8M4wroyiZqyfw7FmomVAGS91j6eEnqmEYtbyTSSfm1naj9sTFpfGm0X9+kgBG
kyQzZLDqU2sv6WBGwV6I8I0g4znxfaB8BfNiv3bXRdxBMZ4dhfxkqXfCcv2667Fc
5KmuioQV/7FR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org