Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230342e302f32322d3232203d3e203532373830.roa
File:                     3137372e33392e3230342e302f32322d3232203d3e203532373830.roa (raw, json)
Hash identifier:          YwhJZR6ZcX6RXxE5vShntcOUKa5wEMBQOTFqzAzmICs=
Subject key identifier:   B9:A6:BF:19:1D:07:63:3D:7C:0E:14:22:52:3C:E0:1F:7E:C2:53:A2
Certificate issuer:       /CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
Certificate serial:       28B8229AD1181A6338A3E49A55CCE2EF67B513F4
Authority key identifier: 94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230342e302f32322d3232203d3e203532373830.roa
Signing time:             Wed 06 Mar 2024 18:02:12 +0000
ROA not before:           Wed 06 Mar 2024 17:57:12 +0000
ROA not after:            Wed 05 Mar 2025 18:02:12 +0000
asID:                     52780
IP address blocks:        177.39.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b8:22:9a:d1:18:1a:63:38:a3:e4:9a:55:cc:e2:ef:67:b5:13:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
        Validity
            Not Before: Mar  6 17:57:12 2024 GMT
            Not After : Mar  5 18:02:12 2025 GMT
        Subject: CN=B9A6BF191D07633D7C0E1422523CE01F7EC253A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:a7:89:4b:6b:d2:6c:a5:85:aa:f0:cf:5a:
                    79:eb:a6:e3:7b:52:70:c7:02:ae:10:b4:11:9e:de:
                    13:fa:35:5b:a7:5d:a8:1b:90:4c:6e:0a:d2:20:b5:
                    10:7a:9e:88:19:94:f1:1f:41:2f:c8:9a:49:ab:70:
                    42:e5:a7:bc:4f:a3:44:32:cc:37:c2:95:54:58:90:
                    02:eb:51:7f:5d:47:4c:f9:de:c4:32:a5:fa:4a:7d:
                    5a:3b:3c:36:a0:af:28:7a:6e:1b:ad:d0:96:31:3a:
                    50:d4:64:13:9d:0e:7a:dd:01:d4:0f:e4:20:80:d1:
                    32:95:07:06:3d:f2:eb:aa:42:3c:ff:d4:b9:c0:d9:
                    33:86:b7:9a:99:82:cf:25:af:93:4d:7d:de:3c:57:
                    f1:7e:48:1d:01:1f:f8:b5:42:cc:d9:a4:7c:9a:a8:
                    e0:07:7f:93:30:7f:ac:2f:ee:94:12:a8:b4:b4:1b:
                    2c:51:79:3d:4e:66:2c:24:16:a4:62:0b:3b:36:48:
                    aa:be:b1:7a:c6:6b:b9:ea:7b:4d:fb:6d:80:a8:2b:
                    68:0b:b6:49:c7:10:2b:f5:38:9a:cb:85:bc:8e:e0:
                    a0:a5:4a:ca:00:3f:78:61:ea:65:cb:75:fe:c8:a2:
                    83:d2:6d:5a:29:21:f7:3e:33:5c:8b:cc:6e:c2:f0:
                    71:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A6:BF:19:1D:07:63:3D:7C:0E:14:22:52:3C:E0:1F:7E:C2:53:A2
            X509v3 Authority Key Identifier:
                keyid:94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230342e302f32322d3232203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:d2:6e:22:d7:7c:f1:61:f7:6b:72:92:79:d0:2e:38:cc:ef:
         0d:81:13:3f:bd:46:5b:77:3d:23:2a:24:cb:be:3a:0b:71:98:
         1d:81:3d:48:bb:35:47:f6:8c:14:0f:3c:3c:c4:88:47:1e:1b:
         cf:7a:f2:db:09:db:65:e6:28:80:61:49:a8:96:f3:17:14:70:
         9f:f3:da:b7:59:94:62:56:0b:da:7e:fd:06:2a:82:b0:3c:38:
         01:76:55:35:22:1f:3d:01:08:d4:4f:31:83:44:bc:d8:14:a7:
         4c:c0:f5:28:e1:f1:22:14:48:62:89:25:89:5b:0b:33:c8:6d:
         41:da:71:cb:ed:02:c7:3d:1d:9f:33:5f:4d:15:18:6d:30:06:
         c0:d5:ec:9e:ec:3a:2f:25:e7:d2:69:97:c8:1f:51:32:35:62:
         c8:78:e9:35:78:78:e1:3c:56:c0:13:97:f1:b3:57:95:3a:50:
         56:11:06:ec:d7:2a:aa:78:c7:0f:dd:26:4e:9f:04:37:db:77:
         2d:43:a9:77:82:0c:3c:52:dd:bb:0c:19:a8:b4:bd:81:9b:5c:
         34:bc:d3:62:eb:97:b6:f1:f3:48:62:cb:5e:8e:22:d3:92:3e:
         87:7d:19:ea:d8:d7:3c:a7:52:0f:0c:88:34:9f:41:eb:17:5e:
         62:c5:c4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org