Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38322e302f32342d3234203d3e20323632393737.roa
File:                     3137372e3139302e38322e302f32342d3234203d3e20323632393737.roa (raw, json)
Hash identifier:          Ud6asSMAMhdrCQ99eJifHwheZ4o7mjgmT8zjyS+1FR4=
Subject key identifier:   36:70:D2:85:07:9E:ED:46:57:DD:10:98:C5:74:81:0E:EE:5C:B8:56
Certificate issuer:       /CN=6FB6B7EF794C174C831FD488C872C21F121032B1
Certificate serial:       3B8E64D74749DEB54CD47B20ED844C7E2AD15608
Authority key identifier: 6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38322e302f32342d3234203d3e20323632393737.roa
Signing time:             Thu 04 Apr 2024 00:35:46 +0000
ROA not before:           Thu 04 Apr 2024 00:30:46 +0000
ROA not after:            Thu 03 Apr 2025 00:35:46 +0000
asID:                     262977
IP address blocks:        177.190.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8e:64:d7:47:49:de:b5:4c:d4:7b:20:ed:84:4c:7e:2a:d1:56:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB6B7EF794C174C831FD488C872C21F121032B1
        Validity
            Not Before: Apr  4 00:30:46 2024 GMT
            Not After : Apr  3 00:35:46 2025 GMT
        Subject: CN=3670D285079EED4657DD1098C574810EEE5CB856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:54:72:31:04:58:1f:52:0c:78:fd:34:2c:b8:
                    31:b8:23:33:11:18:94:fb:ed:62:e4:7e:5e:b3:97:
                    3f:2d:e6:8e:97:ce:1e:5b:14:c2:64:7b:0e:aa:93:
                    79:a9:0a:18:ef:0d:7c:bb:9a:48:1f:94:a8:f7:47:
                    ec:95:60:74:d5:36:69:0e:94:0f:21:f4:5a:b1:04:
                    d4:cc:83:4a:fa:e2:54:18:79:f7:d0:68:63:c8:9e:
                    e4:f2:cb:c4:3a:fb:2d:ad:d6:bb:8a:53:19:7c:fb:
                    d8:a4:13:be:05:5e:c1:62:9f:ff:de:17:01:af:91:
                    90:74:a0:93:df:60:22:f0:38:2b:d2:6e:a1:a7:76:
                    55:2e:26:7f:90:27:e2:6e:af:08:16:86:70:04:6b:
                    d4:f8:f5:0c:83:4b:5c:34:80:9e:fd:f5:4b:92:01:
                    11:06:f1:17:d2:1d:35:f7:ac:41:37:fb:07:ef:fe:
                    0d:00:9e:a9:7a:9b:1f:b6:d6:f2:1c:85:35:60:18:
                    84:28:6e:61:8e:2b:4d:34:c4:a6:4c:e9:7e:eb:57:
                    1f:27:d4:7f:5c:99:a4:89:fe:a2:71:30:c4:be:30:
                    86:9c:8d:42:c5:2b:82:b7:c5:1c:d8:b5:0c:12:92:
                    9c:27:66:44:cb:45:df:bf:e5:2e:02:ac:86:32:71:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:70:D2:85:07:9E:ED:46:57:DD:10:98:C5:74:81:0E:EE:5C:B8:56
            X509v3 Authority Key Identifier:
                keyid:6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/6FB6B7EF794C174C831FD488C872C21F121032B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38322e302f32342d3234203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:12:e7:74:d3:4c:cd:43:a8:0f:6d:a3:d7:e9:3f:9a:f9:58:
         44:49:8f:4b:f6:ea:3b:e8:bd:96:e3:ee:a1:58:b2:09:8b:16:
         9a:7b:e6:3b:de:b5:d8:49:24:88:4e:fa:10:04:5f:19:50:23:
         40:94:ff:20:8d:36:9d:a6:68:cb:3e:72:2c:6b:99:7b:a3:47:
         97:90:93:91:a8:11:92:b8:3b:00:71:99:94:95:37:b1:4b:da:
         72:61:b0:0f:f2:01:06:d0:0f:77:04:08:23:e9:a4:b4:43:09:
         9c:06:93:88:d1:02:2a:bf:dd:69:82:d7:c8:a4:0b:c0:eb:e9:
         5b:26:43:4c:84:40:38:80:df:8d:b4:c3:2a:c2:aa:46:45:6e:
         3f:88:27:e1:68:07:db:f9:7f:63:78:a4:8e:53:6d:5d:67:45:
         88:a8:19:d2:22:4c:9b:0c:a6:42:07:e3:ac:e7:cb:bc:24:c5:
         b9:31:01:b6:c7:32:81:35:32:d4:49:fc:89:72:ff:d6:66:b7:
         ea:8f:31:31:4b:da:88:4c:4f:48:f9:b7:ca:a8:74:6a:de:d3:
         90:99:f9:8d:b1:b8:af:e2:95:e0:5f:e9:96:89:6f:2b:df:ea:
         c1:90:b0:3d:d2:dc:8d:05:67:1c:21:c2:14:4c:8a:a0:1f:35:
         b2:65:c2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org