Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e39302e302f32332d3233203d3e20323632393737.roa
File:                     3137372e3139302e39302e302f32332d3233203d3e20323632393737.roa (raw, json)
Hash identifier:          /CIiX5MJALhqGvVtt1ve1zSDwya8Wu/oX0Dg6bIeHiw=
Subject key identifier:   CB:2D:07:72:C6:FF:FC:F8:54:1E:2D:32:F2:56:45:99:6A:C8:C1:CC
Certificate issuer:       /CN=6FB6B7EF794C174C831FD488C872C21F121032B1
Certificate serial:       5B3E59AE33924881B4ACAA6BF7EF610675796A7F
Authority key identifier: 6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e39302e302f32332d3233203d3e20323632393737.roa
Signing time:             Thu 04 Apr 2024 00:35:42 +0000
ROA not before:           Thu 04 Apr 2024 00:30:42 +0000
ROA not after:            Thu 03 Apr 2025 00:35:42 +0000
asID:                     262977
IP address blocks:        177.190.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3e:59:ae:33:92:48:81:b4:ac:aa:6b:f7:ef:61:06:75:79:6a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB6B7EF794C174C831FD488C872C21F121032B1
        Validity
            Not Before: Apr  4 00:30:42 2024 GMT
            Not After : Apr  3 00:35:42 2025 GMT
        Subject: CN=CB2D0772C6FFFCF8541E2D32F25645996AC8C1CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b8:11:be:0c:53:93:ae:a9:de:59:fe:d1:96:
                    03:d0:f2:4a:b3:14:bd:40:cc:bc:6d:98:8a:a7:62:
                    fb:12:cb:d8:94:98:d4:59:cb:c8:a1:32:a7:19:6e:
                    52:d6:a7:44:63:ad:bc:7c:65:d9:c7:05:4d:8f:66:
                    f0:0e:56:ea:36:28:b6:0f:bf:d0:52:fd:5a:f6:8f:
                    f2:42:f2:cf:02:0f:cd:f2:04:ae:5b:56:84:c4:53:
                    7d:6d:fc:d2:2e:3a:7a:71:9b:ab:88:56:53:bc:67:
                    32:0c:35:24:86:8d:fe:64:f9:94:39:15:41:f0:2d:
                    59:ea:c8:2b:5a:76:ff:de:07:58:a9:ef:c8:59:d5:
                    bf:26:3a:33:a4:9e:47:d7:ef:f7:58:62:e5:92:a8:
                    d6:2b:5c:87:ad:9b:94:cc:02:eb:b2:a6:63:3b:cb:
                    18:54:8c:53:e0:58:23:6e:9b:62:09:38:f9:34:f4:
                    4c:45:32:b8:b9:a3:20:8f:9e:80:75:30:be:98:e4:
                    3f:fb:86:7b:34:64:79:09:71:31:cf:67:91:1c:41:
                    0a:70:fc:c4:5a:1e:ac:f6:94:49:c8:a3:57:e4:1d:
                    1b:76:a4:56:26:42:ba:95:87:7e:8a:8d:e0:54:48:
                    34:90:40:a0:89:97:af:c0:8c:de:9d:7c:15:ff:a1:
                    1f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2D:07:72:C6:FF:FC:F8:54:1E:2D:32:F2:56:45:99:6A:C8:C1:CC
            X509v3 Authority Key Identifier:
                keyid:6F:B6:B7:EF:79:4C:17:4C:83:1F:D4:88:C8:72:C2:1F:12:10:32:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/6FB6B7EF794C174C831FD488C872C21F121032B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FB6B7EF794C174C831FD488C872C21F121032B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/1/3137372e3139302e39302e302f32332d3233203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:0d:f8:e5:e8:b4:13:33:30:b8:bf:70:76:98:cc:5b:c3:
         09:22:54:64:35:bf:53:cf:9d:69:35:e5:e2:f0:13:c2:5b:44:
         67:3b:dc:2e:67:82:2c:6b:82:e4:7e:81:38:06:26:22:00:b6:
         c3:04:cf:63:5f:6e:cf:b8:a6:aa:34:ee:d5:e7:22:f5:62:dc:
         d4:80:70:28:f7:99:c4:33:5b:0c:8e:82:fd:8b:2c:8e:0c:f2:
         ba:be:53:d1:da:ec:b6:f3:dd:f9:fa:03:03:ea:5c:5f:b8:18:
         47:c0:15:44:22:e0:f3:d1:16:06:49:b8:66:7b:25:30:31:be:
         85:f2:fc:5c:e0:6c:7c:9a:a9:6a:88:34:b2:96:1e:4d:b4:f4:
         fa:fa:ca:e7:42:d0:f3:9c:94:bd:a6:20:13:aa:b3:5e:d6:e6:
         0a:85:29:84:83:9f:7d:ed:9d:40:b3:8f:d8:09:65:ec:a2:6b:
         d9:1a:f4:1d:7d:6d:08:a8:8d:34:e5:a2:8d:53:49:3a:6f:fd:
         de:ca:a2:02:57:a8:4d:a9:ac:70:29:12:fa:33:90:7e:1f:7e:
         62:e5:05:53:88:4e:6d:a6:9b:a1:c6:0e:e3:d9:6f:35:9e:6c:
         a8:ea:6c:d7:14:ca:cd:29:58:bc:81:db:21:ba:98:02:b0:9c:
         c1:53:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:26 2024 by rpki-client on console-ams.rpki-client.org