Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38382e302f32342d3234203d3e20323632393737.roa
File:                     3137372e3139302e38382e302f32342d3234203d3e20323632393737.roa (raw, json)
Hash identifier:          ZhJABdyTnCCrhhmXKR5JKwMf3cZ6YTmjjANDSH8rp/E=
Subject key identifier:   1A:D1:DB:87:1F:B7:C2:6B:E7:61:15:75:9E:B8:70:23:B6:03:52:9F
Certificate issuer:       /CN=6FB6B7EF794C174C831FD488C872C21F121032B1
Certificate serial:       5219801E619C417502444D3056C1F7FB4A1E2DBC
Authority key identifier: 6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38382e302f32342d3234203d3e20323632393737.roa
Signing time:             Thu 04 Apr 2024 00:35:52 +0000
ROA not before:           Thu 04 Apr 2024 00:30:52 +0000
ROA not after:            Thu 03 Apr 2025 00:35:52 +0000
asID:                     262977
IP address blocks:        177.190.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:19:80:1e:61:9c:41:75:02:44:4d:30:56:c1:f7:fb:4a:1e:2d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB6B7EF794C174C831FD488C872C21F121032B1
        Validity
            Not Before: Apr  4 00:30:52 2024 GMT
            Not After : Apr  3 00:35:52 2025 GMT
        Subject: CN=1AD1DB871FB7C26BE76115759EB87023B603529F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:bd:39:76:5e:fb:e6:16:53:97:27:f6:60:
                    97:87:cf:37:0c:43:83:f2:b0:b1:4c:8f:51:69:ae:
                    4b:80:8d:6c:bf:3d:48:66:04:fd:32:e0:a1:fb:30:
                    79:e5:02:d3:57:a3:04:e7:bb:4d:74:e6:06:20:d9:
                    d3:5b:bb:0e:de:b3:36:63:b6:2c:fe:f3:74:d6:41:
                    9b:0c:12:9e:25:d6:d2:af:8d:a9:b3:50:cf:7c:21:
                    c9:3d:37:b9:bb:4c:81:b9:9a:ee:be:a1:bc:97:0f:
                    75:aa:07:2c:60:7d:e8:3b:98:22:c9:2f:3f:f1:73:
                    e1:c6:53:c7:41:50:2c:d5:e4:fa:a4:7e:09:80:be:
                    e0:64:c4:b8:45:43:9a:b7:61:77:fe:80:c3:38:83:
                    10:7f:c6:4d:59:c7:a5:ed:1b:52:8b:d0:37:ae:64:
                    84:35:74:64:b4:02:d3:ef:35:1c:d2:1c:d4:08:98:
                    38:96:5d:67:44:48:42:21:fb:fa:2d:a5:3e:3c:06:
                    53:73:24:e8:2f:87:47:05:da:cf:f1:84:35:fa:76:
                    c4:39:1f:38:3c:36:26:d3:88:bf:20:82:16:96:6d:
                    ea:29:b3:12:61:cb:0b:2e:4e:13:0f:5e:35:69:d0:
                    aa:e0:08:b3:15:19:90:47:9e:0e:8a:59:e3:d3:3d:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D1:DB:87:1F:B7:C2:6B:E7:61:15:75:9E:B8:70:23:B6:03:52:9F
            X509v3 Authority Key Identifier:
                keyid:6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/6FB6B7EF794C174C831FD488C872C21F121032B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e38382e302f32342d3234203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:8d:75:33:e4:34:a9:11:eb:bf:55:84:05:9a:64:0d:fd:83:
         c9:c1:46:41:2e:06:95:93:61:0d:97:21:1c:e8:79:d5:a2:a8:
         2b:22:7f:f7:3d:05:ca:fa:7a:14:b5:04:eb:2c:88:0f:a0:2f:
         eb:95:8d:cb:5d:c4:6b:58:76:97:85:c7:cd:aa:60:28:1e:67:
         d9:88:b5:d4:44:c2:5b:4c:4a:14:9d:26:0e:a4:47:68:64:2e:
         14:6e:e5:d8:6a:f4:71:2b:6c:80:be:c6:71:db:c7:9a:9c:81:
         50:f1:03:81:0d:73:27:ef:63:c6:95:c5:4a:76:05:c1:8b:82:
         57:c1:3a:53:bd:c8:27:01:ba:5d:62:9e:f0:f8:b2:ed:60:68:
         e6:d8:c5:eb:9f:c1:db:eb:a8:05:f1:67:b2:3a:df:a4:dd:bb:
         56:a1:ae:ad:fa:d8:80:fa:fb:44:23:e0:a5:6c:d8:75:50:92:
         84:0e:a2:ff:3a:10:f0:66:22:2b:cf:5f:b5:1c:6d:d7:8b:3d:
         d0:10:bb:cd:9a:ff:45:a2:de:1b:1d:c5:95:34:a8:c6:45:06:
         0e:f9:e6:43:1b:96:f2:dc:0a:3e:cd:60:11:11:43:0c:b8:c8:
         12:7d:69:52:ce:00:c9:71:0b:ac:88:65:aa:96:f4:57:86:9b:
         da:1e:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org