Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e36362e3232352e302f32342d3234203d3e20323632353035.roa
File:                     3137372e36362e3232352e302f32342d3234203d3e20323632353035.roa (raw, json)
Hash identifier:          T6iXdxBXov1d22+XYD2wzRWd4sVuo+t1yYWkLsEVphg=
Subject key identifier:   F0:7B:45:3C:B7:FA:42:4A:0F:4E:72:CA:84:C9:5E:7E:BB:AE:E8:DD
Certificate issuer:       /CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
Certificate serial:       56A97C90A9A58BA407683C01310D1FEBB9D5AFDD
Authority key identifier: CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e36362e3232352e302f32342d3234203d3e20323632353035.roa
Signing time:             Wed 03 Apr 2024 22:42:20 +0000
ROA not before:           Wed 03 Apr 2024 22:37:20 +0000
ROA not after:            Wed 02 Apr 2025 22:42:20 +0000
asID:                     262505
IP address blocks:        177.66.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a9:7c:90:a9:a5:8b:a4:07:68:3c:01:31:0d:1f:eb:b9:d5:af:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
        Validity
            Not Before: Apr  3 22:37:20 2024 GMT
            Not After : Apr  2 22:42:20 2025 GMT
        Subject: CN=F07B453CB7FA424A0F4E72CA84C95E7EBBAEE8DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ea:38:99:51:d6:51:bd:7e:f7:9e:1e:2b:79:
                    e5:9c:2f:47:12:11:bd:04:3f:fd:b4:99:5e:06:90:
                    f9:26:59:f1:ad:0c:7b:25:83:a2:83:63:ef:40:5f:
                    89:c3:f8:60:a7:92:1c:1f:e0:9b:f2:8d:5d:c2:ce:
                    13:09:e3:0a:e2:6f:7a:a0:d8:49:f9:a9:42:f6:96:
                    e3:18:f4:83:ad:11:ee:5e:d2:c0:fb:9f:8b:15:05:
                    e1:7d:e5:6d:58:b6:4f:12:8f:48:54:cc:11:6e:96:
                    74:2c:bf:e9:99:c1:3c:4d:89:c1:27:c4:70:92:9c:
                    59:c8:ca:94:6d:a0:0b:9a:b1:54:7f:34:79:7b:ed:
                    7a:83:21:a7:3c:64:4f:3a:1a:4b:93:cd:45:ff:c1:
                    da:33:04:df:ac:c2:82:16:01:4d:04:f1:bd:1f:8c:
                    08:36:f0:db:47:7b:e2:c7:82:f9:38:0a:30:70:b9:
                    e5:9a:d7:f7:cf:4a:9f:03:7e:d7:d1:03:f0:6b:98:
                    e9:f8:4f:fb:3a:a1:c9:74:8d:06:3a:1f:96:df:e6:
                    20:12:b6:4f:79:05:4a:25:71:1a:47:19:d6:62:28:
                    12:b4:88:9f:35:73:d7:87:c5:96:51:d9:9c:f5:a3:
                    bd:de:b0:f4:02:dc:09:d4:84:f0:18:74:fa:76:8e:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7B:45:3C:B7:FA:42:4A:0F:4E:72:CA:84:C9:5E:7E:BB:AE:E8:DD
            X509v3 Authority Key Identifier:
                keyid:CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e36362e3232352e302f32342d3234203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b2:91:43:54:e0:e3:2f:71:8e:a4:24:3b:21:34:d5:5f:1a:
         6e:b4:e1:4e:bd:e5:e7:d6:d8:d0:d3:12:46:42:22:68:46:8f:
         17:1f:f4:20:2d:44:40:df:89:8b:2f:21:ec:4d:93:05:75:12:
         2c:0d:73:65:ac:a0:1f:26:eb:67:14:a5:c3:7e:a8:f1:4a:28:
         9b:dc:1b:a1:61:c6:b6:c5:0a:77:c8:7c:01:e4:55:a1:89:a1:
         31:45:4b:41:ed:dd:30:bf:ec:be:16:c3:c9:a1:cf:ed:9f:a2:
         00:64:ce:51:4b:a1:96:b5:0f:02:41:8d:e1:e1:08:74:1d:44:
         5a:a9:66:2b:59:2c:0e:c4:7b:09:e7:0a:d3:31:a5:7b:e3:84:
         fc:dd:d9:1b:37:89:8b:c2:27:8a:24:94:5a:28:cb:55:f2:d3:
         e5:f6:4a:96:58:18:0f:eb:7e:67:6d:5e:d6:79:98:6e:ec:f4:
         14:1e:6b:a2:73:16:bb:7f:bc:0b:d8:f7:9a:26:80:b0:8d:7c:
         49:b7:22:a9:fa:0e:bb:8b:ee:a7:c1:b0:01:65:89:b1:a1:23:
         a3:16:9a:13:f5:f2:01:8b:7e:7f:f7:3e:b9:b3:75:86:ce:61:
         35:a2:ef:7b:e3:3f:75:57:7e:36:c6:dd:c1:57:ed:fc:d2:7b:
         8f:d8:a5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 20:53:18 2024 by rpki-client on console-fra.rpki-client.org