Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/1/3230302e37372e3137362e302f32322d3232203d3e203631373832.roa
File:                     3230302e37372e3137362e302f32322d3232203d3e203631373832.roa (raw, json)
Hash identifier:          5orPTaOnOBMa2U8FTHldPwOShoiN6TQXclvn3Mkg4MQ=
Subject key identifier:   26:51:2D:68:6E:84:A7:3B:F5:BA:89:5E:39:D6:3A:AF:73:2C:12:1F
Certificate issuer:       /CN=06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC
Certificate serial:       49CFB4728AF2377906AF9AEE2D49BD208C4337B4
Authority key identifier: 06:FA:B8:BB:F4:88:AC:07:33:F5:B2:69:DB:8C:FD:CF:76:8A:45:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/1/3230302e37372e3137362e302f32322d3232203d3e203631373832.roa
Signing time:             Thu 04 Apr 2024 17:27:33 +0000
ROA not before:           Thu 04 Apr 2024 17:22:33 +0000
ROA not after:            Thu 03 Apr 2025 17:27:33 +0000
asID:                     61782
IP address blocks:        200.77.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cf:b4:72:8a:f2:37:79:06:af:9a:ee:2d:49:bd:20:8c:43:37:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC
        Validity
            Not Before: Apr  4 17:22:33 2024 GMT
            Not After : Apr  3 17:27:33 2025 GMT
        Subject: CN=26512D686E84A73BF5BA895E39D63AAF732C121F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:79:2d:19:69:40:29:7e:46:5b:f2:2c:b4:
                    7b:9f:23:97:ba:0f:4e:0f:93:9b:bf:34:aa:c9:15:
                    d7:d1:ef:0a:50:4a:62:ac:b7:74:7b:0a:71:8c:94:
                    93:d8:4e:0a:52:df:35:b8:0f:6b:51:26:93:31:8e:
                    6c:5f:3e:99:aa:d4:60:c2:ac:9f:7a:2a:f6:ed:ea:
                    f8:95:c1:af:6c:93:2a:de:af:d1:a4:d6:a8:6f:b6:
                    2a:70:c9:24:e4:70:ec:8e:50:4a:dc:e6:11:e0:e7:
                    a5:13:a1:6e:5b:fc:12:41:c6:3b:ff:a8:ae:d7:97:
                    f6:23:38:17:5b:06:42:50:c4:df:33:09:21:2b:e2:
                    5b:6c:ee:e2:6a:59:6a:ea:91:7e:dc:41:1e:a6:3f:
                    e1:11:0e:f7:71:58:1c:ed:e5:c9:6e:3a:41:2b:4f:
                    a1:f1:0a:38:6c:d8:0e:a1:c2:51:eb:1c:dc:56:69:
                    e4:10:69:03:51:fa:db:f6:15:73:46:5f:9b:3a:73:
                    c4:6b:6c:ae:76:46:96:e3:ee:cd:74:2c:81:b3:ae:
                    24:25:0d:93:69:df:04:02:1a:7e:80:bf:eb:71:f8:
                    1d:74:a5:d1:f8:62:7b:62:0e:d4:4e:3f:09:39:c6:
                    44:d1:c4:e9:c3:3a:87:27:40:82:1b:fe:a4:d6:9f:
                    dc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:51:2D:68:6E:84:A7:3B:F5:BA:89:5E:39:D6:3A:AF:73:2C:12:1F
            X509v3 Authority Key Identifier:
                keyid:06:FA:B8:BB:F4:88:AC:07:33:F5:B2:69:DB:8C:FD:CF:76:8A:45:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/1/06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/1/3230302e37372e3137362e302f32322d3232203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:63:c5:be:9e:c0:53:bf:e3:91:19:e7:f1:84:9a:76:89:58:
         53:5b:44:1a:10:4d:0c:b0:60:d6:35:6b:60:c7:92:d8:66:b3:
         f0:bc:61:3f:4c:72:94:06:6b:bb:f4:51:22:db:bc:86:f5:44:
         d1:d7:29:63:64:3b:67:7f:da:ba:26:d8:28:85:e2:08:21:9f:
         55:f5:6f:22:ed:f2:40:5a:76:80:7c:fa:19:2b:ba:26:2b:02:
         e3:60:dc:c8:c4:34:84:30:fc:3b:c2:af:c3:ca:1c:48:e2:1c:
         e3:43:57:82:e0:c6:b3:4a:24:a1:c0:ff:32:0c:07:2a:27:94:
         55:3e:6f:7b:23:de:f3:c7:a1:ad:25:23:46:f2:a0:8d:70:86:
         21:a0:5e:2f:a3:1b:b8:20:f3:4a:fd:44:44:d6:02:9a:19:56:
         84:ec:a0:1b:46:33:e9:83:3e:82:90:b6:f7:27:99:7c:f3:53:
         19:23:9b:82:22:43:4c:58:1f:43:b3:7b:42:0e:99:43:88:ee:
         7d:87:d7:4f:dc:38:57:73:fc:8c:6a:3e:d1:5b:a6:c1:96:6f:
         bc:cd:38:d1:7d:aa:37:29:27:7b:4a:5f:2b:c7:c8:5b:b9:56:
         90:33:d5:42:e4:b2:52:8e:63:34:0a:8b:d7:6a:f7:56:1e:95:
         79:95:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:31 2024 by rpki-client on console-ams.rpki-client.org