Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133342e302f32332d3233203d3e203533303138.roa
File:                     3137372e37322e3133342e302f32332d3233203d3e203533303138.roa (raw, json)
Hash identifier:          iD8GfaJ060e3eTCowZse6v3tBovV2cBzNOdUbSahJ8U=
Subject key identifier:   AF:82:F3:03:8A:CF:93:C9:4D:11:13:97:87:18:55:37:FB:AB:21:C2
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       23FAE4D0CD93C4FF4B143786C705F23D561D5DE6
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133342e302f32332d3233203d3e203533303138.roa
Signing time:             Fri 08 Mar 2024 19:00:38 +0000
ROA not before:           Fri 08 Mar 2024 18:55:38 +0000
ROA not after:            Fri 07 Mar 2025 19:00:38 +0000
asID:                     53018
IP address blocks:        177.72.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fa:e4:d0:cd:93:c4:ff:4b:14:37:86:c7:05:f2:3d:56:1d:5d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar  8 18:55:38 2024 GMT
            Not After : Mar  7 19:00:38 2025 GMT
        Subject: CN=AF82F3038ACF93C94D11139787185537FBAB21C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:39:f8:66:8b:9e:1e:c6:6b:b4:8f:e2:90:
                    fc:ff:41:68:ac:04:d8:ce:07:2a:46:ec:d6:e5:89:
                    a6:12:07:59:60:4b:14:e6:89:e0:ee:d8:79:9d:9a:
                    39:fa:40:cd:c6:d9:4e:f5:28:10:97:13:fe:61:c1:
                    14:19:5c:a3:09:d5:81:79:81:47:2a:b9:4e:03:97:
                    b9:75:65:ef:dc:4f:cf:7a:7e:3a:f1:5b:93:d2:4c:
                    b1:14:16:06:e5:42:08:dd:9f:f3:4e:4a:87:72:32:
                    83:9d:dc:53:01:15:4b:ab:06:9d:d8:e4:06:4f:b2:
                    89:29:19:5b:f6:91:92:81:a0:98:80:2b:4b:44:76:
                    e0:85:5c:f8:b1:98:3d:44:32:3a:81:c1:39:78:4b:
                    8c:b8:e3:31:dc:88:a1:93:d8:7a:78:61:2f:c4:6a:
                    56:df:f3:13:a7:27:ad:9a:f9:e3:a3:03:9a:33:5a:
                    8a:76:98:7d:b5:a5:b1:e3:e4:60:30:2e:4d:bc:68:
                    13:bc:7e:52:90:89:a8:f9:9b:16:17:b7:87:1b:12:
                    39:7a:16:65:dc:89:8e:dd:fb:0f:13:85:4b:fb:e8:
                    16:cd:0d:43:f6:c3:75:72:2b:1d:30:7c:47:7f:a2:
                    2f:5d:fb:2f:a6:e1:4b:a4:ea:d9:b3:40:b1:02:82:
                    ad:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:82:F3:03:8A:CF:93:C9:4D:11:13:97:87:18:55:37:FB:AB:21:C2
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133342e302f32332d3233203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:ec:91:a1:d1:55:1d:d5:92:0f:62:a5:dc:a7:11:04:e3:5a:
         44:0e:27:ac:f4:ba:21:9a:4b:8a:62:c3:68:39:dc:1c:55:93:
         00:b9:5e:a2:15:1d:96:eb:f6:0d:b2:1e:eb:26:03:8b:cb:f7:
         17:39:30:f8:ba:26:7e:02:72:5d:18:05:96:72:e4:c6:ee:3b:
         5b:65:fa:89:aa:4e:cf:2e:2a:8e:fb:8c:8a:49:af:8a:74:3b:
         63:c5:85:a5:76:1c:73:67:f0:29:3d:d6:ff:87:24:60:18:4a:
         a9:2b:50:5b:48:c8:dd:34:33:24:79:36:fc:9c:15:13:b1:48:
         b1:f1:4b:74:c4:b3:7c:f1:30:6e:c5:ed:bd:ea:ae:cb:99:90:
         65:e5:6b:26:e8:42:3f:ca:30:57:94:ac:d9:03:69:a0:04:57:
         92:59:94:68:42:ce:e0:83:3f:81:1f:d8:b7:0e:fd:c6:06:dd:
         43:8c:81:a1:94:d6:60:68:7c:b8:b8:b3:9d:8c:79:4c:55:d6:
         39:cb:06:3d:9d:63:62:54:5d:cf:22:2c:59:26:f6:0f:7f:8d:
         af:53:23:ae:89:21:a7:9e:e5:3d:0e:5d:d3:f8:07:05:fc:2e:
         44:be:61:c6:95:3d:90:1b:2c:bc:68:9b:97:5c:36:51:dc:8d:
         63:85:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org