Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133352e302f32342d3234203d3e203533303138.roa
File:                     3137372e37322e3133352e302f32342d3234203d3e203533303138.roa (raw, json)
Hash identifier:          M0St1zSCBzmjnOZ5qLPkpmjectxZjNZ1UkJq86X52Es=
Subject key identifier:   D5:3F:30:81:57:97:B3:90:6E:EC:C3:3C:E3:CD:94:46:8C:FC:21:DF
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       3B1488CC24168C213C94D0C7946401738DD89A29
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133352e302f32342d3234203d3e203533303138.roa
Signing time:             Fri 08 Mar 2024 19:01:09 +0000
ROA not before:           Fri 08 Mar 2024 18:56:09 +0000
ROA not after:            Fri 07 Mar 2025 19:01:09 +0000
asID:                     53018
IP address blocks:        177.72.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:14:88:cc:24:16:8c:21:3c:94:d0:c7:94:64:01:73:8d:d8:9a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar  8 18:56:09 2024 GMT
            Not After : Mar  7 19:01:09 2025 GMT
        Subject: CN=D53F30815797B3906EECC33CE3CD94468CFC21DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:2b:ba:79:93:2a:48:48:59:ff:ae:db:8b:
                    98:66:3c:dd:32:23:d1:9e:cb:9e:26:ba:f8:8a:44:
                    4a:ae:23:42:86:62:50:37:78:2d:ba:f3:6f:69:ba:
                    41:22:2c:b8:c2:8e:1d:09:89:a3:e9:42:6b:3a:0a:
                    cc:ea:b5:77:43:73:99:ec:e6:f9:cd:ad:35:c1:92:
                    31:36:a8:04:07:eb:a7:b9:c9:7d:eb:8c:22:4e:66:
                    f5:e4:aa:d2:83:c2:24:0b:45:d7:a7:5b:78:58:77:
                    35:bb:a7:fa:80:6b:de:df:50:de:c5:e8:97:94:3c:
                    a1:ec:5f:61:63:47:f7:45:54:19:f5:51:69:9d:e3:
                    18:63:f7:ef:e5:fa:73:bb:b9:86:09:92:09:ed:d3:
                    4c:be:91:59:c6:dc:94:19:b6:00:5c:44:34:0e:9f:
                    0a:5f:05:35:d6:27:f6:1b:f8:54:49:a7:d4:16:f2:
                    a5:52:99:54:72:85:33:c0:67:99:96:82:76:53:85:
                    2a:7b:38:d8:7b:91:c8:e4:70:e7:3c:6e:68:ac:73:
                    b6:d7:9c:5b:63:c8:58:3c:39:1f:41:94:bf:2b:97:
                    3e:cf:76:76:da:c4:98:80:67:cd:f6:ca:8a:20:9b:
                    f9:ae:2c:f9:af:5d:e3:1f:b1:1b:30:d9:88:82:88:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3F:30:81:57:97:B3:90:6E:EC:C3:3C:E3:CD:94:46:8C:FC:21:DF
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133352e302f32342d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:d7:bd:50:63:a4:6d:ed:87:b3:cf:a0:6d:f8:d0:d5:c0:8b:
         99:9e:cb:b7:ab:2a:a5:61:16:0b:82:0a:c2:cd:3b:d7:7a:9c:
         7d:90:ab:24:47:60:ee:17:93:ca:69:22:c3:5d:53:67:5a:bf:
         16:2f:6d:88:de:77:ab:bf:7f:b5:bc:a9:ab:c0:ae:b7:02:e4:
         f0:34:1b:db:6c:49:b0:b2:ca:02:52:c0:c1:73:e6:98:40:9f:
         8b:76:b7:5e:d8:52:f4:1c:12:40:c9:e8:1a:ba:94:f9:fd:fd:
         cd:d0:96:ee:44:57:da:f1:9b:65:3e:2c:17:c6:63:7d:21:2e:
         cc:99:f4:fd:c8:00:dd:0a:4e:1e:0d:59:fd:82:02:37:a2:2a:
         ee:9d:26:0a:aa:ab:73:5e:ae:e9:0b:b1:34:a2:30:87:96:68:
         9a:d5:52:f0:a6:fb:60:71:67:f0:1a:79:5d:d1:94:af:aa:9f:
         d1:28:d8:25:e1:cd:ec:bb:7d:85:ad:c9:13:fd:46:be:43:26:
         56:e2:a3:fc:28:11:09:78:b5:76:f2:f9:7a:82:25:e7:e0:89:
         39:0c:5e:7e:57:6a:d7:d2:a3:b7:33:50:9c:0f:24:88:8e:8c:
         5e:4d:58:a7:74:6b:58:3b:5e:09:4b:69:36:1c:70:cf:a2:d0:
         c5:49:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org