Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32302e302f32342d3234203d3e203533323235.roa
File:                     3137372e3133372e32302e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          VQsGHwjLZIff4KhHmpfrPPe9IWbLJtzu2Gyh+e3Yeho=
Subject key identifier:   9E:AA:91:8E:DA:62:EB:05:12:9D:BD:5D:05:C1:43:22:C6:D7:FE:CE
Certificate issuer:       /CN=56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9
Certificate serial:       15962851FA2637919350103AB64744105C9AC196
Authority key identifier: 56:F1:FE:06:E3:B6:62:E9:E1:13:C0:2A:E1:0D:3E:A0:4A:72:F7:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32302e302f32342d3234203d3e203533323235.roa
Signing time:             Fri 06 Oct 2023 19:30:06 +0000
ROA not before:           Fri 06 Oct 2023 19:25:06 +0000
ROA not after:            Fri 04 Oct 2024 19:30:06 +0000
asID:                     53225
IP address blocks:        177.137.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:96:28:51:fa:26:37:91:93:50:10:3a:b6:47:44:10:5c:9a:c1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9
        Validity
            Not Before: Oct  6 19:25:06 2023 GMT
            Not After : Oct  4 19:30:06 2024 GMT
        Subject: CN=9EAA918EDA62EB05129DBD5D05C14322C6D7FECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8f:91:c8:5c:8c:b7:55:15:4a:ad:59:75:d2:
                    57:29:9b:b8:cc:36:05:fc:5c:67:1b:1d:08:b6:3b:
                    a0:66:e9:e6:f3:52:ab:ee:4e:2c:5d:47:11:2f:c9:
                    6f:83:1d:c0:dd:09:b5:86:0d:b9:53:57:e4:ed:a0:
                    6d:bf:00:e2:36:b3:c0:59:d2:64:fc:db:b7:f6:8a:
                    a1:89:fd:59:38:5e:ee:45:c1:ad:9b:de:d8:cc:c1:
                    3d:21:dd:3d:fd:75:c9:1d:f2:e3:88:62:a7:45:c2:
                    59:89:a7:d4:b4:26:4a:86:be:8b:12:83:e5:4f:44:
                    60:34:13:61:08:16:83:17:0e:de:2f:7d:ce:a6:5e:
                    c9:54:ed:61:d9:ff:e7:4a:7c:c9:e8:d9:66:e8:d5:
                    d4:56:36:f1:e4:4d:b6:20:9e:56:26:e6:dd:25:a1:
                    7e:79:62:c0:fa:b2:51:7c:7a:d3:0d:1a:b5:ec:62:
                    6e:65:95:50:72:c2:7e:11:82:b6:8a:98:c3:15:eb:
                    eb:0a:57:dd:15:d3:51:b3:4a:8e:66:bd:fa:9b:bf:
                    35:23:17:07:1e:29:13:d3:e4:11:53:3c:6d:ad:16:
                    5b:71:cf:dc:42:83:be:ce:c1:d8:07:91:28:b4:af:
                    6e:16:b7:31:c9:76:2c:c6:d8:ae:68:0b:93:14:18:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AA:91:8E:DA:62:EB:05:12:9D:BD:5D:05:C1:43:22:C6:D7:FE:CE
            X509v3 Authority Key Identifier:
                keyid:56:F1:FE:06:E3:B6:62:E9:E1:13:C0:2A:E1:0D:3E:A0:4A:72:F7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32302e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:81:c2:fe:ad:96:ab:1d:21:73:c3:04:02:eb:af:ea:91:30:
         01:29:19:7a:f1:81:b4:16:01:ad:3e:ee:5f:0a:13:b4:80:db:
         25:aa:38:17:09:d5:83:5f:29:34:b9:2a:8b:06:d1:31:a4:08:
         86:52:38:c3:eb:43:95:15:ef:f1:c8:4a:8a:f7:3f:f0:6c:a3:
         c0:10:23:d4:16:05:e8:26:90:19:2f:70:31:4e:8c:37:98:30:
         68:fd:22:45:ea:33:8b:ae:12:d4:63:9b:2c:86:a6:6c:00:f4:
         86:29:4d:c3:79:9c:e9:85:0d:2c:94:ec:98:89:8a:32:d1:e0:
         50:77:76:8e:0a:28:78:eb:22:1d:2c:76:d4:2c:c8:fe:e8:d6:
         f5:b3:d8:4f:36:d0:4c:e1:c3:6c:b8:73:76:5a:0a:9f:4b:a7:
         cb:6a:ea:5f:6d:a3:0b:b2:ed:02:de:70:84:8b:cc:48:68:4e:
         dd:08:b9:12:9c:9f:dd:e5:eb:42:24:8b:bd:63:e2:e0:cb:56:
         2e:54:47:b3:c1:0e:b3:8d:e3:ba:ab:e3:03:6b:ee:37:78:50:
         78:6e:8e:c1:d2:2a:93:16:21:5b:a7:63:65:30:1c:8a:41:87:
         2a:55:98:f9:07:a4:ef:69:60:72:b8:6e:53:c7:c3:2d:a1:41:
         7e:4e:a1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org