Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230352e302f32342d3234203d3e203532373830.roa
File:                     3137372e33392e3230352e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          g3wxzbqUU2B3JZUbyQPhRdfZ9lDRuR3dWAmseQPWQcw=
Subject key identifier:   7B:3A:1C:E6:D5:4C:5D:E7:11:16:5D:B3:5B:34:78:A5:05:BF:BE:2E
Certificate issuer:       /CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
Certificate serial:       2EA34A2606566E30203649CFADE80EE0C09DC5AE
Authority key identifier: 94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230352e302f32342d3234203d3e203532373830.roa
Signing time:             Wed 06 Mar 2024 18:02:12 +0000
ROA not before:           Wed 06 Mar 2024 17:57:12 +0000
ROA not after:            Wed 05 Mar 2025 18:02:12 +0000
asID:                     52780
IP address blocks:        177.39.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a3:4a:26:06:56:6e:30:20:36:49:cf:ad:e8:0e:e0:c0:9d:c5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
        Validity
            Not Before: Mar  6 17:57:12 2024 GMT
            Not After : Mar  5 18:02:12 2025 GMT
        Subject: CN=7B3A1CE6D54C5DE711165DB35B3478A505BFBE2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:4a:e0:4d:ef:55:18:e4:e8:95:01:23:f9:
                    4d:29:29:3b:68:de:8a:fc:8c:1d:ae:2b:27:02:9c:
                    98:6d:94:99:61:d1:29:4b:68:b1:0a:d5:61:be:90:
                    c8:6a:3c:ea:b1:89:82:cd:4c:ef:a8:94:57:38:a1:
                    df:71:f8:77:99:5e:2a:15:bd:1a:a4:e7:4d:3d:ff:
                    4d:f9:df:6c:a7:31:1d:72:98:97:30:7a:d9:0e:ff:
                    d6:d6:1c:ce:3f:3e:4b:b5:9a:d2:12:7f:6e:84:50:
                    4d:7f:90:a7:84:fa:f8:e9:d0:d1:3f:68:0a:8c:03:
                    ae:77:8a:79:a0:32:a1:a2:b5:b3:26:29:06:82:8f:
                    4a:b2:8d:00:5c:7d:62:7f:97:22:00:62:9e:24:03:
                    ca:40:09:47:0d:48:0a:0d:7c:88:de:f0:d7:4b:4d:
                    b2:1e:8b:2a:6a:fa:83:b3:b8:50:55:69:4d:73:11:
                    a6:d6:fe:7a:fe:ae:af:da:e0:cf:59:b0:49:94:5b:
                    a8:65:dd:7e:e7:73:31:58:1f:9f:c1:29:6b:43:f8:
                    59:2a:0b:3e:e4:15:a5:c3:13:d4:14:ca:7e:ee:aa:
                    91:e3:08:ed:f8:d1:04:f6:69:3b:52:23:25:2c:d0:
                    6c:95:71:60:54:83:5d:0f:47:06:1b:70:bc:13:9f:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3A:1C:E6:D5:4C:5D:E7:11:16:5D:B3:5B:34:78:A5:05:BF:BE:2E
            X509v3 Authority Key Identifier:
                keyid:94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230352e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:bd:9d:c3:03:3c:2f:c6:c4:b1:b6:fa:f2:d4:00:c8:dd:08:
         29:48:e1:08:37:5e:7c:97:c8:5e:7c:8a:04:40:31:79:30:e2:
         40:d6:5d:32:56:63:ce:00:75:7c:76:b5:84:25:b5:a9:a5:aa:
         90:5e:d9:c7:c0:03:d5:6a:f6:7e:d4:22:ae:97:28:a1:39:ee:
         fd:92:f9:19:ed:08:38:16:6d:de:7a:d5:e0:f1:df:bb:e4:d7:
         50:1d:39:7b:84:40:e4:8e:a5:e3:59:9d:43:01:87:51:ec:e7:
         5f:fb:f4:7d:41:d0:24:e1:bb:cd:3f:9a:69:de:a4:d5:0b:e3:
         5f:78:47:1d:c7:f5:72:44:2e:b4:2a:20:20:cc:1e:b8:92:67:
         14:37:c0:77:6c:e0:f4:34:ad:4a:83:80:12:fc:d9:c1:3f:56:
         6d:98:b5:19:f2:86:eb:72:e7:6d:d6:2f:7b:be:c9:72:66:0c:
         f2:ac:03:51:4a:64:2f:6c:39:2b:48:1b:86:fc:e0:55:eb:52:
         14:16:e4:ba:9d:35:13:96:b8:3d:13:71:9d:35:a0:6c:f5:98:
         9f:5d:a3:55:7a:40:68:d4:d3:20:04:3e:cb:af:18:ec:30:53:
         83:4b:f6:c2:d1:a5:6e:cb:64:6a:bf:24:a8:09:f3:20:b4:ba:
         08:29:7c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org