Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133302e302f32332d3234203d3e203533303138.roa
File:                     3137372e37322e3133302e302f32332d3234203d3e203533303138.roa (raw, json)
Hash identifier:          x3PR6QpnISRSGs/rigeyXXHxfLS4PTapGmMtq2G51/A=
Subject key identifier:   F9:17:12:AC:90:AA:FF:EF:C6:8E:5B:FA:6C:B8:31:98:CB:6E:C6:75
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       4FF6FA5694D9E6C588E04486226D86B918A97637
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133302e302f32332d3234203d3e203533303138.roa
Signing time:             Fri 08 Mar 2024 19:00:30 +0000
ROA not before:           Fri 08 Mar 2024 18:55:30 +0000
ROA not after:            Fri 07 Mar 2025 19:00:30 +0000
asID:                     53018
IP address blocks:        177.72.130.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f6:fa:56:94:d9:e6:c5:88:e0:44:86:22:6d:86:b9:18:a9:76:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar  8 18:55:30 2024 GMT
            Not After : Mar  7 19:00:30 2025 GMT
        Subject: CN=F91712AC90AAFFEFC68E5BFA6CB83198CB6EC675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:aa:ce:69:5d:19:fa:0c:03:7f:f9:cc:79:6c:
                    db:af:ea:10:89:25:77:05:c9:c8:e0:72:f0:e5:9e:
                    95:13:8b:b8:ec:df:9c:50:7e:2e:1d:81:86:8e:a1:
                    7c:3f:1b:83:b3:5e:56:2f:6b:8b:9b:ca:b7:8d:4f:
                    23:27:e3:b5:a2:6a:f7:de:ec:c8:ea:9e:0f:19:f8:
                    53:30:11:21:54:44:15:23:f3:fa:07:51:1d:0b:c7:
                    c4:fd:13:93:50:3c:93:2c:64:d0:ec:2e:4a:dd:90:
                    3a:d3:7d:df:1f:ae:ca:7b:8d:9c:01:1a:3e:5a:76:
                    5f:ad:d9:fe:79:d0:c7:24:0f:9f:2b:50:e5:4e:22:
                    1a:38:41:13:a1:71:0a:e6:36:b3:b8:40:7e:c0:6a:
                    64:27:18:e2:78:0c:fc:25:bc:7b:52:0e:7b:79:49:
                    f0:60:e0:b5:61:c7:4e:9a:1c:b5:fd:c3:93:ed:50:
                    34:8f:91:de:08:6f:91:f5:61:c6:00:bd:6c:dc:10:
                    84:16:4e:57:09:95:71:84:7a:75:ac:20:b4:11:8b:
                    48:d4:d7:9c:12:15:6f:0b:c4:34:d3:b5:f5:37:71:
                    88:d3:d8:ce:6e:f5:84:e0:88:0a:08:e1:6e:d8:1d:
                    6e:7a:2b:50:f3:39:b4:21:80:b7:dd:42:65:c4:e1:
                    75:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:17:12:AC:90:AA:FF:EF:C6:8E:5B:FA:6C:B8:31:98:CB:6E:C6:75
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133302e302f32332d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:02:ef:c4:0d:8a:4a:f3:30:36:b0:09:0e:c2:be:69:e0:cb:
         33:96:5c:bf:7b:26:b8:43:2d:9b:3f:34:9a:1c:5d:4b:bc:cc:
