Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/0/3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa
File:                     3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa (raw, json)
Hash identifier:          KWUu4d70skXyvT7Mq9/wF8EGBRDVoJJrGjpgKb6Ok6g=
Subject key identifier:   40:BE:26:96:AB:EA:EB:C4:53:B6:55:33:56:52:C5:52:BC:95:E4:A2
Certificate issuer:       /CN=F7A99C21917C598605586A0D8C97EF57F47B58D2
Certificate serial:       29D62E0098F0B3DC48D352909A30D7531B5AAD06
Authority key identifier: F7:A9:9C:21:91:7C:59:86:05:58:6A:0D:8C:97:EF:57:F4:7B:58:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7A99C21917C598605586A0D8C97EF57F47B58D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/0/3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa
Signing time:             Tue 10 Oct 2023 21:00:00 +0000
ROA not before:           Tue 10 Oct 2023 20:55:00 +0000
ROA not after:            Tue 08 Oct 2024 21:00:00 +0000
asID:                     270586
IP address blocks:        177.152.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d6:2e:00:98:f0:b3:dc:48:d3:52:90:9a:30:d7:53:1b:5a:ad:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7A99C21917C598605586A0D8C97EF57F47B58D2
        Validity
            Not Before: Oct 10 20:55:00 2023 GMT
            Not After : Oct  8 21:00:00 2024 GMT
        Subject: CN=3082010A0282010100B47529F8776BB4FBBD99E649DC44738BBC86B87B458B13FFBC2D502B69F34CBE6546A7359A45A932ADEED42A9CC3865F358737D6C65283E4076EB5FB005697A8476F2B8882EA3423ECC7376FD6C3BB2A8EAD9D5936430A72A25D2DA32C4B3B8DEE37019FC5EB6CDF0B20DD904508EF2AD178DABC1A676F14A7A0BD8C481DF4B022AD02426D088D9D1BBBF4C989180F6F52DF2FB15F5E9D870D7689D7CA2AB59A701491E07F98068CF48864CDD7F01E2AFA32DD77F92CAB6AF831D4E08A881A6523CB2D0B310CA1B3D860CE62DB71FB682B963841008C0874471192884F6A8ED757A1CDCA25ABA917AB035B29AA6CB1437AE2869441DBBC5AD00F74EFAEE0B3250203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:29:f8:77:6b:b4:fb:bd:99:e6:49:dc:44:
                    73:8b:bc:86:b8:7b:45:8b:13:ff:bc:2d:50:2b:69:
                    f3:4c:be:65:46:a7:35:9a:45:a9:32:ad:ee:d4:2a:
                    9c:c3:86:5f:35:87:37:d6:c6:52:83:e4:07:6e:b5:
                    fb:00:56:97:a8:47:6f:2b:88:82:ea:34:23:ec:c7:
                    37:6f:d6:c3:bb:2a:8e:ad:9d:59:36:43:0a:72:a2:
                    5d:2d:a3:2c:4b:3b:8d:ee:37:01:9f:c5:eb:6c:df:
                    0b:20:dd:90:45:08:ef:2a:d1:78:da:bc:1a:67:6f:
                    14:a7:a0:bd:8c:48:1d:f4:b0:22:ad:02:42:6d:08:
                    8d:9d:1b:bb:f4:c9:89:18:0f:6f:52:df:2f:b1:5f:
                    5e:9d:87:0d:76:89:d7:ca:2a:b5:9a:70:14:91:e0:
                    7f:98:06:8c:f4:88:64:cd:d7:f0:1e:2a:fa:32:dd:
                    77:f9:2c:ab:6a:f8:31:d4:e0:8a:88:1a:65:23:cb:
                    2d:0b:31:0c:a1:b3:d8:60:ce:62:db:71:fb:68:2b:
                    96:38:41:00:8c:08:74:47:11:92:88:4f:6a:8e:d7:
                    57:a1:cd:ca:25:ab:a9:17:ab:03:5b:29:aa:6c:b1:
                    43:7a:e2:86:94:41:db:bc:5a:d0:0f:74:ef:ae:e0:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BE:26:96:AB:EA:EB:C4:53:B6:55:33:56:52:C5:52:BC:95:E4:A2
            X509v3 Authority Key Identifier:
                keyid:F7:A9:9C:21:91:7C:59:86:05:58:6A:0D:8C:97:EF:57:F4:7B:58:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/0/F7A99C21917C598605586A0D8C97EF57F47B58D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F7A99C21917C598605586A0D8C97EF57F47B58D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGK98y63V7G5vK1X8irNXEZuMvuToXusJUWBL3HgWg6/0/3137372e3135322e3130302e302f32322d3234203d3e20323730353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:18:74:8f:fa:d4:63:de:58:ea:33:1b:12:ea:71:b3:e2:75:
         c2:9c:39:28:26:ef:ad:70:9c:8a:2f:69:58:d0:b2:10:7e:f9:
         22:02:30:fd:c0:3b:8d:7d:25:2c:d2:44:c3:e5:af:ab:cc:d4:
         4e:43:6f:1b:cd:df:fd:98:d2:16:1a:0c:92:86:49:bd:4d:ae:
         59:fb:c2:aa:6b:b2:6b:c2:e7:c6:be:9d:d7:8f:b0:21:56:96:
         d1:d4:ce:c9:89:fa:27:80:ea:fa:da:42:4f:dc:32:7c:ff:f0:
         1b:ea:16:f5:af:d6:99:81:b3:ee:ed:e4:19:c8:ff:3b:96:74:
         3d:23:22:e3:83:05:6e:65:ce:5e:b6:1c:5e:3d:ea:4e:b0:ea:
         25:c2:12:25:4b:a7:91:f4:c2:54:72:e0:8b:99:88:34:33:54:
         7d:f7:a2:3c:18:b3:7b:a1:34:07:5f:9b:90:e5:99:1c:3b:eb:
         5b:37:af:8b:a4:61:4c:06:90:40:5c:29:db:1e:05:5b:35:8c:
         5b:6c:3a:25:d3:04:48:5a:b8:4d:77:ff:27:c5:cd:3f:ea:c2:
         16:fd:22:b2:ce:4d:ee:f5:86:e2:9b:0c:ec:38:4e:54:f7:02:
         5a:96:98:be:a2:78:3f:d9:73:fd:33:68:18:e8:2c:87:32:4a:
         6e:9c:23:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org