Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e33302e302f32342d3234203d3e20323633333834.roa
File:                     3137372e38372e33302e302f32342d3234203d3e20323633333834.roa (raw, json)
Hash identifier:          BXQQdDvTiCcW6gpYnXX5XNvzcANz/RPHxMSVMf/Sarg=
Subject key identifier:   BB:FA:E1:5A:EF:ED:E4:0F:BA:63:FF:95:7E:C2:CC:D1:75:23:66:20
Certificate issuer:       /CN=42069E8E68759D7E92CA70711619EA4DC4E27721
Certificate serial:       1033AA51ABB8616A3D692FA7A57E9ACD3C601EC3
Authority key identifier: 42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e33302e302f32342d3234203d3e20323633333834.roa
Signing time:             Thu 23 Nov 2023 20:11:11 +0000
ROA not before:           Thu 23 Nov 2023 20:06:11 +0000
ROA not after:            Thu 21 Nov 2024 20:11:11 +0000
asID:                     263384
IP address blocks:        177.87.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:33:aa:51:ab:b8:61:6a:3d:69:2f:a7:a5:7e:9a:cd:3c:60:1e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Validity
            Not Before: Nov 23 20:06:11 2023 GMT
            Not After : Nov 21 20:11:11 2024 GMT
        Subject: CN=BBFAE15AEFEDE40FBA63FF957EC2CCD175236620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:07:eb:60:e8:bf:8c:79:33:a0:f2:d0:c0:
                    5a:2b:8f:ed:b3:6a:d4:2b:15:1c:d0:4e:c1:98:09:
                    cc:f6:d2:8e:a5:98:3c:86:13:d5:97:e0:f4:55:22:
                    77:7f:34:2a:10:52:52:21:3a:74:e8:f7:dc:82:b7:
                    1b:64:2c:31:41:74:c0:e5:28:62:6c:c1:f0:30:3e:
                    85:42:9f:cb:45:48:16:c2:64:1b:04:79:f9:42:a4:
                    97:27:81:09:e4:81:27:a9:82:30:75:af:88:93:b8:
                    f8:70:98:ac:6f:66:e0:6b:fb:a6:3b:36:71:f3:ea:
                    6e:71:2e:28:c5:23:79:05:b0:62:1a:a7:43:bc:88:
                    b9:bd:4d:2c:81:24:b4:7b:5d:f4:53:2b:2c:af:00:
                    18:ad:f5:7a:25:88:7e:a7:c2:7a:59:52:35:ee:19:
                    0b:5f:84:da:61:ac:7d:22:36:84:8d:cd:7e:a9:6e:
                    3a:8e:06:d8:de:38:00:78:51:10:78:18:45:73:9a:
                    38:39:6e:36:f0:4e:3a:f6:4a:d4:ff:93:f0:f2:51:
                    07:3e:48:e4:25:fe:7a:c7:8b:88:5c:b3:18:c2:a6:
                    f5:a9:c4:ff:8e:8b:ca:e4:8d:5a:fa:c7:05:79:d5:
                    59:e0:5c:d6:5a:c1:c1:0b:7e:0a:5e:75:f2:6e:2c:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FA:E1:5A:EF:ED:E4:0F:BA:63:FF:95:7E:C2:CC:D1:75:23:66:20
            X509v3 Authority Key Identifier:
                keyid:42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3137372e38372e33302e302f32342d3234203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:5b:29:2b:f5:87:1e:c2:a7:b8:f2:01:64:3e:e0:7e:b3:39:
         8e:e5:89:b9:95:02:76:57:79:14:26:e5:36:a8:db:cc:bb:50:
         42:c7:1c:9a:2e:ea:64:86:ee:1e:42:42:bb:e0:57:aa:66:6a:
         c0:bb:da:56:51:08:ea:fc:67:13:ea:f8:37:80:b9:cc:f5:06:
         94:d8:f5:c7:02:08:32:3a:8c:f7:c1:b4:dc:31:d9:27:78:9a:
         c1:df:3f:04:c3:78:21:f6:3c:6d:4e:e9:f6:4f:87:7a:77:a6:
         ff:ff:2f:fc:51:c9:cb:b7:75:02:d2:ea:b6:0d:34:70:bc:7d:
         50:23:35:11:79:36:2f:cf:68:02:c8:83:7a:5e:3f:d9:fe:0f:
         52:87:2a:61:77:e0:40:8b:c3:34:d6:73:97:2d:22:59:9f:34:
         81:ce:9a:71:ca:91:86:9e:5b:92:d5:bf:8f:a1:2e:7f:de:59:
         4b:c0:0a:01:e1:74:b1:fc:a2:6a:09:9e:f3:5f:c8:a0:48:e1:
         23:b6:75:2f:16:e0:95:e6:83:df:17:84:09:53:a7:51:99:8b:
         86:57:eb:ff:b1:fc:a6:43:c1:f4:d0:55:cb:89:8b:c7:2b:59:
         e5:f1:96:ab:19:b3:0b:a5:28:0a:b7:ba:54:27:a2:b9:c0:21:
         f0:6f:5f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org