Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133362e302f32342d3234203d3e20323731303830.roa
File:                     3137372e38362e3133362e302f32342d3234203d3e20323731303830.roa (raw, json)
Hash identifier:          XbsS0pH3Q9qOV2lLpyqIW5IfPHU04DqPmcZzaWfKSgE=
Subject key identifier:   1C:E0:AA:FB:1C:9E:4E:4C:1A:12:13:B3:18:12:36:3E:D9:91:E0:52
Certificate issuer:       /CN=FB5F10DC1979BB0F9EA6DEC44580D00CF370D233
Certificate serial:       4CC2589777CC2CDD672D2DB08BCDD540D9B506CE
Authority key identifier: FB:5F:10:DC:19:79:BB:0F:9E:A6:DE:C4:45:80:D0:0C:F3:70:D2:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB5F10DC1979BB0F9EA6DEC44580D00CF370D233.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133362e302f32342d3234203d3e20323731303830.roa
Signing time:             Tue 29 Nov 2022 16:50:53 +0000
ROA not before:           Tue 29 Nov 2022 16:45:53 +0000
ROA not after:            Tue 28 Nov 2023 16:50:53 +0000
asID:                     271080
IP address blocks:        177.86.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c2:58:97:77:cc:2c:dd:67:2d:2d:b0:8b:cd:d5:40:d9:b5:06:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB5F10DC1979BB0F9EA6DEC44580D00CF370D233
        Validity
            Not Before: Nov 29 16:45:53 2022 GMT
            Not After : Nov 28 16:50:53 2023 GMT
        Subject: CN=1CE0AAFB1C9E4E4C1A1213B31812363ED991E052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:49:fc:4b:06:5a:e7:5e:5b:13:27:f1:ff:
                    5c:14:a1:c1:51:e4:e1:de:9d:e5:25:df:42:18:78:
                    ff:e7:8d:4e:18:77:0f:93:d7:b8:b8:37:04:5a:9f:
                    92:d6:c5:c0:89:5c:e0:6d:ef:9c:47:86:9d:2a:26:
                    0e:cd:df:59:ff:5b:e7:b5:a5:7d:d6:82:72:14:a1:
                    a4:b4:9c:e6:2d:bc:16:19:3a:d7:5d:4d:80:76:a7:
                    e6:0b:d8:c2:cf:90:c1:28:2a:de:0f:a3:7a:00:f8:
                    56:34:29:ae:f2:ba:5c:1f:c1:5d:8d:9e:5e:f6:f8:
                    e6:49:88:50:a7:e7:d7:a0:d2:32:09:b2:4d:d6:75:
                    6b:ec:5d:a6:ab:9c:d0:74:b7:b7:cc:b7:77:18:44:
                    ee:d4:41:da:6b:12:7d:b8:12:7e:50:4b:19:60:50:
                    01:e2:f5:89:ba:06:a4:77:5a:0b:dc:e8:f0:2f:12:
                    e3:ec:4c:71:09:c7:16:86:6a:ee:c1:c8:28:43:09:
                    7c:bc:76:93:a3:1c:fc:a6:fc:f2:ea:9e:30:fd:a8:
                    40:50:fe:b3:0e:c5:60:9b:70:20:1f:9f:66:2a:b6:
                    4f:c2:11:aa:fb:4f:75:00:8b:49:0f:93:bd:cf:8a:
                    84:a6:4c:cb:21:92:fe:e1:88:e3:c7:8d:f7:17:fb:
                    68:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E0:AA:FB:1C:9E:4E:4C:1A:12:13:B3:18:12:36:3E:D9:91:E0:52
            X509v3 Authority Key Identifier:
                keyid:FB:5F:10:DC:19:79:BB:0F:9E:A6:DE:C4:45:80:D0:0C:F3:70:D2:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/FB5F10DC1979BB0F9EA6DEC44580D00CF370D233.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB5F10DC1979BB0F9EA6DEC44580D00CF370D233.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133362e302f32342d3234203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:b5:ca:86:b0:5c:e2:e2:c1:30:73:dd:bf:81:eb:f5:99:e0:
         cd:e1:c8:61:2f:ea:b3:ff:18:7a:1b:95:a0:02:07:d4:97:69:
         f3:cd:8c:8e:38:39:fa:24:c2:67:ac:09:ac:4d:3c:91:02:d6:
         c1:36:f3:ab:1d:41:e7:a9:9d:e7:bb:6d:24:fd:d9:9b:01:37:
         dc:d7:03:88:22:0e:3a:66:2e:ac:36:ba:34:2b:d3:2c:c1:7b:
         a8:18:b4:bf:ef:d2:7d:9e:51:60:b2:e3:9a:8f:14:27:80:2a:
         27:23:28:07:17:65:b0:b2:bc:55:4a:f6:f8:ad:c1:ac:b8:9a:
         04:02:95:9c:c6:f5:a5:df:76:b9:d1:69:1a:f4:71:99:77:22:
         47:ef:81:b8:77:21:74:26:f2:f0:c1:17:90:da:df:cd:f5:ad:
         3e:77:64:d4:26:fc:f6:4f:20:05:4a:38:6f:aa:f5:fe:00:5a:
         84:47:06:bb:13:8a:56:d4:17:3a:ad:9c:91:c8:e5:25:f6:22:
         34:37:c6:8f:7c:d7:07:e6:9d:28:c4:5c:6c:d0:ae:88:45:92:
         61:6a:3a:cd:af:18:fa:5b:d6:10:ac:40:62:02:7b:6d:17:65:
         b7:0f:45:c3:dc:f6:74:75:66:2b:66:99:48:3f:45:1f:ba:4b:
         66:02:bc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org