Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32322d3234203d3e203533303138.roa
File:                     3137372e37322e3133362e302f32322d3234203d3e203533303138.roa (raw, json)
Hash identifier:          9Jkv15wXFj9jwhuHTdug3bHGIVU1KeZwOwaN3muUgdA=
Subject key identifier:   CC:FA:D6:99:5D:EB:81:23:FA:37:C8:39:2B:94:79:EB:68:E0:65:3D
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       2A1ECAA3C15502569EFB3918D836674B81F04169
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32322d3234203d3e203533303138.roa
Signing time:             Tue 12 Mar 2024 18:15:19 +0000
ROA not before:           Tue 12 Mar 2024 18:10:19 +0000
ROA not after:            Tue 11 Mar 2025 18:15:19 +0000
asID:                     53018
IP address blocks:        177.72.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1e:ca:a3:c1:55:02:56:9e:fb:39:18:d8:36:67:4b:81:f0:41:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar 12 18:10:19 2024 GMT
            Not After : Mar 11 18:15:19 2025 GMT
        Subject: CN=CCFAD6995DEB8123FA37C8392B9479EB68E0653D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:71:2a:a0:42:d8:91:2e:93:df:07:17:f3:
                    2e:65:84:cc:90:a6:3c:8f:52:05:ac:35:f9:5e:31:
                    d3:dc:ed:c8:e1:b2:26:31:ee:06:39:3c:1d:33:ad:
                    fa:a4:03:1a:30:d3:c0:e8:3b:90:6b:2e:18:06:bd:
                    10:2f:b3:4b:d2:c2:87:4c:7f:88:62:14:92:39:3e:
                    71:6c:99:2a:76:2e:65:25:c7:94:04:71:93:5a:26:
                    97:42:70:2d:25:e5:26:15:74:b9:e0:ae:02:2c:9d:
                    01:d9:0d:f7:b8:ee:a4:61:3a:f2:25:91:bf:f4:a6:
                    ca:b0:00:44:85:b9:9e:f7:c7:9c:ff:62:0b:4b:ab:
                    2a:fa:1a:a2:3b:ee:54:d6:29:4b:84:ac:61:9d:44:
                    ff:e0:68:ae:17:df:d1:e4:93:af:4a:34:59:4a:46:
                    fe:f9:e3:05:68:3e:57:a2:07:59:5a:dc:c8:00:9d:
                    74:b1:af:d4:b8:c4:64:7c:3a:aa:d8:2c:27:23:4d:
                    84:52:24:b2:d9:f5:65:7f:a5:e7:ef:02:33:ca:84:
                    3b:2b:4b:62:46:7e:6f:59:e7:d3:bc:2d:d4:09:27:
                    87:cd:fb:67:c4:1d:5c:74:96:c1:1c:f4:91:b5:10:
                    a5:c4:58:8e:2d:a9:6d:83:ab:0c:bf:b4:a6:2b:59:
                    c7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FA:D6:99:5D:EB:81:23:FA:37:C8:39:2B:94:79:EB:68:E0:65:3D
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3133362e302f32322d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:5c:87:06:e2:cb:37:5f:61:1a:5f:c2:a1:c7:7d:44:91:83:
         9d:a6:f1:99:b2:34:be:9e:3a:28:27:cd:b8:c3:1c:16:f9:a9:
         57:f5:fd:dd:6c:67:df:f1:e9:51:b4:6f:9f:f1:b2:59:5f:b5:
         78:10:f9:e0:4a:05:9a:0b:2d:2d:ad:f3:78:59:51:d9:26:4e:
         c9:8e:54:3f:a1:7a:e8:9b:95:0f:9b:a0:15:16:23:89:dd:a9:
         b2:63:71:10:5f:1c:da:9c:4e:72:94:9c:fe:8f:ab:70:b3:15:
         90:f1:2b:06:5f:82:b3:f2:ef:d1:6c:84:ef:40:5c:8b:cb:b7:
         3e:aa:bf:dc:fd:1d:19:2a:c8:e1:f9:16:0c:5d:8c:5b:e0:6c:
         65:92:c5:46:d5:48:0e:23:15:0c:de:ed:4e:8a:72:40:7d:36:
         6a:6f:23:6a:e6:d1:94:7d:72:25:d2:e0:d8:f2:6e:3d:8d:00:
         b5:f6:33:31:ed:d8:a3:7c:eb:2d:7d:c9:16:64:5a:98:88:c7:
         b6:8b:75:70:00:60:73:e2:bf:8f:62:a0:79:d6:e2:40:5e:b7:
         06:b3:d4:c5:3f:8b:38:6b:05:92:8f:1a:d9:b8:f5:42:8e:29:
         1f:67:ff:c8:47:6f:6f:a7:cf:7e:f4:8a:34:d0:14:e7:7d:8c:
         8b:6e:6d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org