Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa
File:                     3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          YEzLfnfC9MKcjd0MUVqmOxX61w2ovYMxFY6pGlz2r6k=
Subject key identifier:   E7:0A:1F:6D:89:58:70:0C:20:E9:7C:70:37:21:70:35:B5:CA:34:18
Certificate issuer:       /CN=FF8022FCD112C507FDC1D72A4931605EF74BC817
Certificate serial:       40C2D729CDB58F464BEEC92BE5E726762EF7A57D
Authority key identifier: FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa
Signing time:             Thu 04 Apr 2024 11:47:44 +0000
ROA not before:           Thu 04 Apr 2024 11:42:44 +0000
ROA not after:            Thu 03 Apr 2025 11:47:44 +0000
asID:                     53062
IP address blocks:        177.155.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c2:d7:29:cd:b5:8f:46:4b:ee:c9:2b:e5:e7:26:76:2e:f7:a5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8022FCD112C507FDC1D72A4931605EF74BC817
        Validity
            Not Before: Apr  4 11:42:44 2024 GMT
            Not After : Apr  3 11:47:44 2025 GMT
        Subject: CN=E70A1F6D8958700C20E97C7037217035B5CA3418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:08:33:09:c5:86:3c:80:50:85:27:5d:6c:1d:
                    fe:e5:68:b2:8d:06:f4:e2:0e:f7:83:5e:5c:3f:33:
                    58:93:3e:42:3c:6b:12:ff:52:8b:fb:bb:55:e0:59:
                    7f:81:1c:a0:98:30:77:c0:ee:d3:59:66:ba:07:ec:
                    c2:b9:c1:94:45:a4:d0:89:6a:fd:3b:68:de:65:18:
                    71:15:c5:c6:bb:c5:7b:57:bd:4e:ca:2f:97:26:64:
                    24:a1:6d:cd:e7:02:c6:07:c2:a6:b4:66:1a:8f:ba:
                    35:69:c2:a1:7f:d1:30:78:fe:3b:73:94:13:4a:11:
                    ec:ba:ed:97:7e:23:72:19:3e:3a:eb:d1:4e:b0:3f:
                    a3:1d:91:b6:c0:82:35:a4:72:d6:3f:8b:82:af:a4:
                    57:81:84:8c:1f:a3:53:5d:50:cb:93:8a:0c:eb:fe:
                    c8:3f:f7:b9:ad:0a:1b:b6:c3:f1:33:1c:d1:54:4a:
                    94:a6:96:5d:ef:fc:87:f0:25:7a:22:40:67:19:aa:
                    7f:11:57:35:09:5a:d9:70:46:58:54:24:c0:71:c1:
                    96:aa:50:6c:e5:05:2a:f0:f4:ee:53:31:ed:f2:fa:
                    c2:a4:27:88:e0:c6:9b:dd:30:b4:87:46:48:88:63:
                    4d:20:a9:06:b7:ca:80:53:05:32:04:50:16:7c:02:
                    d8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0A:1F:6D:89:58:70:0C:20:E9:7C:70:37:21:70:35:B5:CA:34:18
            X509v3 Authority Key Identifier:
                keyid:FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/FF8022FCD112C507FDC1D72A4931605EF74BC817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:cb:1e:bc:21:9a:04:6f:71:0b:86:ef:96:b9:3f:de:f3:68:
         3b:61:b4:78:f6:29:88:7b:b5:b6:61:7d:64:9b:cf:82:85:d7:
         09:34:0a:27:57:ff:34:27:dd:49:0f:a3:57:ed:17:b9:b1:68:
         94:86:0f:55:8a:d8:23:a9:5c:69:34:b3:29:94:4c:08:93:31:
         ed:3a:c6:a2:13:18:15:a6:9e:01:89:8f:58:e9:7a:5c:ab:62:
         49:7e:26:58:b7:74:11:07:90:35:5c:52:41:f0:5b:37:27:48:
         1a:2c:ae:b9:7a:13:c7:7d:51:de:eb:af:00:7b:41:a0:6b:8f:
         8d:f3:72:0c:01:d1:1e:e5:97:ff:12:41:4e:33:d6:b7:4e:25:
         be:e0:dd:19:d5:55:08:59:a3:7f:18:c1:91:b3:5b:32:30:a6:
         7a:ac:6d:61:ae:59:23:4a:7a:b6:4e:b3:c2:65:48:e8:5b:9f:
         48:1a:08:64:ac:91:b1:66:19:ac:ad:52:73:7f:25:fc:b4:f8:
         df:a1:a7:fe:0c:eb:fb:45:58:7d:f9:86:13:de:39:8d:05:6c:
         0c:cc:3d:f7:7a:6c:6c:7c:21:f0:01:13:5f:84:d5:99:36:67:
         24:2b:b7:80:6c:b9:0e:c8:81:b5:82:9a:74:87:5c:db:f1:ca:
         44:4c:8f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 02:00:09 2024 by rpki-client on console-fra.rpki-client.org