Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e32392e302f32342d3234203d3e20323633333834.roa
File:                     3137372e38372e32392e302f32342d3234203d3e20323633333834.roa (raw, json)
Hash identifier:          xdEkXuD/nqgJ2mnnme+1O7CyeZKcjXGZRZhYncZbjk8=
Subject key identifier:   57:4B:26:50:77:B2:6D:33:65:9E:08:F7:4A:E4:BD:3A:9A:B6:7A:A0
Certificate issuer:       /CN=42069E8E68759D7E92CA70711619EA4DC4E27721
Certificate serial:       38A3DB495F1B37FEF15F5320D349AD96B9468713
Authority key identifier: 42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e32392e302f32342d3234203d3e20323633333834.roa
Signing time:             Thu 23 Nov 2023 20:11:12 +0000
ROA not before:           Thu 23 Nov 2023 20:06:12 +0000
ROA not after:            Thu 21 Nov 2024 20:11:12 +0000
asID:                     263384
IP address blocks:        177.87.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a3:db:49:5f:1b:37:fe:f1:5f:53:20:d3:49:ad:96:b9:46:87:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Validity
            Not Before: Nov 23 20:06:12 2023 GMT
            Not After : Nov 21 20:11:12 2024 GMT
        Subject: CN=574B265077B26D33659E08F74AE4BD3A9AB67AA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:68:53:e7:7f:30:e0:24:21:27:49:93:de:
                    5c:cf:c6:06:62:69:a1:08:cb:c8:a9:7c:f2:19:a2:
                    4a:74:d0:89:71:84:2a:d0:88:78:6b:22:76:6b:1a:
                    76:44:31:d3:c8:c6:0c:57:62:c3:dd:fd:ff:84:a7:
                    3a:c4:dd:9b:48:c1:4b:b8:96:2c:1f:4e:5c:77:b7:
                    9a:04:4c:ed:20:90:3f:7d:a5:d8:b1:2c:49:03:b5:
                    99:93:8a:5d:22:ed:40:90:37:43:71:ad:dd:a0:45:
                    46:2a:2f:ac:38:96:5e:2b:20:1b:2f:b6:a8:5b:7a:
                    61:1b:fa:ed:c7:48:57:3c:c1:2d:98:d3:46:15:44:
                    11:1b:7f:f7:68:43:23:13:b3:43:4b:28:dc:1c:c4:
                    1b:83:01:3c:25:d0:75:41:4d:5f:d0:7b:64:af:39:
                    b4:9f:79:94:c2:d9:ff:e5:62:4f:c7:31:be:5f:41:
                    8c:36:1d:59:0d:c2:da:a4:7f:f7:6e:c5:bf:39:c2:
                    76:38:79:38:e0:74:a6:4e:4b:e2:5d:57:b9:32:57:
                    11:4e:3a:9e:2b:0d:6f:59:0c:72:12:ac:1d:98:7b:
                    68:27:b7:5c:7c:08:af:5b:54:3e:c9:b9:d9:e4:d0:
                    b1:e9:5d:7e:9a:eb:c9:3e:82:52:c8:a5:7c:4a:24:
                    24:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4B:26:50:77:B2:6D:33:65:9E:08:F7:4A:E4:BD:3A:9A:B6:7A:A0
            X509v3 Authority Key Identifier:
                keyid:42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e32392e302f32342d3234203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:c4:73:96:ea:27:ad:9f:06:01:e1:43:7a:02:d4:95:b4:3b:
         a4:d5:1b:79:48:76:58:27:ac:bb:65:a4:78:98:ca:86:f1:be:
         14:bf:75:af:c4:6d:92:51:14:08:8b:26:0b:69:db:88:bd:18:
         e8:ba:0a:e1:fe:3f:43:08:a5:68:a1:e7:04:96:cf:e5:ce:84:
         a3:c3:63:51:a2:06:6c:b5:bb:5f:9f:36:55:69:d7:70:19:ac:
         5b:3a:3b:b7:d4:1b:7d:52:86:e2:36:c0:53:f3:7b:90:ce:74:
         89:0a:1e:a2:f2:7c:cd:91:f0:ae:10:09:79:4f:80:1c:3d:cc:
         8b:3e:80:df:8e:50:94:b3:ea:92:93:ad:56:03:f5:1e:e2:f2:
         e9:cb:db:ab:b6:d3:42:5c:f9:7e:c3:17:49:97:8b:b9:fe:9d:
         77:ae:d1:6e:98:35:a9:f0:73:70:ea:a5:f7:84:eb:9a:b5:76:
         63:cc:28:9c:de:59:5d:71:26:67:46:e5:af:f8:52:30:a0:09:
         80:c3:1c:c9:00:cd:d1:a2:73:6d:55:b5:f2:bc:f4:00:fc:35:
         78:89:b6:84:30:e8:50:db:e4:e3:66:1b:16:b8:a8:96:3f:b1:
         c8:06:b3:fb:f7:cc:99:19:b7:6b:6b:f4:5d:a5:6c:11:d6:6b:
         7a:60:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org