Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230362e302f32332d3234203d3e203532373830.roa
File:                     3137372e33392e3230362e302f32332d3234203d3e203532373830.roa (raw, json)
Hash identifier:          jkKrXcb7KSi47j+e/S5jGzunrvEGYKsH8Oq8Q72nyKk=
Subject key identifier:   08:DF:2B:9B:C7:97:B7:86:AB:0A:96:35:DF:A2:71:65:14:E0:1F:95
Certificate issuer:       /CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9
Certificate serial:       3A25EE68076CC3F6AF669594E105680071DC1614
Authority key identifier: D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230362e302f32332d3234203d3e203532373830.roa
Signing time:             Tue 05 Dec 2023 14:44:32 +0000
ROA not before:           Tue 05 Dec 2023 14:39:32 +0000
ROA not after:            Tue 03 Dec 2024 14:44:32 +0000
asID:                     52780
IP address blocks:        177.39.206.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:25:ee:68:07:6c:c3:f6:af:66:95:94:e1:05:68:00:71:dc:16:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9
        Validity
            Not Before: Dec  5 14:39:32 2023 GMT
            Not After : Dec  3 14:44:32 2024 GMT
        Subject: CN=08DF2B9BC797B786AB0A9635DFA2716514E01F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:54:83:d4:91:fb:cc:e3:fb:39:c4:b9:6e:2f:
                    2b:85:b6:3e:d5:e7:4b:80:7d:02:72:a4:09:05:23:
                    01:68:24:db:cf:9a:3c:eb:fa:3e:bd:25:d1:f2:ad:
                    36:c1:79:fc:0e:84:ac:80:32:a4:f0:9c:7c:71:97:
                    66:41:ca:9f:55:c9:6a:b9:3d:62:d2:b4:06:42:39:
                    cf:32:67:bd:c5:b1:96:53:a7:71:7a:50:a0:3d:96:
                    79:e3:9e:e2:6f:59:46:8c:b8:03:07:f0:59:5a:4e:
                    38:46:93:a4:c1:7d:b5:49:e4:d0:1c:93:32:39:7c:
                    e9:09:73:30:22:cc:37:07:e1:31:81:2d:ea:68:5a:
                    82:74:07:d3:aa:9d:31:ca:36:2e:d8:a5:09:83:67:
                    57:4b:7b:9c:9a:8e:b7:bb:eb:06:a2:c6:04:6a:54:
                    6c:da:46:6c:3f:f0:d9:09:0f:32:14:c0:3b:a4:1a:
                    eb:b3:76:70:2a:93:bc:3e:d5:20:72:3b:44:21:09:
                    52:6d:e1:5c:4c:1b:fd:75:99:fa:c2:12:7c:74:99:
                    f3:23:1b:f7:d0:93:b2:e6:3e:a2:30:0d:c6:27:6b:
                    51:7b:41:be:15:36:21:b9:61:50:c9:bb:f4:45:cd:
                    c3:11:33:80:ae:8f:96:bf:28:8d:78:e5:2a:cb:c1:
                    72:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DF:2B:9B:C7:97:B7:86:AB:0A:96:35:DF:A2:71:65:14:E0:1F:95
            X509v3 Authority Key Identifier:
                keyid:D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/3137372e33392e3230362e302f32332d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:19:9a:e0:ea:b5:cf:6d:e3:d5:71:ad:23:f0:6c:ad:92:1b:
         3b:8f:75:93:f4:4b:00:c3:7f:ad:47:2e:1b:85:de:42:36:c0:
         97:0c:d0:f5:69:01:89:ff:6e:c2:d4:e5:5d:cb:77:55:f0:e1:
         bb:66:25:d2:ba:7b:f4:25:04:ac:dd:a3:47:6a:6c:56:3c:8a:
         87:95:e8:83:73:6a:54:cb:a3:fd:4f:16:2e:0b:3c:7f:be:74:
         8e:71:9b:a5:73:04:2e:e7:1e:5b:08:b6:cc:f1:86:8f:b1:f4:
         e8:6d:ce:b5:3d:ac:40:36:85:f8:d5:de:55:13:4d:2e:b0:23:
         15:aa:1d:c3:19:1a:32:ae:bd:79:fd:23:c6:9c:36:e3:93:c9:
         7e:c3:a2:46:b4:ec:cf:e4:97:5a:37:70:26:25:d2:14:cf:a5:
         d0:54:6b:70:06:d4:8d:19:01:ee:56:73:ef:54:6a:b4:1f:32:
         72:7b:4c:f3:d1:6f:ab:0a:cd:b9:e9:7b:2b:e3:a6:41:d6:c4:
         fd:44:e8:c6:f4:bb:8e:72:da:69:66:34:9e:07:1e:69:68:eb:
         92:d1:db:98:0c:1b:b9:13:fb:cc:c8:f4:f0:5c:1d:43:0a:b4:
         b0:b1:da:9d:63:1d:e3:93:79:0d:f2:48:7b:d0:5a:d1:3b:c7:
         cf:d2:0d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org