Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e36362e3233392e302f32342d3234203d3e20323632353035.roa
File:                     3137372e36362e3233392e302f32342d3234203d3e20323632353035.roa (raw, json)
Hash identifier:          L3vNE2NUUcqXO1yxZsdreo4sZm2AoMeeCrd9CJVf1Ls=
Subject key identifier:   9D:37:0B:04:6F:9A:30:19:D5:74:7A:21:1E:01:C9:2E:61:BD:21:A8
Certificate issuer:       /CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
Certificate serial:       14413151381D0C9CAA5F1EA61FB7344F93509066
Authority key identifier: CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e36362e3233392e302f32342d3234203d3e20323632353035.roa
Signing time:             Wed 03 Apr 2024 22:42:17 +0000
ROA not before:           Wed 03 Apr 2024 22:37:17 +0000
ROA not after:            Wed 02 Apr 2025 22:42:17 +0000
asID:                     262505
IP address blocks:        177.66.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:41:31:51:38:1d:0c:9c:aa:5f:1e:a6:1f:b7:34:4f:93:50:90:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF89ECF1906934B8868749FE10703ECBB434D3B9
        Validity
            Not Before: Apr  3 22:37:17 2024 GMT
            Not After : Apr  2 22:42:17 2025 GMT
        Subject: CN=9D370B046F9A3019D5747A211E01C92E61BD21A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:4e:31:f2:3d:0f:95:2c:79:e2:56:63:c3:
                    5b:62:5b:b4:12:5c:ca:e3:28:df:bb:ef:82:fc:fc:
                    51:2d:a5:a0:ee:e4:15:28:e1:02:b0:04:57:84:24:
                    3b:2c:68:52:a3:24:61:26:3e:2e:89:9e:87:87:6b:
                    e7:37:df:7f:aa:5d:e7:53:9d:a6:4d:ac:6b:6e:98:
                    b7:9c:04:08:bd:b1:6c:6b:25:f3:17:e7:c9:d0:70:
                    c5:ab:05:da:07:c1:dd:f8:3f:97:0d:f1:f4:e3:82:
                    60:0c:63:65:37:65:ba:ed:da:7d:43:96:39:2d:fa:
                    35:0b:0a:4b:67:6c:62:84:47:cc:89:1c:14:f9:38:
                    a9:60:64:aa:b6:9f:46:bc:30:7b:ac:d1:7d:35:75:
                    f1:98:86:2f:2d:bf:51:8b:a4:0b:52:b9:81:ec:d7:
                    fb:d7:ab:4c:ef:55:d6:c6:65:d1:44:9d:c1:3b:1c:
                    1e:4c:ae:0a:12:e4:09:40:a0:be:bd:bc:0f:be:be:
                    96:66:3e:d4:26:45:8a:0f:82:34:c1:06:0d:32:8d:
                    d0:30:cf:a5:84:f9:05:a5:2f:28:f2:e2:02:1b:78:
                    4a:ee:de:4a:f1:ae:9b:04:51:fe:43:25:c4:e1:6a:
                    41:e0:8d:2a:24:78:dd:76:0a:58:ab:76:98:5c:a6:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:37:0B:04:6F:9A:30:19:D5:74:7A:21:1E:01:C9:2E:61:BD:21:A8
            X509v3 Authority Key Identifier:
                keyid:CF:89:EC:F1:90:69:34:B8:86:87:49:FE:10:70:3E:CB:B4:34:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89ECF1906934B8868749FE10703ECBB434D3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VJzgdJCj5vGv6WAqWLk2LogiTPTYzdDd82fq6LM7i5C/1/3137372e36362e3233392e302f32342d3234203d3e20323632353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:df:1b:a8:e4:5e:cf:f0:a9:d6:65:87:21:e0:19:de:ad:c8:
         9a:96:78:2f:03:cc:fb:15:b9:0a:dd:68:b9:c8:21:bb:42:a6:
         53:46:0f:06:77:d3:7b:14:73:2d:42:65:56:22:81:6d:98:34:
         d8:e3:0b:ea:fc:de:46:9a:af:3e:1f:e9:47:be:f8:03:b9:df:
         f8:39:4c:99:c5:95:25:d6:3f:b1:2a:8a:44:d3:40:7a:a7:e2:
         c6:57:f1:9b:32:1c:61:e4:ac:f1:77:d1:52:ca:be:2f:a5:b7:
         85:91:e0:b6:ed:c4:e9:ae:23:d6:b9:8c:b9:af:d8:e0:c9:2e:
         af:c3:9f:12:94:f5:0a:32:65:e0:6c:22:92:49:a5:b3:38:7d:
         98:b7:a9:82:fb:b7:ba:c7:8b:c8:44:9e:b1:84:d8:ab:c6:22:
         36:20:a8:ec:4b:eb:bb:83:6d:73:d0:5f:d0:64:dc:93:19:39:
         80:4b:22:83:b1:c5:18:25:28:d3:04:24:d8:1b:4f:f6:18:0b:
         6d:35:7b:fc:29:70:c6:84:8e:bd:fe:68:67:ac:8b:ad:1c:2b:
         10:f2:4c:af:69:55:ab:89:27:3c:af:1b:cf:2f:c0:fb:9c:fb:
         b5:42:b4:84:cc:a5:7b:1b:56:38:58:04:2a:d0:53:1e:c8:dd:
         9f:a5:69:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 20:53:18 2024 by rpki-client on console-fra.rpki-client.org