Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32312e302f32342d3234203d3e203533323235.roa
File:                     3137372e3133372e32312e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          LN7PKb7E4B8llsK5gQ4fb49wcdR7iSqthhzsLKmbHwo=
Subject key identifier:   39:DB:DC:44:34:3A:AF:CF:64:F5:03:85:04:90:A5:2F:40:D1:50:1C
Certificate issuer:       /CN=56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9
Certificate serial:       2D5AAF143C9523530DCA6018748741C9FC04B30D
Authority key identifier: 56:F1:FE:06:E3:B6:62:E9:E1:13:C0:2A:E1:0D:3E:A0:4A:72:F7:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32312e302f32342d3234203d3e203533323235.roa
Signing time:             Fri 06 Oct 2023 19:30:32 +0000
ROA not before:           Fri 06 Oct 2023 19:25:32 +0000
ROA not after:            Fri 04 Oct 2024 19:30:32 +0000
asID:                     53225
IP address blocks:        177.137.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5a:af:14:3c:95:23:53:0d:ca:60:18:74:87:41:c9:fc:04:b3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9
        Validity
            Not Before: Oct  6 19:25:32 2023 GMT
            Not After : Oct  4 19:30:32 2024 GMT
        Subject: CN=39DBDC44343AAFCF64F503850490A52F40D1501C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:5e:0c:44:b9:43:a4:f4:b0:87:62:e9:07:
                    4d:4f:cf:f8:cb:43:ec:d3:ea:47:86:e6:1a:84:ff:
                    d9:37:93:9d:1e:1f:45:d4:77:e2:cf:cb:d4:6e:f9:
                    81:55:1e:ea:bb:54:27:27:8b:59:97:b3:3e:80:2f:
                    10:9c:5b:45:1f:cf:05:d7:de:16:87:21:c5:2d:50:
                    7a:39:44:0f:32:de:f7:41:01:a3:05:4b:e8:62:bd:
                    2c:09:4f:48:f8:dd:23:b6:08:c4:e5:5f:33:c4:62:
                    06:ab:d4:12:8d:cd:da:1a:5f:52:49:8a:c0:29:49:
                    d6:e1:95:d5:66:0a:99:fb:81:2d:0b:cd:25:b8:87:
                    7b:13:94:bd:e6:55:88:c8:be:d2:13:66:75:20:c9:
                    90:62:c0:06:3b:03:4e:73:8c:75:57:df:e2:81:fe:
                    87:f0:0a:47:b5:86:2c:db:81:f5:32:4b:21:f8:c9:
                    41:93:fa:05:fe:ca:42:4a:33:1c:d0:c1:da:dc:2e:
                    f7:10:26:90:fd:b5:f1:b9:ba:b3:95:c2:19:12:7d:
                    03:f5:38:6c:8e:d4:69:9a:df:83:37:a6:05:84:06:
                    1f:03:69:5c:0d:f7:a4:be:16:1b:44:3a:af:18:04:
                    ad:b2:af:37:cc:7b:8a:9e:ea:47:bd:01:89:27:0c:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DB:DC:44:34:3A:AF:CF:64:F5:03:85:04:90:A5:2F:40:D1:50:1C
            X509v3 Authority Key Identifier:
                keyid:56:F1:FE:06:E3:B6:62:E9:E1:13:C0:2A:E1:0D:3E:A0:4A:72:F7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32312e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:97:f7:27:98:e5:e0:9b:c2:38:80:b1:87:f7:c2:24:93:36:
         95:31:5c:28:e5:f2:82:c7:c5:f9:40:a4:a9:9d:73:60:98:6a:
         f8:62:38:b1:32:bd:a6:f7:b3:5b:b9:a5:29:5a:cc:73:eb:63:
         4c:b3:dd:cf:0a:cb:db:53:96:e3:55:3b:6e:3c:29:a0:d0:55:
         ac:b9:4e:5f:59:49:0e:8c:fd:61:1a:d0:26:d8:b8:1a:b2:72:
         dc:0e:24:74:88:8f:79:81:a5:f6:1a:db:b6:66:a5:f9:0b:d3:
         ee:db:1f:fb:d9:b5:bd:60:bb:82:df:f3:da:93:2c:39:dd:89:
         d1:73:81:16:8c:f7:a9:fe:a9:9f:81:1b:ae:04:16:c7:59:55:
         9d:d4:b5:f4:78:3e:92:7f:fd:07:6e:b3:5b:de:68:b9:7e:cf:
         d2:27:d0:05:ca:33:0a:43:e6:46:8a:ed:a4:6a:6a:ce:1d:8e:
         11:dc:f6:c0:0b:96:5c:bd:5b:0c:7e:69:49:ac:5f:47:10:90:
         d5:f4:69:6b:8a:b8:4e:81:3a:8c:b8:b7:7c:14:c0:29:5b:87:
         b3:d4:c9:2f:c4:73:6d:85:5f:91:5c:70:17:fb:30:d8:a4:50:
         04:4b:5b:26:5e:a9:f7:d9:d9:af:91:e0:7a:d4:ac:4d:52:c4:
         3e:12:10:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org