Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/0/3137372e3132382e37322e302f32312d3234203d3e203532363433.roa
File:                     3137372e3132382e37322e302f32312d3234203d3e203532363433.roa (raw, json)
Hash identifier:          cR7uxjkbbIw1pGhFDjmHGgTF9sy+sUyDtcK0uTz+Mmk=
Subject key identifier:   EF:AA:64:8D:68:15:58:78:57:FA:AD:5E:D3:E9:85:86:37:B7:87:CE
Certificate issuer:       /CN=FC7E691CC9744A29EC6542D60A2C4A90891FEDEE
Certificate serial:       5660682C920FB6BF225F8F701C76C3861D709791
Authority key identifier: FC:7E:69:1C:C9:74:4A:29:EC:65:42:D6:0A:2C:4A:90:89:1F:ED:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC7E691CC9744A29EC6542D60A2C4A90891FEDEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/0/3137372e3132382e37322e302f32312d3234203d3e203532363433.roa
Signing time:             Thu 04 Jan 2024 18:01:19 +0000
ROA not before:           Thu 04 Jan 2024 17:56:19 +0000
ROA not after:            Thu 02 Jan 2025 18:01:19 +0000
asID:                     52643
IP address blocks:        177.128.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:60:68:2c:92:0f:b6:bf:22:5f:8f:70:1c:76:c3:86:1d:70:97:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7E691CC9744A29EC6542D60A2C4A90891FEDEE
        Validity
            Not Before: Jan  4 17:56:19 2024 GMT
            Not After : Jan  2 18:01:19 2025 GMT
        Subject: CN=EFAA648D6815587857FAAD5ED3E9858637B787CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:25:99:bb:e5:72:44:ad:46:95:7a:d0:17:
                    a0:13:16:c8:b4:9f:82:25:65:c8:01:f3:fd:73:57:
                    19:ec:75:15:cf:4d:0d:f9:1c:b3:ef:fe:d9:76:90:
                    a6:20:07:66:d5:72:02:a9:a3:37:d1:20:85:68:e5:
                    5f:8b:01:48:f7:0d:c3:be:61:48:23:54:f3:c9:b8:
                    59:8f:bf:5a:0c:58:4e:cb:d6:e4:fc:5a:5a:72:cb:
                    d8:79:88:a6:4b:3c:eb:47:56:66:48:92:ad:2e:4f:
                    d2:02:51:d1:68:ac:7e:d8:0f:be:ee:13:04:c0:c5:
                    75:2c:6c:f3:e2:17:78:ac:64:d7:51:b8:c4:99:ca:
                    93:8f:17:ce:44:d6:93:88:02:4a:39:ff:31:84:5d:
                    d2:39:06:93:b5:cd:1a:9f:35:19:8a:55:5d:4e:5a:
                    3f:0f:99:f8:30:2e:6d:3f:60:3f:88:84:45:21:89:
                    77:5a:7b:27:cc:51:7a:d3:c2:f6:cf:30:25:ad:f7:
                    4c:63:8e:24:ea:6b:b7:a2:30:55:a0:c3:de:2a:b7:
                    0b:c4:95:95:63:b7:26:b1:70:ca:55:0c:6c:cf:34:
                    b6:05:ce:25:23:f3:1e:65:a2:c5:64:ee:55:6a:75:
                    86:3a:38:29:b8:2c:5a:a7:cd:7c:e8:c0:d3:7b:d1:
                    e6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AA:64:8D:68:15:58:78:57:FA:AD:5E:D3:E9:85:86:37:B7:87:CE
            X509v3 Authority Key Identifier:
                keyid:FC:7E:69:1C:C9:74:4A:29:EC:65:42:D6:0A:2C:4A:90:89:1F:ED:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/0/FC7E691CC9744A29EC6542D60A2C4A90891FEDEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC7E691CC9744A29EC6542D60A2C4A90891FEDEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FgSG66b3NdBdw1RKrKsRkgHUTkfoXD1V7DNo8WWsE2wm/0/3137372e3132382e37322e302f32312d3234203d3e203532363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:7c:b0:0f:0b:c1:61:79:32:e4:76:54:dd:0f:20:e9:db:1d:
         29:61:4a:68:ef:81:f6:37:4e:4d:da:40:63:39:d8:ff:87:72:
         a8:0e:07:bc:56:73:61:f5:ca:a7:6f:62:26:29:89:9f:e4:c1:
         e9:b4:c0:24:be:d9:8a:e8:ba:e6:5c:96:e0:76:77:05:fd:28:
         10:82:f8:a6:8d:9b:57:77:64:ef:e0:d9:1a:53:15:75:61:76:
         28:9b:3c:ee:81:05:aa:c5:f6:31:39:9d:4c:b5:fc:11:7b:1c:
         6a:87:b7:e0:9e:ef:c2:f8:c6:d1:51:79:48:21:9f:ae:69:c5:
         a0:01:c5:cd:26:f2:3c:47:de:b8:f9:c3:9e:2a:94:ff:1c:bc:
         37:ed:45:9f:3f:01:a3:a2:b2:66:99:17:2c:f3:22:bc:3c:34:
         52:52:12:e6:90:db:0d:2a:84:0f:fd:37:77:0c:41:95:9a:e7:
         d3:03:f4:ca:13:0b:69:c3:2e:4b:32:53:61:60:8a:92:11:ce:
         b4:01:63:e7:95:8a:e1:d3:05:7e:e6:a6:4d:82:93:4b:03:11:
         4c:51:41:00:f1:80:53:34:39:d5:8b:e7:c4:aa:b6:70:df:1a:
         a0:b3:e7:65:c5:ac:fb:ae:a4:4e:2c:91:8b:19:6d:df:60:1d:
         c3:24:e6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org