Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e32392e302f32342d3234203d3e20323730353934.roa
File:                     3137372e33372e32392e302f32342d3234203d3e20323730353934.roa (raw, json)
Hash identifier:          Q81qeWmDZYImxFUgdvuWcuGroX0QtglrvLBhIoH4gDE=
Subject key identifier:   B9:DC:8A:3F:CC:18:B7:41:96:1C:6F:2E:B1:F9:80:8D:78:A1:34:55
Certificate issuer:       /CN=FBCE40180F6E820F31920824D82B285CF0E32992
Certificate serial:       6BE56DE2BBC23312FF0F8992991132BB0CECD30D
Authority key identifier: FB:CE:40:18:0F:6E:82:0F:31:92:08:24:D8:2B:28:5C:F0:E3:29:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBCE40180F6E820F31920824D82B285CF0E32992.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e32392e302f32342d3234203d3e20323730353934.roa
Signing time:             Wed 17 May 2023 14:29:46 +0000
ROA not before:           Wed 17 May 2023 14:24:46 +0000
ROA not after:            Wed 15 May 2024 14:29:46 +0000
asID:                     270594
IP address blocks:        177.37.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e5:6d:e2:bb:c2:33:12:ff:0f:89:92:99:11:32:bb:0c:ec:d3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBCE40180F6E820F31920824D82B285CF0E32992
        Validity
            Not Before: May 17 14:24:46 2023 GMT
            Not After : May 15 14:29:46 2024 GMT
        Subject: CN=B9DC8A3FCC18B741961C6F2EB1F9808D78A13455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:73:4f:7e:8d:0a:02:24:30:a4:d6:bc:71:
                    bf:7c:6a:3a:18:40:11:9a:de:b9:52:92:95:f5:2d:
                    21:1b:df:b3:64:da:13:76:02:5f:4a:a2:a5:3a:23:
                    f0:8f:ec:64:5c:31:9e:29:18:02:12:20:18:c5:d5:
                    34:56:33:0a:98:b9:ea:67:d9:33:ab:02:8d:2c:30:
                    b0:e0:a6:56:31:c7:3b:cd:5f:ae:a0:63:31:dd:ad:
                    51:85:ff:7c:b5:0f:b8:a3:50:6f:83:0c:50:c9:a2:
                    f4:01:0e:29:1c:be:c9:9c:8c:31:81:26:2c:82:a9:
                    27:88:f5:73:e4:2d:5e:46:86:88:a2:02:75:6b:5a:
                    7a:aa:f0:90:b4:51:00:aa:3c:69:c3:39:35:42:d7:
                    25:ad:b4:eb:53:c2:c2:8a:81:45:63:13:6f:34:c3:
                    1d:44:06:ff:1a:8e:73:fe:d2:15:b0:a3:4e:b6:4a:
                    8b:4a:2b:f2:ec:23:09:92:20:2e:16:c1:fc:93:bb:
                    6b:cc:7c:f1:ab:e0:9c:4d:12:10:1a:ac:8d:31:db:
                    d1:16:c4:15:38:0b:c9:97:34:80:02:59:3f:78:eb:
                    35:03:1e:ca:1a:7f:9f:89:0f:a9:d7:ee:e0:a9:42:
                    f6:09:ee:45:57:3a:b0:b7:d8:1c:06:32:69:70:38:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DC:8A:3F:CC:18:B7:41:96:1C:6F:2E:B1:F9:80:8D:78:A1:34:55
            X509v3 Authority Key Identifier:
                keyid:FB:CE:40:18:0F:6E:82:0F:31:92:08:24:D8:2B:28:5C:F0:E3:29:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/FBCE40180F6E820F31920824D82B285CF0E32992.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBCE40180F6E820F31920824D82B285CF0E32992.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/0/3137372e33372e32392e302f32342d3234203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:ee:2a:73:88:c3:30:45:10:bc:c5:eb:5a:41:9b:af:6f:ed:
         84:56:ee:c5:45:1f:9a:d5:64:9f:b1:d1:a5:40:67:b3:50:69:
         70:4f:87:cf:f8:86:8b:49:ca:d9:d0:41:70:5e:2b:70:6a:2c:
         93:59:19:bc:0e:61:ee:44:6e:28:ef:5c:91:5d:d9:94:0c:25:
         b8:8b:c3:06:55:ba:72:97:a6:76:15:5e:c5:f7:a4:02:bf:0d:
         f4:2c:50:fb:0d:11:c2:1f:25:5d:1f:03:1c:7b:0a:6e:ff:9e:
         34:ef:67:51:17:e8:9f:c9:8f:19:a5:6c:14:86:a2:75:07:b5:
         b4:3d:a3:0a:64:1a:86:e0:ca:14:5c:ba:65:85:e0:8a:94:e5:
         26:37:61:fd:be:e2:1a:fd:b4:19:f4:e3:13:bc:14:13:1e:c6:
         af:0a:33:7f:59:87:54:10:ff:a1:e3:3b:bd:f8:5f:90:6c:e5:
         24:f3:49:dc:ab:5f:82:5f:76:6d:8d:77:39:12:c3:39:41:f8:
         3e:ed:bf:5e:27:3a:db:56:1b:67:81:3f:40:d0:c7:1d:94:bc:
         f4:0c:88:39:54:86:23:42:30:f4:02:c5:bd:f8:91:63:30:a3:
         63:6f:0a:9f:ea:d2:12:f7:08:88:d5:97:cd:7a:82:d8:2f:99:
         b5:50:1b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org