Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e36372e3137322e302f32342d3234203d3e203532393137.roa
File:                     3137372e36372e3137322e302f32342d3234203d3e203532393137.roa (raw, json)
Hash identifier:          Ek9HymCgha4kf8qYxRv71x0iAfzJvuxNIonsY6FspMQ=
Subject key identifier:   FA:40:1B:DF:D1:77:57:F7:8B:4A:41:92:EC:84:56:B6:96:FB:2D:D6
Certificate issuer:       /CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
Certificate serial:       3616BDD9666F3E66239B333DA660680E8BA8FB3B
Authority key identifier: B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e36372e3137322e302f32342d3234203d3e203532393137.roa
Signing time:             Fri 10 Mar 2023 13:20:40 +0000
ROA not before:           Fri 10 Mar 2023 13:15:40 +0000
ROA not after:            Fri 08 Mar 2024 13:20:40 +0000
asID:                     52917
IP address blocks:        177.67.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:16:bd:d9:66:6f:3e:66:23:9b:33:3d:a6:60:68:0e:8b:a8:fb:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A705195705FFE3E5D81D77F8400BE2AF3809EE
        Validity
            Not Before: Mar 10 13:15:40 2023 GMT
            Not After : Mar  8 13:20:40 2024 GMT
        Subject: CN=FA401BDFD17757F78B4A4192EC8456B696FB2DD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:5f:36:e6:80:8d:16:5c:b3:32:27:47:53:
                    1a:16:03:48:b7:91:21:58:94:05:f9:9a:e7:31:fe:
                    ad:91:e1:27:55:16:2c:69:d3:ad:a7:26:66:48:98:
                    7d:d9:3c:c7:23:97:47:59:69:8f:8f:b1:55:a3:dd:
                    51:12:e2:59:00:e5:64:df:e8:c2:9d:2a:c0:b7:75:
                    6c:dd:99:1c:38:79:f1:82:24:61:79:2b:56:b9:de:
                    e1:32:a8:15:1b:65:a0:7e:c9:2a:99:7f:2e:fb:ba:
                    f6:06:3c:35:85:a0:84:e5:1b:a4:07:fb:32:6a:d6:
                    f7:ab:ef:c5:36:2a:31:ef:c9:2f:86:2c:ab:83:97:
                    97:51:dc:22:b1:7e:72:5a:27:c8:6c:95:d9:39:ae:
                    34:d9:5b:37:3c:f7:59:91:e7:9c:07:54:aa:92:62:
                    d3:de:31:47:e0:49:b6:d3:08:07:82:65:91:99:d7:
                    90:a8:a0:5e:6b:e2:d3:76:6d:b5:ef:c9:05:43:00:
                    87:16:45:66:58:97:ac:04:97:ce:eb:56:36:22:f6:
                    4b:0f:17:20:de:f2:60:c5:3d:23:7e:a3:61:90:a6:
                    72:3c:78:84:25:14:e3:c7:61:d0:1f:ca:84:e5:a5:
                    3d:7a:5e:e2:21:7f:43:0e:34:f5:89:01:46:88:6b:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:40:1B:DF:D1:77:57:F7:8B:4A:41:92:EC:84:56:B6:96:FB:2D:D6
            X509v3 Authority Key Identifier:
                keyid:B7:A7:05:19:57:05:FF:E3:E5:D8:1D:77:F8:40:0B:E2:AF:38:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7A705195705FFE3E5D81D77F8400BE2AF3809EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vx3cWgs1YKd49j1yUTJN1rJiQvEzuFDEW1KgWWW7QQt/0/3137372e36372e3137322e302f32342d3234203d3e203532393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:33:9c:69:26:31:df:4e:87:15:fb:b6:9e:b8:27:d2:92:99:
         82:4e:f0:c4:46:dc:28:21:f0:a0:c2:2d:58:9f:22:5e:ac:11:
         cc:88:68:f9:53:9d:fd:40:7c:d4:e4:b2:a5:19:b0:f1:15:58:
         34:aa:cf:2b:c4:56:d2:f4:40:bd:32:c0:68:d3:6d:43:d6:65:
         96:40:da:e4:05:24:d4:4b:c7:6b:ee:86:34:85:93:33:e7:b8:
         fa:13:0f:81:9f:56:fd:e1:21:6c:99:9b:e5:1f:6e:7d:5a:e2:
         b8:b5:e3:ae:2a:e3:9a:9b:d6:c8:79:5f:f5:ab:62:55:51:24:
         f3:7d:60:67:9b:42:5e:9b:c0:6e:d9:81:cb:7b:32:36:61:d4:
         ca:e8:63:1a:38:a3:4d:e1:12:11:d9:23:34:7a:88:ec:6c:40:
         87:9d:df:86:f9:61:2c:4e:4e:fd:81:a2:4f:74:be:b6:d9:5b:
         92:08:a2:4d:9b:e9:03:c8:29:87:4f:81:e0:64:32:63:a5:81:
         82:c3:cf:13:ef:10:7e:f9:0e:36:e3:e9:7a:88:c8:ca:3a:59:
         47:f7:5e:d2:7d:f2:09:03:0f:b2:f2:f9:3b:09:0e:fc:77:a5:
         f5:c0:7a:4b:3a:47:89:dc:41:f8:82:e4:f5:5e:10:fb:bf:9b:
         83:78:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org