Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e32382e302f32332d3233203d3e20323730353934.roa
File:                     3137372e33372e32382e302f32332d3233203d3e20323730353934.roa (raw, json)
Hash identifier:          tJfiljg3amsOSvtvcDtffsmHFs/npNJAw78uh4guqVo=
Subject key identifier:   B0:F2:FA:70:1A:CC:9B:58:2E:73:6F:3C:18:74:A2:44:79:BB:FF:7D
Certificate issuer:       /CN=FBCE40180F6E820F31920824D82B285CF0E32992
Certificate serial:       213B7E8E5A54E6F4938D43AAE8C34BEDAD00FA29
Authority key identifier: FB:CE:40:18:0F:6E:82:0F:31:92:08:24:D8:2B:28:5C:F0:E3:29:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBCE40180F6E820F31920824D82B285CF0E32992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e32382e302f32332d3233203d3e20323730353934.roa
Signing time:             Wed 17 May 2023 14:29:05 +0000
ROA not before:           Wed 17 May 2023 14:24:05 +0000
ROA not after:            Wed 15 May 2024 14:29:05 +0000
asID:                     270594
IP address blocks:        177.37.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3b:7e:8e:5a:54:e6:f4:93:8d:43:aa:e8:c3:4b:ed:ad:00:fa:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBCE40180F6E820F31920824D82B285CF0E32992
        Validity
            Not Before: May 17 14:24:05 2023 GMT
            Not After : May 15 14:29:05 2024 GMT
        Subject: CN=B0F2FA701ACC9B582E736F3C1874A24479BBFF7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:d7:e1:2d:59:4e:ff:04:b4:e1:22:66:b4:
                    77:96:8f:49:96:26:07:df:41:e8:37:e8:7a:b7:18:
                    3b:a7:5f:c9:3c:37:73:a8:15:b8:cf:7f:4d:29:e5:
                    73:bb:cb:72:e7:d8:9a:f2:9b:a1:21:f9:ca:0d:15:
                    e2:30:62:8f:46:4c:e7:45:df:7f:8d:d1:1c:61:67:
                    3a:06:f8:fe:8d:b7:b7:50:d6:34:8d:93:0e:20:a0:
                    0f:f9:f1:5d:0e:d0:95:f9:64:09:ab:28:b5:26:70:
                    3b:b2:50:fc:99:80:05:25:17:24:91:82:d5:a3:1a:
                    66:19:fd:76:ed:dd:af:b0:8d:9a:2f:76:f9:6b:ed:
                    2a:65:11:47:5d:d4:6e:f0:5d:70:9b:04:b2:d2:66:
                    a7:55:ae:2f:b6:3f:ed:31:c6:49:e8:c2:f8:80:5e:
                    62:cc:24:dd:a5:91:c6:2e:36:97:8e:b1:6a:88:29:
                    ae:40:53:49:f6:e4:3c:d8:d1:cf:5c:91:dc:eb:1d:
                    cd:66:9a:58:d9:3c:b3:a1:8a:7d:46:b3:e2:f7:95:
                    da:71:99:2d:e0:c8:f5:78:5e:d5:59:f8:ce:e0:72:
                    e9:af:ba:24:d6:d7:b0:b0:aa:79:99:8b:13:93:31:
                    4f:93:be:16:19:c4:bc:cf:e9:ad:74:2e:ff:e1:b1:
                    c5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:FA:70:1A:CC:9B:58:2E:73:6F:3C:18:74:A2:44:79:BB:FF:7D
            X509v3 Authority Key Identifier:
                keyid:FB:CE:40:18:0F:6E:82:0F:31:92:08:24:D8:2B:28:5C:F0:E3:29:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/FBCE40180F6E820F31920824D82B285CF0E32992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBCE40180F6E820F31920824D82B285CF0E32992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e32382e302f32332d3233203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:9e:ad:f2:bd:15:d1:5a:01:4d:33:15:44:7c:89:82:db:
         e1:84:78:e5:d3:52:63:a3:b7:63:d0:ee:57:9a:e0:7b:40:ad:
         3c:72:d4:37:89:be:2e:b1:75:de:b8:60:3c:36:6f:c5:75:1d:
         68:81:e1:62:d5:64:9b:46:bb:89:fc:d4:2c:5a:4c:04:4c:ba:
         54:dd:a7:8a:20:51:0a:ec:a1:46:b8:16:ca:4e:28:ef:b4:db:
         9f:80:97:85:76:32:ab:6a:75:70:bf:6d:ca:9e:2e:11:fe:85:
         d8:01:40:2d:2e:31:de:bb:8e:bc:a6:6e:fa:9c:ba:41:7d:da:
         6d:63:3e:7e:a0:ae:98:53:0c:41:b1:9b:46:c9:f6:52:fb:f6:
         e2:8f:ea:e0:84:c4:4e:04:a5:ff:1e:ae:6d:af:1b:af:da:64:
         0a:fd:6f:ed:6a:91:3f:a8:20:12:cb:c6:c1:96:c2:8c:54:2a:
         2d:9f:28:fa:92:62:5f:98:13:94:c5:a5:18:3e:73:b6:0f:fb:
         79:ea:6e:c6:09:9e:4d:b4:5c:27:42:1e:af:c3:d6:4a:45:56:
         f7:aa:02:c6:c1:4b:a5:8e:c4:d2:ca:db:7c:89:85:e9:24:b3:
         2e:a0:7d:7e:5f:d9:74:23:56:4e:e5:24:5f:5f:26:4d:99:8d:
         cd:9b:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org