Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/1/3230302e37372e3137362e302f32332d3233203d3e203631373832.roa
File:                     3230302e37372e3137362e302f32332d3233203d3e203631373832.roa (raw, json)
Hash identifier:          4mnv64H+PhDpXsAQYrWJAfIYObKiU42sAfaPfRhQ3Zg=
Subject key identifier:   B2:70:F8:2A:43:A4:B9:4D:34:5C:3C:F5:CC:8D:18:EC:5B:6A:83:B6
Certificate issuer:       /CN=06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC
Certificate serial:       6DD7442D27959C508643B5D0D8B0564FC9226D74
Authority key identifier: 06:FA:B8:BB:F4:88:AC:07:33:F5:B2:69:DB:8C:FD:CF:76:8A:45:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/1/3230302e37372e3137362e302f32332d3233203d3e203631373832.roa
Signing time:             Thu 04 Apr 2024 17:27:33 +0000
ROA not before:           Thu 04 Apr 2024 17:22:33 +0000
ROA not after:            Thu 03 Apr 2025 17:27:33 +0000
asID:                     61782
IP address blocks:        200.77.176.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d7:44:2d:27:95:9c:50:86:43:b5:d0:d8:b0:56:4f:c9:22:6d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC
        Validity
            Not Before: Apr  4 17:22:33 2024 GMT
            Not After : Apr  3 17:27:33 2025 GMT
        Subject: CN=B270F82A43A4B94D345C3CF5CC8D18EC5B6A83B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:4d:ff:72:d5:ce:bf:09:e6:5e:5f:3a:74:
                    e5:28:24:b7:06:fc:f6:57:17:52:f4:80:bf:62:e2:
                    72:fd:ed:2d:97:48:35:4c:25:5f:14:41:8f:82:33:
                    e1:be:ea:48:15:e6:4b:2d:1b:be:4c:9d:be:57:a1:
                    c0:53:59:03:73:70:64:69:76:b4:d8:62:e7:54:e9:
                    92:42:1b:07:3e:d3:1d:69:2f:da:e5:a9:b9:c5:cf:
                    b4:1a:77:9a:77:a2:c7:13:d1:80:f5:be:7b:07:a0:
                    15:18:cb:fd:0a:fe:c7:32:dc:96:f9:d3:e5:71:9e:
                    11:f9:4c:7a:57:ec:fc:54:a6:3d:a9:1c:14:1c:cd:
                    01:de:bd:38:aa:22:cd:c6:ed:eb:02:35:51:8e:5a:
                    ac:b8:a8:17:e4:a4:53:c1:dc:79:e7:3a:8b:05:32:
                    33:a3:48:05:79:7f:fb:fa:91:32:45:2c:8d:9a:5c:
                    54:14:6e:06:3e:cc:92:9e:ea:3a:48:c2:f2:05:70:
                    9e:0d:80:3f:37:ab:72:ec:f2:64:65:37:5b:88:84:
                    13:83:44:e4:f7:73:1f:48:0b:63:d7:2f:7b:86:f3:
                    66:7c:87:ce:38:dd:48:f5:f1:6c:49:a7:31:c6:d5:
                    e9:82:b1:23:84:0b:28:4c:7b:e5:e0:40:32:37:e7:
                    40:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:70:F8:2A:43:A4:B9:4D:34:5C:3C:F5:CC:8D:18:EC:5B:6A:83:B6
            X509v3 Authority Key Identifier:
                keyid:06:FA:B8:BB:F4:88:AC:07:33:F5:B2:69:DB:8C:FD:CF:76:8A:45:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/1/06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/1/3230302e37372e3137362e302f32332d3233203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:a2:08:e2:81:4c:18:aa:78:e3:b0:e9:6f:45:b1:0f:97:3e:
         32:4f:b9:d5:db:2e:e2:49:f7:dd:b8:5e:ca:d8:c7:f9:e5:5c:
         51:21:a8:37:77:19:c3:d5:3b:63:24:41:12:26:85:b0:93:0f:
         48:68:7f:78:52:f8:3d:ce:bb:58:d4:51:e0:27:6d:5c:85:54:
         44:f3:6c:54:62:02:47:92:93:a2:62:69:36:51:5f:24:fe:68:
         d7:26:76:96:b7:3b:9d:b4:15:8e:b6:35:0a:15:91:5b:bf:13:
         f3:65:ef:31:99:a0:96:68:c2:1e:61:1a:c0:e4:01:fd:19:5c:
         fd:96:12:af:bf:95:5a:5f:fc:09:e7:71:4b:50:75:9e:a6:ad:
         84:ca:7a:d6:e1:dc:fd:c8:02:0f:fc:c6:fa:e6:4f:8b:1e:27:
         53:c5:0a:22:54:81:d3:9c:f5:74:94:30:83:ab:d3:c9:2a:26:
         06:85:82:da:55:8c:89:ba:18:cb:96:c8:07:05:73:41:16:24:
         62:64:d4:3f:55:5f:f0:38:ca:28:1c:fb:f7:6b:67:a9:fc:74:
         f2:b6:05:24:46:96:b4:8b:3b:ba:f9:fa:5e:dd:5f:2c:a1:e9:
         f1:00:df:87:c0:4d:e9:51:ec:bf:4a:29:78:f6:f2:e0:cb:ed:
         6d:d2:1b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org