Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32312d3234203d3e20323632353639.roa
File:                     3137372e37332e3131322e302f32312d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          8KwJgkHKEunfZmPMcUC7Jd3YeuMLnaxRczB27aK3qN8=
Subject key identifier:   45:39:CF:E5:0D:06:BC:60:56:7B:AC:B7:3F:8C:24:EB:48:56:2C:A1
Certificate issuer:       /CN=FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9
Certificate serial:       3980CA8F506B63FE1AE409C4757064ACA9252A2F
Authority key identifier: FA:B6:DE:FD:93:5A:1F:D0:91:49:B7:C7:A8:3F:F8:8F:51:D9:2A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32312d3234203d3e20323632353639.roa
Signing time:             Tue 30 Jan 2024 14:21:32 +0000
ROA not before:           Tue 30 Jan 2024 14:16:32 +0000
ROA not after:            Tue 28 Jan 2025 14:21:32 +0000
asID:                     262569
IP address blocks:        177.73.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:80:ca:8f:50:6b:63:fe:1a:e4:09:c4:75:70:64:ac:a9:25:2a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9
        Validity
            Not Before: Jan 30 14:16:32 2024 GMT
            Not After : Jan 28 14:21:32 2025 GMT
        Subject: CN=4539CFE50D06BC60567BACB73F8C24EB48562CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:bd:c6:bf:61:bc:57:5f:9b:fd:6a:f0:2d:
                    89:1d:31:03:77:eb:7a:2a:5a:13:ed:0a:c6:1c:26:
                    13:94:e6:93:2e:0f:4c:d4:ab:87:7c:10:b6:d7:6e:
                    98:d3:28:c8:61:87:3d:26:42:52:d8:de:cb:29:8a:
                    cb:e5:a8:58:dd:c5:91:28:96:27:06:58:0d:25:e0:
                    cd:df:b0:3b:10:b7:6c:d6:bd:b2:84:ef:49:17:5c:
                    e7:7f:45:9b:d0:6c:65:4f:88:14:dd:ae:94:51:c3:
                    13:70:89:2c:cc:6b:af:d1:c3:66:c4:22:51:83:c0:
                    f9:41:d3:99:66:c1:d8:1b:41:89:32:a9:8e:cf:ad:
                    4d:e2:08:14:fd:c2:14:0f:25:2d:27:01:1a:3d:59:
                    fe:de:56:68:15:92:b8:0f:c8:b0:46:16:a0:cd:d4:
                    83:ec:93:72:43:ec:d1:11:1e:88:50:b5:ac:e2:e3:
                    52:11:7e:14:2b:e7:85:d4:40:ea:33:bd:c6:02:55:
                    04:53:6f:14:60:7f:0c:29:7c:63:85:ff:37:ec:28:
                    92:0d:a9:48:3b:93:63:2d:85:1a:cd:ee:50:33:bc:
                    d1:9e:44:a8:59:dc:12:bc:7f:d8:26:01:5a:73:2f:
                    3e:67:e5:d7:03:4b:d5:9c:53:92:d8:08:e3:8a:54:
                    52:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:39:CF:E5:0D:06:BC:60:56:7B:AC:B7:3F:8C:24:EB:48:56:2C:A1
            X509v3 Authority Key Identifier:
                keyid:FA:B6:DE:FD:93:5A:1F:D0:91:49:B7:C7:A8:3F:F8:8F:51:D9:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAB6DEFD935A1FD09149B7C7A83FF88F51D92AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/3137372e37332e3131322e302f32312d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:23:90:48:de:da:ab:8e:5d:97:73:90:2b:12:55:00:60:d0:
         cf:62:57:18:93:ed:62:d7:45:c4:f6:ae:c8:c2:1f:3e:fb:26:
         e0:17:9e:28:32:f5:2f:86:b1:a0:3f:fd:4f:43:22:88:7f:68:
         b5:12:2e:02:a7:ad:3b:f8:bd:b7:56:f9:35:48:0d:e9:ed:eb:
         af:0b:6b:6e:ac:01:b3:f9:1a:14:0b:9c:5e:23:78:ca:0a:37:
         6c:c9:3b:5c:3f:7a:3c:c5:41:8f:0e:b1:63:f4:97:8b:83:00:
         e8:8e:0e:d5:fa:22:47:f1:ce:d4:9c:4a:e4:cf:4e:b1:24:dc:
         bb:43:0e:9c:d1:c7:e6:77:c1:7d:fe:50:b4:15:ec:b5:16:a3:
         8e:d3:45:d1:6b:71:67:62:51:bd:d2:a3:bc:eb:f3:aa:89:e3:
         ee:c7:a7:ad:53:b5:4b:52:9b:e1:65:1b:df:85:de:51:6d:6c:
         62:2b:3c:26:96:a9:b9:2b:98:29:92:ee:2a:c4:33:00:d8:2a:
         83:53:fc:cd:d8:5e:c9:40:1a:b7:75:9d:b2:40:27:93:bf:a0:
         42:ec:40:03:f5:bc:3a:72:26:e6:3d:fc:6d:1b:f0:0e:4e:5f:
         f6:8b:12:3e:eb:a3:da:af:b1:5a:35:c9:39:44:09:a6:c6:9c:
         a9:d6:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org