Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39382e302f32332d3233203d3e20323632343931.roa
File:                     3137372e36362e39382e302f32332d3233203d3e20323632343931.roa (raw, json)
Hash identifier:          SsapKLDQ1skzls0g/UchpfQCa2Xprd7/IlDaYaEsLcc=
Subject key identifier:   B6:6A:3F:A4:7E:5D:04:39:91:92:D8:2C:50:CE:06:25:2A:27:4F:47
Certificate issuer:       /CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
Certificate serial:       5B83543E21E0AA21254A4C33B1B0C13616CABB87
Authority key identifier: FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39382e302f32332d3233203d3e20323632343931.roa
Signing time:             Sat 26 Nov 2022 02:46:01 +0000
ROA not before:           Sat 26 Nov 2022 02:41:01 +0000
ROA not after:            Sat 25 Nov 2023 02:46:01 +0000
asID:                     262491
IP address blocks:        177.66.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:83:54:3e:21:e0:aa:21:25:4a:4c:33:b1:b0:c1:36:16:ca:bb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC
        Validity
            Not Before: Nov 26 02:41:01 2022 GMT
            Not After : Nov 25 02:46:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:eb:a1:da:34:36:a6:7f:0c:07:e8:76:85:
                    96:1c:9d:58:a1:0c:ce:9e:21:b2:6b:58:6f:9e:4c:
                    cd:19:96:e2:13:cd:19:85:19:70:32:98:06:f8:d1:
                    cc:02:d4:ce:9c:0e:2b:a7:9f:93:fb:79:b0:bd:a7:
                    f3:83:39:70:ba:4f:4e:80:57:e8:57:60:f3:4f:03:
                    b7:e9:c0:31:a9:04:d9:ad:c4:99:cd:fd:85:93:1f:
                    03:70:1d:82:9e:93:82:af:03:ea:2e:13:15:9a:e5:
                    53:dc:9e:84:02:6c:ae:ac:a0:10:5c:7d:b9:f7:f8:
                    d1:3c:08:33:de:cb:0b:cb:08:03:44:ac:a7:b2:d1:
                    de:32:bc:81:17:b3:23:46:74:96:37:af:0e:0a:a7:
                    12:e8:fa:05:f8:ba:4e:e8:6f:1f:42:3e:73:5d:dd:
                    d2:e0:db:03:71:0d:47:20:2d:b2:94:90:cb:f5:32:
                    42:e5:45:a9:1f:c9:dd:89:6a:11:11:e7:f3:d2:e8:
                    d5:ae:f6:ab:54:ef:be:8e:cb:66:5d:d8:f2:13:2f:
                    85:04:2b:bd:ee:8b:51:18:6f:c5:d5:84:c0:c3:d0:
                    7a:ed:22:95:06:96:28:5c:76:7a:da:fa:1d:75:b3:
                    eb:30:10:f4:40:93:ef:c2:5b:3b:84:d6:36:72:c4:
                    04:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6A:3F:A4:7E:5D:04:39:91:92:D8:2C:50:CE:06:25:2A:27:4F:47
            X509v3 Authority Key Identifier:
                keyid:FE:2A:6E:1A:F0:84:7E:A1:A7:D6:77:E2:DA:09:12:A1:AB:F4:B9:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE2A6E1AF0847EA1A7D677E2DA0912A1ABF4B9AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3137372e36362e39382e302f32332d3233203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:cf:5d:a6:6e:28:f7:e9:f0:21:7d:bb:dd:f9:c9:a7:e0:d2:
         e8:28:dc:e0:11:da:d6:28:00:1c:a9:fc:13:f7:53:07:8c:45:
         0b:7a:5f:ff:fb:5b:a2:c6:30:51:28:84:01:ff:f4:a4:67:7a:
         e9:a5:bb:08:c6:00:dc:b8:0c:01:60:e4:94:17:ed:d5:42:8e:
         4f:e5:e6:89:26:8a:47:ac:e5:08:8d:f6:29:70:d5:35:39:74:
         75:c1:e6:7b:f6:37:58:11:d8:9f:21:93:27:a8:2b:71:3e:88:
         bf:91:75:6e:5d:5f:46:69:81:eb:07:6f:01:3c:9b:44:d0:b6:
         75:ed:39:d7:98:4e:33:96:10:58:51:5d:ca:b2:1e:63:11:39:
         2f:0f:5b:16:ee:fa:cb:7b:b3:78:6d:b5:98:17:81:b7:63:4e:
         06:cc:38:f4:fe:77:f2:98:fa:59:f3:23:0e:86:9f:18:54:18:
         36:c8:42:5c:cf:db:de:11:9c:a2:a7:54:da:9a:c9:9e:71:5f:
         58:48:b8:33:57:ea:65:46:54:17:ba:8a:f1:f5:1d:d8:4d:be:
         e2:2d:43:4f:a2:5e:23:d0:b5:bb:95:ce:2b:df:61:88:90:f0:
         f5:13:d8:3b:71:89:8e:4e:c3:6d:76:41:18:42:83:95:cd:8a:
         18:62:c0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org