         ab:89:06:db:49:0e:e6:01:c3:57:f5:d6:9b:a6:2f:4f:5d:8f:
         76:f5:43:1e:71:ae:97:1d:d6:a2:74:03:b7:b6:f8:f1:06:4a:
         fd:ba:f9:d5:77:0e:44:17:e9:60:c6:8a:13:07:af:9e:73:2f:
         e4:6f:7f:67:1b:ae:74:26:4e:72:0a:41:0d:d4:57:1a:0b:dc:
         9f:d0:6e:a4:76:98:dd:71:51:3e:35:a0:96:70:8d:33:90:79:
         6f:1e:68:1a:0d:93:6e:5c:7c:14:00:a1:2f:ff:56:e6:81:a1:
         ff:58:eb:0f:02:a0:8e:03:9d:1d:5e:1c:91:4b:08:d6:3c:75:
         70:5d:b5:68:7f:93:cd:73:b9:ed:a2:f9:59:91:0d:9c:d4:23:
         e6:0f:59:77:63:95:d5:d9:cb:7e:b7:8f:f9:c8:67:aa:9d:f5:
         d3:4a:e1:ef:97:6d:89:ac:0b:84:d6:57:bf:b5:f4:b7:de:f6:
         fa:b1:40:ea:08:74:d6:55:ed:84:14:a4:02:86:d6:31:af:b1:
         f2:9e:22:6c:8b:b1:be:64:e7:ca:e2:11:00:a1:5e:84:10:a1:
         30:45:d1:cd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUT/b6VpTZ5sWI4ESGIm2GuRipdjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYyMDBFNEM3MUYzODJEODdBRTQzMTU1OURENkJENzRE
MTkyMjM2QjAeFw0yNDAzMDgxODU1MzBaFw0yNTAzMDcxOTAwMzBaMDMxMTAvBgNV
BAMTKEY5MTcxMkFDOTBBQUZGRUZDNjhFNUJGQTZDQjgzMTk4Q0I2RUM2NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxqs5pXRn6DAN/+cx5bNuv6hCJ
JXcFycjgcvDlnpUTi7js35xQfi4dgYaOoXw/G4OzXlYva4ubyreNTyMn47Wiavfe
7Mjqng8Z+FMwESFURBUj8/oHUR0Lx8T9E5NQPJMsZNDsLkrdkDrTfd8frsp7jZwB
Gj5adl+t2f550MckD58rUOVOIho4QROhcQrmNrO4QH7AamQnGOJ4DPwlvHtSDnt5
SfBg4LVhx06aHLX9w5PtUDSPkd4Ib5H1YcYAvWzcEIQWTlcJlXGEenWsILQRi0jU
15wSFW8LxDTTtfU3cYjT2M5u9YTgiAoI4W7YHW56K1DzObQhgLfdQmXE4XUhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+RcSrJCq/+/Gjlv6bLgxmMtuxnUwHwYDVR0j
BBgwFoAU/yAOTHHzgth65DFVnda9dNGSI2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0U3Tk1BUnBnM2NQYzN0VVprRk1yS3pSdEdiNVJIdHlCR3B6dEZWV011
SmYvMC9GRjIwMEU0QzcxRjM4MkQ4N0FFNDMxNTU5REQ2QkQ3NEQxOTIyMzZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZGMjAwRTRDNzFGMzgyRDg3
QUU0MzE1NTlERDZCRDc0RDE5MjIzNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFN05NQVJwZzNjUGMzdFVaa0ZNckt6UnRHYjVSSHR5QkdwenRGVldNdUpmLzAv
MzEzNzM3MmUzNzMyMmUzMTMzMzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMz
MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsUiCMA0GCSqGSIb3DQEBCwUAA4IBAQAAAu/EDYpK
8zA2sAkOwr5p4Mszlly/eya4Qy2bPzSaHF1LvMyriQbbSQ7mAcNX9dabpi9PXY92
9UMeca6XHdaidAO3tvjxBkr9uvnVdw5EF+lgxooTB6+ecy/kb39nG650Jk5yCkEN
1FcaC9yf0G6kdpjdcVE+NaCWcI0zkHlvHmgaDZNuXHwUAKEv/1bmgaH/WOsPAqCO
A50dXhyRSwjWPHVwXbVof5PNc7ntovlZkQ2c1CPmD1l3Y5XV2ct+t4/5yGeqnfXT
SuHvl22JrAuE1le/tfS33vb6sUDqCHTWVe2EFKQChtYxr7HyniJsi7G+ZOfK4hEA
oV6EEKEwRdHN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org