Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/1/3230302e37372e3137382e302f32332d3233203d3e203631373832.roa
File:                     3230302e37372e3137382e302f32332d3233203d3e203631373832.roa (raw, json)
Hash identifier:          FWggNrOuyH1q3GqP5e7nRs5LDuWni2VLDOpvQivTnk0=
Subject key identifier:   3B:F1:FA:15:13:AB:73:C6:B0:0C:FD:12:5A:03:E4:C2:0E:F2:E1:D5
Certificate issuer:       /CN=06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC
Certificate serial:       371E796209232F8145DE42185451BD558BF79CC4
Authority key identifier: 06:FA:B8:BB:F4:88:AC:07:33:F5:B2:69:DB:8C:FD:CF:76:8A:45:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/1/3230302e37372e3137382e302f32332d3233203d3e203631373832.roa
Signing time:             Thu 04 Apr 2024 17:27:33 +0000
ROA not before:           Thu 04 Apr 2024 17:22:33 +0000
ROA not after:            Thu 03 Apr 2025 17:27:33 +0000
asID:                     61782
IP address blocks:        200.77.178.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1e:79:62:09:23:2f:81:45:de:42:18:54:51:bd:55:8b:f7:9c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC
        Validity
            Not Before: Apr  4 17:22:33 2024 GMT
            Not After : Apr  3 17:27:33 2025 GMT
        Subject: CN=3BF1FA1513AB73C6B00CFD125A03E4C20EF2E1D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:73:a1:0f:b1:75:68:3f:2d:49:45:73:b1:4c:
                    15:9f:ad:d8:15:b1:c2:f1:5d:cc:db:b8:bc:ca:91:
                    f1:e4:af:c1:40:b0:ff:52:24:1c:f5:77:dc:ab:aa:
                    c2:39:d3:bf:e0:cb:18:52:cc:98:10:03:a3:45:ab:
                    fd:39:51:a9:02:85:e3:a3:4b:1d:e0:25:be:c8:bf:
                    a7:23:16:cd:e1:9a:b7:d3:b4:af:4b:58:df:70:4d:
                    2e:88:ac:b9:7f:f6:83:f1:ec:c0:cb:7d:cf:58:29:
                    2d:41:10:57:ff:b5:06:4d:bb:85:11:48:58:6f:00:
                    aa:49:6d:e3:36:f5:f5:0c:f2:73:b7:60:c0:9a:69:
                    49:20:d5:67:50:5e:6d:fd:a0:61:4f:2b:4f:51:3b:
                    21:15:12:1f:60:f7:da:fe:02:f4:e2:5b:0f:33:38:
                    7a:df:93:21:6d:b2:84:05:e5:1e:bf:11:69:b9:60:
                    d9:5b:b3:47:01:6a:e0:7b:52:8c:f1:11:0c:f9:a6:
                    be:38:a5:09:de:f0:7d:b0:de:b3:b8:42:43:e7:23:
                    c4:26:fb:4a:04:09:26:4f:11:6b:03:bc:38:c3:28:
                    db:f4:f3:46:cd:5e:27:7d:d2:b4:e3:fb:a1:d8:1f:
                    57:b3:96:16:7f:73:3b:a9:b1:73:8e:88:11:ce:1d:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F1:FA:15:13:AB:73:C6:B0:0C:FD:12:5A:03:E4:C2:0E:F2:E1:D5
            X509v3 Authority Key Identifier:
                keyid:06:FA:B8:BB:F4:88:AC:07:33:F5:B2:69:DB:8C:FD:CF:76:8A:45:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/1/06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06FAB8BBF488AC0733F5B269DB8CFDCF768A45BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/1/3230302e37372e3137382e302f32332d3233203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:9b:32:00:28:8e:a5:57:6f:57:ee:c3:90:f2:7a:11:39:3f:
         55:18:c9:8d:7f:d2:de:d6:ca:eb:5a:43:86:2b:42:c7:bf:ea:
         5a:02:fc:21:6e:55:54:df:7f:3e:14:e6:e9:2d:a6:e8:55:ce:
         b3:fa:37:21:29:88:43:36:cc:99:f9:0c:8c:56:55:bf:40:b3:
         a1:16:30:73:5e:3b:57:71:13:83:a2:0c:8a:ab:c1:01:94:1e:
         e6:ba:5a:69:21:a5:ab:78:b0:56:22:a4:69:3a:8d:0f:43:0c:
         0c:c8:1c:14:82:f3:12:d7:13:25:6d:2a:07:b7:1b:f8:30:c0:
         2e:6c:f2:b7:e4:82:08:b3:22:0f:05:3a:4e:ba:5e:91:0c:b7:
         46:6c:78:a5:51:c0:bc:73:91:b2:54:c9:f4:a6:c1:ff:8e:4f:
         39:ed:b0:5e:a3:d6:70:91:9a:c5:59:de:f1:12:98:ab:de:d6:
         72:bf:81:b8:e4:71:6f:2b:76:8c:98:96:ac:3e:fa:6d:92:fa:
         78:1b:65:de:ff:55:9c:17:d1:91:89:46:00:76:03:a0:5a:da:
         5e:30:d9:57:7c:37:87:74:0d:8b:a8:21:73:53:5d:b3:e1:58:
         5d:22:2a:e2:41:38:e5:fa:4b:06:49:37:e3:4d:b1:18:a8:b3:
         93:3c:a8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org