Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e32382e302f32342d3234203d3e20323633333834.roa
File:                     3137372e38372e32382e302f32342d3234203d3e20323633333834.roa (raw, json)
Hash identifier:          2aUsSCbZZbTotyzF/k/S9SszlIvX9GMmh/TV0IUCF6A=
Subject key identifier:   18:DF:18:D3:1D:03:7E:61:B0:32:CC:97:98:DE:FA:26:08:97:B4:3D
Certificate issuer:       /CN=42069E8E68759D7E92CA70711619EA4DC4E27721
Certificate serial:       214763D14E4358CC25FFF836916728462A9FD315
Authority key identifier: 42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e32382e302f32342d3234203d3e20323633333834.roa
Signing time:             Thu 23 Nov 2023 20:11:12 +0000
ROA not before:           Thu 23 Nov 2023 20:06:12 +0000
ROA not after:            Thu 21 Nov 2024 20:11:12 +0000
asID:                     263384
IP address blocks:        177.87.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:47:63:d1:4e:43:58:cc:25:ff:f8:36:91:67:28:46:2a:9f:d3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Validity
            Not Before: Nov 23 20:06:12 2023 GMT
            Not After : Nov 21 20:11:12 2024 GMT
        Subject: CN=18DF18D31D037E61B032CC9798DEFA260897B43D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:d8:f9:b5:07:0f:a0:ac:ae:77:c4:b9:14:
                    3a:7c:bc:82:25:77:e8:09:5d:3f:83:0f:c3:26:a4:
                    32:7e:b9:23:13:ca:b6:61:2c:57:7c:ae:07:ff:be:
                    59:39:d0:b8:81:ad:95:cb:d8:aa:a4:d1:5b:50:9d:
                    8b:3c:fb:7e:78:e6:04:bc:c0:3f:da:7f:55:fa:23:
                    46:4a:99:a2:24:54:16:15:05:d3:30:d0:da:23:17:
                    1d:45:87:3d:69:00:a8:52:2d:66:33:52:25:2b:02:
                    cc:65:b8:ce:a3:83:5a:52:77:fd:a2:f9:19:22:eb:
                    62:05:f8:8a:ab:1a:03:0b:ea:5a:cb:eb:06:26:07:
                    07:de:97:62:96:d3:3e:94:ed:d4:a5:4b:9d:0e:de:
                    07:73:14:b2:94:c2:85:99:47:c0:a0:fe:37:60:fa:
                    a8:bc:af:76:d9:ea:c4:6d:a3:49:7f:80:5b:a9:aa:
                    53:ff:6b:d2:dc:f1:77:f5:dc:be:0e:c8:ce:dc:e4:
                    cb:41:bd:02:be:e7:3e:3a:b9:66:45:59:ba:78:ce:
                    7e:b5:da:a5:be:b6:55:dd:a9:7a:e1:78:f7:07:9e:
                    ab:b6:ee:88:31:11:e5:1c:32:9e:6d:c9:d7:9f:22:
                    74:b2:be:5f:04:c5:d4:87:51:f8:86:78:94:67:dc:
                    61:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DF:18:D3:1D:03:7E:61:B0:32:CC:97:98:DE:FA:26:08:97:B4:3D
            X509v3 Authority Key Identifier:
                keyid:42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e32382e302f32342d3234203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:14:b8:76:f3:cd:9f:07:0e:23:04:71:4f:52:df:5e:4a:f0:
         9b:e5:81:38:e6:03:1a:1f:23:90:7b:44:47:b0:0a:43:63:d2:
         23:ba:8d:c0:7a:71:94:ee:c0:7c:03:2f:41:30:87:a0:5d:fe:
         b8:8f:7b:0f:fe:f8:09:9a:2a:1f:33:1e:51:64:3a:41:33:ba:
         e4:b6:2a:f4:46:a8:a2:c8:28:01:10:31:61:ff:6e:42:a2:87:
         13:d0:dd:60:00:07:24:7a:55:4c:30:d3:c1:a2:31:07:c9:86:
         0d:91:c1:35:88:f2:e6:cb:85:db:c7:99:a7:0d:e5:72:d6:4e:
         9b:d8:7b:46:0d:c2:4a:2e:62:03:72:69:11:b9:ad:00:aa:40:
         d1:be:58:42:f8:03:f2:b7:c5:46:c9:1f:ad:7b:8c:80:7b:10:
         1f:53:75:6d:76:f2:cd:58:72:92:8d:6f:85:c6:ce:70:d0:25:
         77:21:30:6d:40:8b:4d:44:44:84:a6:08:90:d7:c5:77:dd:b4:
         53:c0:d1:04:14:e8:97:22:b6:70:a2:67:6d:40:30:25:59:0a:
         a8:4d:9f:27:4f:74:77:a1:6d:ac:13:c2:23:ed:9d:c7:60:8d:
         32:c4:8c:12:fe:f7:0c:61:fe:3c:c7:b3:ed:39:a6:a8:b6:39:
         e3:99:c0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org