Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32312d3234203d3e203533303138.roa
File:                     3137372e37322e3133362e302f32312d3234203d3e203533303138.roa (raw, json)
Hash identifier:          XJw5rE1CIOhFIuF4ZPYZn8iLapMpKhuKNX8/cxuOKbY=
Subject key identifier:   6A:07:D6:FA:78:7E:0B:C1:FD:88:A7:22:3E:E3:4C:62:66:53:4F:65
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       481AE15D1CA54E39EC752E34279DB836E1AD3B18
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32312d3234203d3e203533303138.roa
Signing time:             Fri 08 Mar 2024 19:01:01 +0000
ROA not before:           Fri 08 Mar 2024 18:56:01 +0000
ROA not after:            Fri 07 Mar 2025 19:01:01 +0000
asID:                     53018
IP address blocks:        177.72.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1a:e1:5d:1c:a5:4e:39:ec:75:2e:34:27:9d:b8:36:e1:ad:3b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar  8 18:56:01 2024 GMT
            Not After : Mar  7 19:01:01 2025 GMT
        Subject: CN=6A07D6FA787E0BC1FD88A7223EE34C6266534F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1d:13:22:9b:b6:63:aa:be:35:fe:ac:a3:05:
                    be:56:7d:d8:a1:1e:bd:ec:51:3e:3c:16:02:de:8a:
                    7b:99:0d:7a:d5:dc:fe:6e:d9:19:38:a8:52:24:36:
                    c0:07:56:1b:83:5c:ea:1c:87:8d:f0:38:56:9d:4c:
                    4b:7f:9b:58:9e:5f:bf:58:a6:6f:cc:ee:6a:37:46:
                    1f:ad:44:7d:c7:44:09:58:d2:a2:56:c8:2a:dc:6a:
                    ed:fc:94:91:24:8d:64:48:6c:15:0d:36:14:62:c2:
                    61:85:7e:bb:66:05:de:08:3c:13:bf:ad:fa:f0:cd:
                    d6:59:42:fe:02:4c:8e:94:45:d0:6c:0c:ec:2d:e8:
                    42:3d:5a:f1:fa:76:f4:74:a7:d5:23:37:96:16:bd:
                    d4:ec:20:b8:4a:1a:1b:45:97:45:65:a1:8b:1f:2f:
                    5e:66:67:6f:df:fc:32:5d:36:bc:b2:4e:b1:67:fe:
                    7d:14:d1:bf:aa:2e:5b:c4:90:43:20:2d:07:ca:5e:
                    f2:6c:fd:65:cf:44:a4:b3:61:f9:29:6d:e6:30:dd:
                    92:15:dc:ca:ef:50:28:70:62:dc:c6:9f:00:f8:65:
                    07:28:cf:9b:fd:d8:44:db:0e:ce:bb:67:2d:e0:7d:
                    28:3d:c8:5b:2a:cc:22:4e:51:f8:cd:c4:9a:63:05:
                    41:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:07:D6:FA:78:7E:0B:C1:FD:88:A7:22:3E:E3:4C:62:66:53:4F:65
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32312d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:a0:ea:10:01:f5:a6:a7:c8:1b:96:77:bf:19:43:f3:bf:3c:
         56:62:5d:3c:68:09:e6:37:19:b0:cd:2a:dc:4c:d1:3b:1f:f1:
         61:d1:f1:3f:46:48:77:cb:d9:17:b8:ec:e7:31:ac:22:08:37:
         77:b4:77:42:49:2f:fb:fe:b8:1b:06:0b:da:8a:5c:22:7c:65:
         05:6c:36:d7:c8:d9:d6:40:8c:50:6d:cf:95:5a:1c:ed:26:5e:
         47:86:09:ac:ed:b7:4e:0a:fe:1e:89:21:3a:f7:98:54:4f:e4:
         e9:57:d5:a9:e7:d4:ba:82:2c:bb:7a:c9:ad:ff:d9:16:b4:e2:
         a9:7d:65:b7:48:cc:07:0b:d9:f9:33:9c:2a:0f:2d:12:45:99:
         59:31:e9:a0:60:e1:f9:4e:da:ab:09:7e:bb:36:09:d5:87:91:
         c3:7e:f7:47:11:e0:82:56:1f:79:7d:2b:c9:16:2e:83:b0:ee:
         4c:0e:56:f7:57:af:c8:9f:ea:44:56:fc:5a:60:c1:49:2b:9b:
         48:26:ca:be:8f:58:60:86:51:a8:82:1d:15:50:ae:64:a3:26:
         de:c9:11:3d:d3:32:d7:b1:31:8a:60:4e:16:86:92:52:85:b6:
         f2:22:80:f5:f3:e1:5b:d3:bb:fb:42:93:cb:de:b1:2a:19:22:
         51:21:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org