Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e36362e3232362e302f32342d3234203d3e20323632353035.roa
File:                     3137372e36362e3232362e302f32342d3234203d3e20323632353035.roa (raw, json)
Hash identifier:          Cm+XvWSi+jaIpwAt6LXbZOQ0DLQ0zSSs4Ho5xspDYzw=
Subject key identifier:   6B:63:63:03:FF:D5:FC:7F:AB:2A:CA:7C:57:8C:C8:E4:F3:97:FD:A3
Certificate issuer:       /CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
Certificate serial:       66163FB42C0DAC741DDD6CE9BFFCAABC6B67ABC6
Authority key identifier: CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e36362e3232362e302f32342d3234203d3e20323632353035.roa
Signing time:             Wed 03 Apr 2024 22:42:21 +0000
ROA not before:           Wed 03 Apr 2024 22:37:21 +0000
ROA not after:            Wed 02 Apr 2025 22:42:21 +0000
asID:                     262505
IP address blocks:        177.66.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:16:3f:b4:2c:0d:ac:74:1d:dd:6c:e9:bf:fc:aa:bc:6b:67:ab:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
        Validity
            Not Before: Apr  3 22:37:21 2024 GMT
            Not After : Apr  2 22:42:21 2025 GMT
        Subject: CN=6B636303FFD5FC7FAB2ACA7C578CC8E4F397FDA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f8:c4:01:00:d2:ea:a0:f6:ad:cb:11:7e:5d:
                    07:65:e7:93:fb:51:20:ce:9f:53:37:a8:5e:44:6c:
                    f7:b8:56:3d:d9:ee:d1:7a:f3:3a:56:f8:2a:f3:34:
                    f0:be:cb:30:e2:7a:05:6e:32:79:07:e5:fd:3e:4e:
                    04:9e:e9:43:69:b7:90:8a:e1:aa:de:a1:c6:9b:8a:
                    56:f2:13:2a:a4:2a:7d:73:f5:b6:16:b6:fc:55:a4:
                    cb:23:d3:c1:db:41:93:24:d3:6d:9a:0a:39:a2:6e:
                    a0:51:6d:b4:e2:d8:17:54:af:d9:a2:42:24:cd:7b:
                    af:56:f8:7a:4b:30:02:9d:1f:42:9f:33:cc:0d:78:
                    13:bb:a0:15:b2:e4:10:c7:57:d9:1d:72:e0:bb:2f:
                    6f:73:29:16:3a:5e:31:12:bb:71:a3:99:40:54:ca:
                    1b:57:d4:d0:2f:99:eb:d0:9d:09:4b:85:18:e4:86:
                    eb:39:4a:52:c6:51:d8:2b:48:2e:1d:c1:f7:c2:20:
                    69:1e:42:1a:ac:76:8c:78:c0:f5:a8:cb:d8:2d:d5:
                    7b:51:25:42:2e:31:9f:33:1e:f7:aa:ef:79:1d:ac:
                    20:64:ac:6c:92:4f:b0:c7:3f:c3:c0:d6:32:95:c3:
                    61:62:88:db:0c:5f:8c:62:de:bf:60:cd:99:06:69:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:63:63:03:FF:D5:FC:7F:AB:2A:CA:7C:57:8C:C8:E4:F3:97:FD:A3
            X509v3 Authority Key Identifier:
                keyid:CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e36362e3232362e302f32342d3234203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:eb:ec:22:05:0c:b1:4a:7e:c0:c6:bb:55:33:da:7d:86:20:
         06:6c:a9:b1:09:ec:33:89:8c:fe:28:5d:e6:c0:47:41:af:9b:
         86:d1:60:fb:5d:0c:6a:32:d6:0c:75:3a:94:7b:d7:59:dc:eb:
         cf:fa:ec:14:20:5b:3c:ba:58:40:0f:86:e9:50:f2:0f:82:58:
         b0:a8:01:c2:f0:4c:84:99:d6:ac:63:ce:64:0a:ed:4c:34:ba:
         30:1c:34:94:fe:c6:9f:25:3f:99:20:2e:8d:bd:7f:a0:85:07:
         d0:18:c3:a4:40:02:09:05:7e:c3:a7:95:55:a2:cb:35:cb:ac:
         e8:13:d8:ac:04:07:6e:d1:b5:f4:fd:fb:38:f8:fc:88:dd:74:
         80:14:8f:60:53:49:95:6c:11:64:3c:22:87:b2:ba:22:fa:19:
         e8:1c:be:e0:d4:98:69:56:d5:07:05:a7:18:24:ef:90:e1:10:
         0c:dd:01:0b:40:3a:7a:cb:74:90:ba:b6:de:7e:98:f1:d6:f8:
         86:7d:d1:6d:fb:b0:58:3b:d7:f5:75:bc:bb:2f:26:24:ca:79:
         bf:74:81:37:44:af:0e:3a:67:cc:f3:68:83:20:01:de:25:9a:
         2f:e9:cc:a5:87:cd:86:d4:a2:6c:da:1c:85:55:25:c1:df:6d:
         fa:aa:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 20:53:18 2024 by rpki-client on console-fra.rpki-client.org