Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e31372e302f32342d3234203d3e203533323235.roa
File:                     3137372e3133372e31372e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          rzDdTjzo0wH+JBCDuiJB0p+0EAUW4Wd3OUvZuV+Fo7s=
Subject key identifier:   DF:AB:60:DF:1B:CC:E5:DD:B5:08:83:82:47:A5:BB:70:A1:3B:64:28
Certificate issuer:       /CN=56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9
Certificate serial:       0BFF6035566E5ADEE1CB13EADDA7D97E6032160E
Authority key identifier: 56:F1:FE:06:E3:B6:62:E9:E1:13:C0:2A:E1:0D:3E:A0:4A:72:F7:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e31372e302f32342d3234203d3e203533323235.roa
Signing time:             Tue 24 Oct 2023 17:34:51 +0000
ROA not before:           Tue 24 Oct 2023 17:29:51 +0000
ROA not after:            Tue 22 Oct 2024 17:34:51 +0000
asID:                     53225
IP address blocks:        177.137.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ff:60:35:56:6e:5a:de:e1:cb:13:ea:dd:a7:d9:7e:60:32:16:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9
        Validity
            Not Before: Oct 24 17:29:51 2023 GMT
            Not After : Oct 22 17:34:51 2024 GMT
        Subject: CN=DFAB60DF1BCCE5DDB508838247A5BB70A13B6428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:20:d6:2e:5e:57:96:77:15:93:f5:05:cc:
                    6f:cd:de:24:8a:e4:29:0e:2f:6c:bf:0e:63:d2:b1:
                    2f:d6:33:2b:c7:86:e7:e2:3f:16:7c:b8:48:da:7e:
                    b0:fc:4d:b8:bf:1e:84:27:b6:a3:f1:fc:be:3f:f7:
                    be:51:e4:ac:4f:49:46:02:77:1b:e3:72:e7:e4:55:
                    a2:f9:ce:48:9e:34:4e:f7:5d:11:ca:ef:0d:3b:52:
                    bf:1a:45:47:48:a2:f9:79:23:95:8c:a9:e1:e8:47:
                    35:9e:3f:91:74:6f:77:1d:1b:4d:a6:04:2f:e6:94:
                    f3:87:59:c7:29:5e:dd:0d:68:c2:a4:4d:24:9b:68:
                    62:f8:1b:66:91:83:16:78:ae:11:99:10:e8:e1:dd:
                    31:4e:8e:b2:e9:24:dc:78:b3:3b:64:7a:ab:90:2d:
                    74:9e:38:8d:13:d2:f4:ee:10:d4:7c:8f:11:f7:57:
                    e6:b1:c3:f6:14:81:70:18:11:23:9e:cd:a0:ff:3f:
                    7c:a3:aa:8e:c0:f7:f4:c7:ec:7c:5b:3c:96:27:64:
                    44:b3:83:ae:ba:ba:31:d7:1e:47:ee:75:c7:1b:73:
                    f7:a0:d4:0e:9f:a3:70:dc:cf:f5:aa:de:32:0e:27:
                    41:de:c2:57:62:ae:9b:14:0c:fa:29:e6:47:da:56:
                    d0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AB:60:DF:1B:CC:E5:DD:B5:08:83:82:47:A5:BB:70:A1:3B:64:28
            X509v3 Authority Key Identifier:
                keyid:56:F1:FE:06:E3:B6:62:E9:E1:13:C0:2A:E1:0D:3E:A0:4A:72:F7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e31372e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:8f:a5:3a:26:be:71:eb:9b:b3:6f:1b:bf:8c:c4:94:e5:e3:
         00:6d:ee:36:6e:3c:cd:06:af:bd:11:d7:e8:c9:7f:c3:c8:50:
         0f:cb:3c:b0:91:ae:9b:a2:0a:b9:48:71:76:36:75:64:10:69:
         44:f3:60:a5:2c:a5:75:c9:61:28:71:8d:be:78:16:94:5f:e9:
         83:81:7a:d2:b0:c6:02:4e:50:e9:92:eb:22:06:92:8c:32:9d:
         b4:dc:49:cf:2b:71:33:2a:5c:3e:26:bc:c8:2a:ce:6c:93:48:
         d5:2b:68:48:a4:7c:50:d4:ba:ea:bf:4b:b5:b2:2b:a6:0a:fc:
         f3:0b:16:cc:4f:9a:71:d5:30:f5:7b:18:5c:00:a5:45:62:3e:
         b1:ec:56:05:66:54:0c:76:72:9e:16:de:68:5e:d7:ab:02:73:
         be:84:a9:a0:ba:37:e8:a7:1d:ae:92:87:91:ed:60:69:22:c6:
         b8:07:e3:7c:13:57:5a:15:0e:e3:72:28:57:b1:ff:ec:24:ee:
         a5:9c:33:03:4e:c8:12:9c:5d:d5:ef:24:1f:c3:8e:86:d2:9d:
         bf:e9:82:8c:a6:21:71:38:99:e6:b9:76:7b:1f:9b:0f:94:a7:
         b8:b3:63:e1:a8:22:64:f2:b5:22:50:69:a2:b6:33:42:fb:4c:
         fc:3a:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org