Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134322e302f32332d3234203d3e203533303138.roa
File:                     3137372e37322e3134322e302f32332d3234203d3e203533303138.roa (raw, json)
Hash identifier:          e683eXIpfviXGMzn5r1Zz/kA4TkUKEOjJyoJKh782sk=
Subject key identifier:   9F:DF:41:D5:3B:A3:9F:CB:3D:73:58:3F:82:7C:58:98:FF:2E:36:53
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       0CDC8177E9E22E6B33DD3E3AB4D99B697D536F3B
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134322e302f32332d3234203d3e203533303138.roa
Signing time:             Tue 12 Mar 2024 18:15:28 +0000
ROA not before:           Tue 12 Mar 2024 18:10:28 +0000
ROA not after:            Tue 11 Mar 2025 18:15:28 +0000
asID:                     53018
IP address blocks:        177.72.142.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:dc:81:77:e9:e2:2e:6b:33:dd:3e:3a:b4:d9:9b:69:7d:53:6f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar 12 18:10:28 2024 GMT
            Not After : Mar 11 18:15:28 2025 GMT
        Subject: CN=9FDF41D53BA39FCB3D73583F827C5898FF2E3653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fc:10:19:b6:74:be:db:3f:65:88:a8:f9:5c:
                    e7:c4:7d:64:ae:82:dc:78:41:37:bd:69:b7:7c:3e:
                    3f:8e:14:cd:d5:fa:11:53:fd:37:78:3f:2a:64:9c:
                    06:64:e6:1e:60:99:12:ad:a8:70:44:f4:7a:0d:42:
                    01:c3:b9:f5:d6:f5:7c:87:8e:98:df:97:f2:05:7e:
                    b5:eb:d4:24:5d:52:70:75:28:93:9a:6b:c9:89:ea:
                    48:89:6d:47:d1:d6:52:6e:39:d5:96:ba:aa:05:41:
                    51:46:dc:f1:ca:9c:b3:ac:45:51:85:c9:50:e2:7c:
                    d5:16:dc:8a:d3:dd:a6:b4:ad:9c:f4:fc:ac:fc:75:
                    8e:b2:0e:f4:15:f9:fe:16:7a:e5:00:a2:d8:11:c4:
                    f9:6d:59:4f:b1:e1:a9:b7:d7:5c:6c:43:67:7d:cd:
                    f8:75:e7:f9:d1:40:c9:99:cc:c2:a9:cd:22:ed:65:
                    fe:9a:65:c8:6b:9d:30:23:43:98:4f:15:e6:d0:64:
                    78:b6:94:18:23:8a:b7:44:69:44:fc:d5:ca:29:8c:
                    7f:d7:d7:e3:2b:db:43:93:46:58:29:34:73:f6:57:
                    71:4b:3c:d6:3b:02:9a:6a:6f:85:ab:45:03:1c:f9:
                    1f:7c:ec:f4:a2:2d:e4:46:db:10:5b:ab:a7:df:17:
                    01:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DF:41:D5:3B:A3:9F:CB:3D:73:58:3F:82:7C:58:98:FF:2E:36:53
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/3137372e37322e3134322e302f32332d3234203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:e8:98:ce:3c:d4:c3:77:5a:eb:3c:e3:d5:d5:b2:a4:eb:5a:
         e7:0b:c8:fd:f0:67:81:19:b2:f7:a2:c9:21:63:b9:dc:29:a3:
         c8:12:9f:f4:57:8b:69:b7:47:be:fb:e4:bd:7c:b5:0a:87:b9:
         6a:f9:ef:ea:6b:aa:d0:88:16:73:5c:05:56:99:36:20:f1:6d:
         48:ce:d4:bc:6d:04:3c:f3:ac:35:2a:61:4e:f6:f6:a3:a3:a3:
         7f:ef:8e:5f:c3:55:71:d9:38:c6:7a:58:42:95:82:5d:ee:b4:
         1a:26:47:5c:9f:7f:9e:cd:4c:2b:5b:44:88:a9:41:f7:7c:bc:
         47:45:5c:39:b2:18:ee:ab:c6:8a:50:f6:28:84:f8:e6:a2:0e:
         1e:87:94:82:70:d9:84:38:54:e3:e3:ae:7f:a5:6b:1d:a4:d4:
         8d:10:2e:98:c2:3b:8e:2d:61:63:8a:24:a4:86:59:fd:ba:3b:
         75:69:98:a0:f9:19:d4:17:f3:79:a0:df:a8:29:e8:c5:20:8f:
         27:f4:e1:ba:00:89:9f:c2:e9:e0:0b:ef:6c:20:a6:cb:c9:63:
         1a:3f:31:3b:fc:3a:a2:af:26:58:7b:b6:84:65:73:6d:d1:57:
         07:f9:57:82:ac:f3:9d:59:d3:c4:69:8f:34:cf:93:1b:a5:17:
         86:5e:43:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org