Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/3137372e36362e3137322e302f32322d3234203d3e203532363539.roa
File:                     3137372e36362e3137322e302f32322d3234203d3e203532363539.roa (raw, json)
Hash identifier:          MZJjA6MMBQ17OcFMzvihMgk4gB1aqgpD7riDZydy3N0=
Subject key identifier:   F1:04:29:35:3E:9C:34:56:C3:53:C6:7F:0C:DF:8D:40:84:CF:66:BC
Certificate issuer:       /CN=F706AE6D27AED9B605E0F94FE2CC488B14F7C6A7
Certificate serial:       7713CE9D222C9BA42AEFC872836A25FA2649B466
Authority key identifier: F7:06:AE:6D:27:AE:D9:B6:05:E0:F9:4F:E2:CC:48:8B:14:F7:C6:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F706AE6D27AED9B605E0F94FE2CC488B14F7C6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/3137372e36362e3137322e302f32322d3234203d3e203532363539.roa
Signing time:             Thu 14 Mar 2024 18:55:57 +0000
ROA not before:           Thu 14 Mar 2024 18:50:57 +0000
ROA not after:            Thu 13 Mar 2025 18:55:57 +0000
asID:                     52659
IP address blocks:        177.66.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:13:ce:9d:22:2c:9b:a4:2a:ef:c8:72:83:6a:25:fa:26:49:b4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F706AE6D27AED9B605E0F94FE2CC488B14F7C6A7
        Validity
            Not Before: Mar 14 18:50:57 2024 GMT
            Not After : Mar 13 18:55:57 2025 GMT
        Subject: CN=F10429353E9C3456C353C67F0CDF8D4084CF66BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:e7:a0:9d:e0:12:39:f5:81:6f:1f:ea:ca:
                    80:fc:a5:e3:7b:aa:53:54:7b:28:77:01:1e:62:23:
                    cf:31:c3:fe:02:18:de:86:a8:f2:df:c2:49:49:4a:
                    27:6a:34:82:93:fa:9f:da:10:bb:4f:78:43:2b:8c:
                    2f:09:4d:fd:e3:31:b3:2c:ec:25:84:f4:42:06:86:
                    f5:82:6d:3c:49:a6:ff:c7:c5:e7:a9:31:5e:72:e4:
                    48:74:e7:1a:e6:03:9a:c5:e1:6c:69:66:1e:bf:2f:
                    57:9e:61:b1:72:09:ff:4a:a8:ed:ac:3f:a1:89:09:
                    56:36:e1:85:0c:02:15:cf:18:ab:09:28:86:68:b5:
                    23:af:bd:10:00:75:89:8d:61:71:3d:2b:d5:1d:74:
                    2e:dd:f2:0a:90:aa:09:55:7d:51:3a:36:06:06:b7:
                    1c:1c:e7:9a:88:d6:9a:e8:6a:bc:8c:2d:6d:52:de:
                    51:5f:c4:e3:5f:6f:c2:50:13:41:89:7d:82:55:f7:
                    cd:66:0f:ab:d0:47:b3:df:81:e7:93:a9:68:c5:be:
                    c3:ca:d6:50:78:be:bb:82:f0:fe:1e:b6:4c:a7:63:
                    44:75:24:b7:a2:7c:34:b1:7a:8c:1c:59:65:05:ab:
                    2d:a8:47:d9:bb:7e:2d:ae:e4:08:09:ae:95:12:b0:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:04:29:35:3E:9C:34:56:C3:53:C6:7F:0C:DF:8D:40:84:CF:66:BC
            X509v3 Authority Key Identifier:
                keyid:F7:06:AE:6D:27:AE:D9:B6:05:E0:F9:4F:E2:CC:48:8B:14:F7:C6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/F706AE6D27AED9B605E0F94FE2CC488B14F7C6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F706AE6D27AED9B605E0F94FE2CC488B14F7C6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/3137372e36362e3137322e302f32322d3234203d3e203532363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:7a:d7:76:75:7a:a7:4c:97:38:42:47:9a:a6:89:fe:e5:2c:
         03:1d:12:7c:54:43:65:b1:b5:68:71:45:c8:8b:2c:f1:db:3e:
         fb:3a:43:90:fe:d8:49:5b:bd:1c:b5:c6:0f:f5:18:48:37:68:
         2e:20:07:ab:a4:21:f6:88:2e:09:f6:6e:0d:b5:f9:7d:0d:eb:
         27:2b:e3:e7:02:86:55:ae:b5:b3:06:99:87:a8:f0:48:aa:7e:
         73:e5:5e:8c:98:88:ff:6c:af:e7:2e:96:22:2d:f0:df:65:ce:
         db:27:55:9c:1a:9c:ea:79:0b:a7:7d:80:44:df:0c:94:52:ca:
         17:68:52:3a:0a:13:2a:5c:a0:45:c7:6f:f0:9c:8b:69:87:45:
         9c:c6:0d:c6:9d:cc:40:6d:99:8a:85:e6:b1:74:cc:89:fd:93:
         ed:0a:5d:db:94:79:cd:ad:54:4a:c1:b7:8d:a1:85:97:d4:a7:
         11:9d:27:eb:c8:71:34:86:35:06:f4:77:95:ba:49:48:13:d0:
         1f:e1:0d:7d:39:bf:81:aa:b0:8f:23:53:fa:ad:59:12:4e:53:
         aa:e6:40:4e:fe:ac:fe:3a:bb:db:e5:42:43:2e:3d:0f:3c:31:
         72:c4:f5:39:ca:f4:fc:6d:32:b0:a7:d8:a8:4c:d1:20:67:c8:
         f4:5d:41:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org