Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e33302e302f32332d3233203d3e20323633333834.roa
File:                     3137372e38372e33302e302f32332d3233203d3e20323633333834.roa (raw, json)
Hash identifier:          ce/dxy8Bcn6fcMyspM/N5gvlb07lFtFjzb3H5jsF/ks=
Subject key identifier:   7B:EA:F8:3E:7A:D6:74:81:28:B0:45:24:99:2F:8E:4B:21:89:4B:F4
Certificate issuer:       /CN=42069E8E68759D7E92CA70711619EA4DC4E27721
Certificate serial:       145138627A7B3552C39B87C654CB7590111E962B
Authority key identifier: 42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e33302e302f32332d3233203d3e20323633333834.roa
Signing time:             Thu 23 Nov 2023 20:11:12 +0000
ROA not before:           Thu 23 Nov 2023 20:06:12 +0000
ROA not after:            Thu 21 Nov 2024 20:11:12 +0000
asID:                     263384
IP address blocks:        177.87.30.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:51:38:62:7a:7b:35:52:c3:9b:87:c6:54:cb:75:90:11:1e:96:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Validity
            Not Before: Nov 23 20:06:12 2023 GMT
            Not After : Nov 21 20:11:12 2024 GMT
        Subject: CN=7BEAF83E7AD6748128B04524992F8E4B21894BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:0a:8d:5e:ab:b9:4f:3e:93:4a:f4:cf:be:
                    4c:82:0b:f6:14:7c:f0:5c:e8:44:2a:30:cd:ca:c6:
                    2f:32:18:f2:dd:0c:5f:65:0a:fe:14:1e:d5:ab:43:
                    c7:81:ed:11:fc:72:6c:9e:b6:a4:8a:20:46:19:78:
                    c6:ea:07:b7:f4:b1:92:f5:68:e2:2c:95:3c:90:06:
                    df:1b:f4:7f:dc:82:52:2f:e1:1d:5f:ba:80:9f:41:
                    ce:1c:a5:d5:a4:52:17:8f:bc:c9:d2:f0:4f:a6:13:
                    b1:b8:a8:40:51:dd:f1:21:e6:e5:59:54:b1:40:78:
                    8b:ae:94:85:6f:b2:20:af:8e:6e:db:e3:4e:e4:26:
                    c2:7f:de:fa:9a:4a:47:e4:58:93:0f:1d:6a:42:75:
                    49:1d:2f:0d:6b:da:23:ae:54:13:4b:69:e2:14:0a:
                    d6:77:9e:2c:68:ac:49:11:39:92:9a:ff:48:61:04:
                    8c:2f:68:74:2e:36:a7:50:da:8e:7e:7c:83:da:36:
                    37:85:91:78:35:ea:96:c1:22:16:78:d0:f4:2f:d9:
                    5c:93:1d:39:3a:c0:45:e7:99:96:ca:36:0b:6e:94:
                    f3:cb:d1:02:e7:9f:5e:82:8d:7a:48:42:14:da:68:
                    b2:1d:a3:8f:01:af:ff:83:d2:a7:43:b6:0a:85:71:
                    24:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EA:F8:3E:7A:D6:74:81:28:B0:45:24:99:2F:8E:4B:21:89:4B:F4
            X509v3 Authority Key Identifier:
                keyid:42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e33302e302f32332d3233203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:35:92:c9:2b:e9:52:a2:b1:4f:31:87:2a:61:82:2e:13:b0:
         86:62:14:3b:a3:4b:57:8b:5e:0b:8b:76:14:3e:82:5b:9b:ef:
         63:7b:cf:13:01:41:a8:51:30:6b:07:9c:d4:dc:38:1f:41:0e:
         ed:6e:32:52:23:54:22:6b:d7:0d:d8:a6:91:61:cc:6e:46:2f:
         57:76:ec:bb:69:c5:ba:35:ca:b4:4e:d8:ad:02:f8:48:40:2a:
         fd:87:56:b6:b4:6a:26:53:ed:7b:a0:7c:91:a7:1b:ff:1b:12:
         72:ae:e4:12:82:1b:4e:1e:d1:9e:8a:f8:54:d1:0e:24:5a:c2:
         22:00:d1:8a:b8:b7:51:bd:9d:30:b4:31:cd:94:30:49:4e:34:
         45:50:f2:a5:30:c7:00:80:e8:a6:a2:b6:8c:80:84:ce:c3:9d:
         0a:1c:b7:c0:9b:ee:ec:c3:83:c8:3a:62:7a:ef:80:df:07:2e:
         26:0a:92:12:81:05:62:f3:a4:cf:9e:3d:da:f9:e9:6d:ec:66:
         3b:e7:17:cf:e4:d5:a4:84:e4:b2:9c:04:6c:ce:37:ee:70:14:
         eb:ca:43:1a:0f:38:4b:0a:bc:6d:88:c1:58:c2:dd:68:62:1a:
         7d:3f:0a:41:0d:be:51:45:57:69:44:4f:80:f3:ad:71:d8:63:
         3e:96:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org