Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137372e39322e39362e302f31392d3234203d3e203137323232.roa
File:                     3137372e39322e39362e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          CLGOh/WyCYG9QpZBf3hZj0/xd3vZQ3E5yP5oOkZcgdo=
Subject key identifier:   75:D3:25:20:B3:16:50:1F:29:33:03:BB:68:13:4E:18:92:B8:E8:E2
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       025C89B026702745D9D9BF8B337A63E4E614698D
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137372e39322e39362e302f31392d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        177.92.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5c:89:b0:26:70:27:45:d9:d9:bf:8b:33:7a:63:e4:e6:14:69:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=75D32520B316501F293303BB68134E1892B8E8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:a6:55:6b:c5:86:f9:85:25:4d:b0:cf:2a:
                    ea:78:1e:e7:67:1c:f8:5c:dc:00:90:49:a3:56:51:
                    ca:94:45:ad:75:3c:47:7d:e3:d6:72:bd:79:0c:f1:
                    fe:c9:10:9c:3c:0d:27:39:3c:85:a2:1a:80:57:af:
                    01:d7:9a:dc:b1:1d:69:d9:0f:0a:6f:1b:87:36:84:
                    4f:2e:e2:1e:d0:d3:56:d2:a4:dc:ca:18:ed:ce:10:
                    7f:d2:e2:b2:70:cf:30:bd:29:e0:dd:59:eb:83:3a:
                    b6:83:f5:11:0f:39:ce:84:1f:4b:58:86:1e:02:bb:
                    67:b3:eb:ba:38:5c:9d:0a:6d:c6:97:b3:fd:2a:82:
                    ab:10:98:14:1b:d2:09:f9:a7:52:c2:d7:46:d0:eb:
                    6f:3d:d8:f4:0c:3e:29:90:3f:4b:18:e1:fb:a6:cd:
                    1a:0b:cc:0f:d6:5f:cc:ff:8a:4a:93:91:06:a6:ef:
                    a5:db:a9:cf:7c:10:4d:ae:db:dd:f2:4f:2e:c5:98:
                    16:99:09:11:77:ee:7b:af:d0:1d:05:b4:18:3b:f6:
                    6e:ad:b5:88:d4:94:5a:b8:c9:f3:8f:0c:38:d6:69:
                    85:f3:06:43:7d:c2:9e:30:c9:16:2b:09:17:ca:68:
                    1c:ce:67:90:03:a9:44:d5:6e:66:ac:f3:9e:02:82:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D3:25:20:B3:16:50:1F:29:33:03:BB:68:13:4E:18:92:B8:E8:E2
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3137372e39322e39362e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:9c:28:1c:9c:15:d1:66:0e:60:9a:0d:79:c0:fa:90:27:31:
         8b:48:56:db:46:bb:51:73:e9:01:22:26:77:c0:cc:bb:04:ad:
         89:bb:eb:a4:78:e5:c9:e2:d0:be:15:95:09:0c:95:c5:e5:ca:
         8b:17:3b:70:af:fc:92:2e:3e:a6:1f:93:d7:9e:b2:85:f5:23:
         28:76:5c:a1:1d:bc:9a:2b:65:9d:58:46:57:41:44:39:7e:0b:
         6b:be:0a:0e:38:48:2a:c4:9d:aa:71:82:cf:26:89:4e:5e:96:
         10:17:11:3e:b7:ed:15:73:cf:6d:f0:31:cb:3b:62:9b:06:50:
         ed:38:ea:98:1c:a5:a0:b2:e8:56:08:e9:a1:b5:8e:6f:78:aa:
         6f:8e:b8:fe:20:95:cc:31:c8:53:0e:11:e5:16:89:60:2e:e3:
         56:80:27:31:a5:42:30:7b:9d:c7:ca:11:2d:f9:c2:ee:78:81:
         1b:ba:cb:7f:f7:e9:ed:e6:87:49:a8:38:96:0f:a4:79:4a:41:
         f3:32:e3:6c:d6:0f:ad:b9:b0:0b:82:05:aa:98:20:14:11:99:
         a2:ac:58:3d:ef:84:f1:b5:9f:68:2a:97:e1:16:10:8f:7b:e7:
         04:6e:48:7e:0a:b5:ec:4a:7e:c5:b6:3b:0f:12:3a:51:41:49:
         96:dd:b4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org