Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137372e39312e3132382e302f32322d3234203d3e20323633343431.roa
File:                     3137372e39312e3132382e302f32322d3234203d3e20323633343431.roa (raw, json)
Hash identifier:          NiBYE6ffjolscC85mhxLF+DGntFfZ/3a6VMcHad1H4g=
Subject key identifier:   63:CE:F3:A1:DD:33:5B:91:1F:68:0B:B2:A5:2A:B8:09:E8:6D:7C:12
Certificate issuer:       /CN=9AF759E568BE2FC7F28D74D12598B32A1F937C25
Certificate serial:       6D7832766C97FE63F3DAC6D1627651B803BDC38B
Authority key identifier: 9A:F7:59:E5:68:BE:2F:C7:F2:8D:74:D1:25:98:B3:2A:1F:93:7C:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137372e39312e3132382e302f32322d3234203d3e20323633343431.roa
Signing time:             Fri 02 Jun 2023 02:46:22 +0000
ROA not before:           Fri 02 Jun 2023 02:41:22 +0000
ROA not after:            Fri 31 May 2024 02:46:22 +0000
asID:                     263441
IP address blocks:        177.91.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:78:32:76:6c:97:fe:63:f3:da:c6:d1:62:76:51:b8:03:bd:c3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF759E568BE2FC7F28D74D12598B32A1F937C25
        Validity
            Not Before: Jun  2 02:41:22 2023 GMT
            Not After : May 31 02:46:22 2024 GMT
        Subject: CN=63CEF3A1DD335B911F680BB2A52AB809E86D7C12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:70:d0:b0:35:22:7e:cf:97:de:b3:28:e5:fc:
                    f6:3e:6c:13:0a:92:78:99:e9:a5:56:90:85:a9:a7:
                    db:16:64:7a:f0:f7:93:6a:49:d8:4a:e3:49:58:0e:
                    92:cf:ec:45:a6:26:74:d6:67:a9:3b:d5:c5:26:0c:
                    e4:7b:6b:f4:41:d6:a7:f1:ba:db:ec:0a:fb:c0:e4:
                    7d:14:8d:f4:c6:8c:86:92:7a:ab:25:fc:6f:12:2d:
                    99:70:57:23:c2:a2:91:3d:37:cf:31:20:66:5c:8a:
                    5f:8f:45:bb:e9:9e:0e:35:45:6a:5a:4d:ee:21:1e:
                    f5:d9:89:0b:3d:ac:1b:d2:67:9d:e5:af:5e:9f:72:
                    52:95:5a:a0:0f:7d:72:60:70:de:5e:6a:c8:ee:3a:
                    a2:af:ad:7b:4a:1b:43:5a:da:0a:cf:49:1a:bf:63:
                    70:e5:34:f7:ab:2d:2b:92:e0:de:0c:ae:b0:4c:dc:
                    8a:e4:9a:4c:ce:62:94:4c:3b:fa:54:01:93:9e:1b:
                    6c:f4:64:f5:b2:97:bf:a1:eb:11:89:3a:5a:16:2b:
                    de:49:0d:75:e9:b9:87:f4:4d:a7:c0:78:d4:6b:91:
                    ee:d1:32:42:ce:0f:46:91:1b:c9:c3:11:80:02:51:
                    f6:4b:1f:aa:93:b5:05:75:df:0a:ce:b4:99:6b:c1:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CE:F3:A1:DD:33:5B:91:1F:68:0B:B2:A5:2A:B8:09:E8:6D:7C:12
            X509v3 Authority Key Identifier:
                keyid:9A:F7:59:E5:68:BE:2F:C7:F2:8D:74:D1:25:98:B3:2A:1F:93:7C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AF759E568BE2FC7F28D74D12598B32A1F937C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/0/3137372e39312e3132382e302f32322d3234203d3e20323633343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:12:82:07:1b:04:79:b1:35:ef:e1:ea:f4:00:3a:89:ce:88:
         7e:43:19:8b:11:f4:c4:d1:ea:27:1a:11:a0:c5:32:2d:0a:ba:
         e3:fa:6f:f4:5e:63:89:af:b9:7d:22:24:ca:83:3b:00:26:4e:
         f7:8c:87:8e:fc:e4:2a:b9:eb:03:a1:22:f5:6a:2a:08:74:0d:
         60:d7:06:37:4a:b4:87:45:b1:26:39:ac:b6:ce:da:49:f3:f1:
         53:a7:c7:87:0b:fd:9b:9f:99:c9:6d:60:4b:90:10:d3:7c:45:
         3b:a1:57:30:43:fc:d6:5e:17:bc:d4:49:4d:3e:5f:3c:41:ad:
         67:0a:98:f4:ec:8c:b0:b3:59:42:39:0b:cb:2e:1b:b2:c6:b9:
         5b:bf:d7:c4:8a:83:66:3e:fd:11:5a:8a:a5:54:81:48:8f:c0:
         be:bb:96:c4:7e:b0:ed:83:ab:a8:14:68:a6:37:8e:f3:39:b2:
         69:56:56:68:a1:da:98:8e:10:82:f5:90:ec:06:87:c3:7c:54:
         3b:c6:0b:9d:98:7f:18:e5:e3:8f:3b:11:25:3b:d3:2c:49:d9:
         88:c4:1d:8f:0c:f0:5a:9b:a2:73:d2:a6:1c:34:25:23:e2:ae:
         c1:79:81:b4:f8:e9:79:32:54:05:f9:69:e3:c9:1d:f7:4d:c5:
         ee:db:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org