Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230342e302f32342d3234203d3e203532373830.roa
File:                     3137372e33392e3230342e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          vGwMggk+ZdIi1VZMN9ei6s8L4j85xEMZPeiA2OHDAeY=
Subject key identifier:   56:65:95:55:52:7A:4B:A6:82:32:D6:D5:71:45:A2:0B:11:8A:20:F1
Certificate issuer:       /CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
Certificate serial:       147B3A907E6CC2C4EB5BF1DA45ED49AB7B0EAA3E
Authority key identifier: 94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230342e302f32342d3234203d3e203532373830.roa
Signing time:             Wed 06 Mar 2024 18:02:10 +0000
ROA not before:           Wed 06 Mar 2024 17:57:10 +0000
ROA not after:            Wed 05 Mar 2025 18:02:10 +0000
asID:                     52780
IP address blocks:        177.39.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7b:3a:90:7e:6c:c2:c4:eb:5b:f1:da:45:ed:49:ab:7b:0e:aa:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
        Validity
            Not Before: Mar  6 17:57:10 2024 GMT
            Not After : Mar  5 18:02:10 2025 GMT
        Subject: CN=56659555527A4BA68232D6D57145A20B118A20F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:69:5d:be:8a:91:53:7a:f9:ae:81:4d:b6:
                    b0:47:54:06:c4:7e:70:1a:4e:b3:09:c8:bd:a0:06:
                    3f:fb:b1:6b:19:94:26:b1:6f:47:cb:d3:a3:db:69:
                    3d:cb:77:86:38:c6:61:39:c7:d6:c9:ad:4b:c8:c8:
                    04:d9:52:d8:35:73:34:b8:32:d8:65:b9:83:79:88:
                    1b:ee:f2:9e:94:c7:75:86:13:64:53:e2:39:97:1a:
                    c9:92:36:59:08:34:c2:48:d9:6b:a4:fe:fa:37:8a:
                    cb:05:4f:86:af:db:5d:e3:6e:e6:f4:96:7d:cc:17:
                    b9:3a:7d:72:5a:46:49:33:cb:48:11:5e:96:95:f8:
                    71:0f:7d:8e:c4:67:1d:83:d2:8b:7a:7b:f5:36:9a:
                    8d:aa:78:f3:f6:69:2b:45:5b:e6:c4:43:6b:cd:0a:
                    15:ee:25:63:f3:78:d7:f5:7f:6c:aa:fd:ea:5f:fe:
                    86:1f:83:be:f5:e8:8a:11:f1:58:bc:62:ec:0d:b5:
                    af:fc:47:dd:25:31:a7:5f:21:74:24:11:a5:45:f6:
                    f1:c6:72:27:4a:ab:3d:e7:32:f5:c3:09:a5:3f:e1:
                    ce:ae:7b:bb:5e:7c:eb:97:4f:44:a4:48:4c:3f:dd:
                    ef:d9:cd:27:d3:6b:90:6d:08:ed:4a:0f:fc:28:d8:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:65:95:55:52:7A:4B:A6:82:32:D6:D5:71:45:A2:0B:11:8A:20:F1
            X509v3 Authority Key Identifier:
                keyid:94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230342e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:79:3d:66:e1:70:1b:6f:07:35:4e:e4:6e:66:62:0b:4f:9f:
         e2:d0:d4:30:bc:66:a0:fb:f0:b4:7a:ea:d1:dc:21:f0:34:28:
         c2:89:77:b1:9f:0d:ed:43:48:57:44:68:99:6c:c5:89:6b:b8:
         2f:24:a4:3d:11:2d:87:31:ce:84:9c:19:ce:c9:ff:12:a7:02:
         f6:90:37:70:1d:3c:11:bb:3e:92:ab:a3:5f:79:a1:59:30:a0:
         fa:6c:68:46:81:d2:a6:b7:b4:bc:78:e9:09:9d:b3:eb:27:78:
         e7:d4:6d:4c:6b:f4:94:01:91:ce:82:f8:a5:83:da:05:56:32:
         d3:d6:32:1c:82:74:ab:bc:06:f8:25:07:39:76:a6:eb:a2:1f:
         0b:91:dc:78:7e:88:bd:90:e6:85:b4:96:ac:5a:7e:e5:bb:13:
         97:c3:99:ef:5a:1e:d9:e0:bb:fc:6e:e9:4f:dd:fb:90:43:7f:
         9d:a4:64:7b:53:0c:71:65:cf:ed:3b:8f:46:36:e6:32:13:8b:
         09:06:33:77:e4:0b:33:ce:69:0c:91:37:ea:ec:1e:36:71:5f:
         45:76:bc:51:d5:6b:e8:16:7d:de:86:f5:ad:53:78:e2:f7:b9:
         15:12:47:30:99:2a:2c:af:73:eb:34:50:e2:17:81:37:1f:fc:
         95:33:72:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org