Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137372e3130352e3132382e302f32302d3234203d3e203238363334.roa
File:                     3137372e3130352e3132382e302f32302d3234203d3e203238363334.roa (raw, json)
Hash identifier:          MwmacWIbFSOwoewHQKh6dFrKj5TV/soFXGltjm8LxeE=
Subject key identifier:   7E:F6:4D:29:BE:CE:BE:01:DA:52:1A:06:F0:7C:05:5B:A2:B2:90:7D
Certificate issuer:       /CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
Certificate serial:       6943798B694C4063530B4A388F189877A2CC101E
Authority key identifier: 2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137372e3130352e3132382e302f32302d3234203d3e203238363334.roa
Signing time:             Thu 09 Feb 2023 20:00:00 +0000
ROA not before:           Thu 09 Feb 2023 19:55:00 +0000
ROA not after:            Thu 08 Feb 2024 20:00:00 +0000
asID:                     28634
IP address blocks:        177.105.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:43:79:8b:69:4c:40:63:53:0b:4a:38:8f:18:98:77:a2:cc:10:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
        Validity
            Not Before: Feb  9 19:55:00 2023 GMT
            Not After : Feb  8 20:00:00 2024 GMT
        Subject: CN=7EF64D29BECEBE01DA521A06F07C055BA2B2907D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2c:b0:62:53:ca:41:c2:12:12:1c:5d:31:9d:
                    dd:96:47:40:ba:b1:67:f3:d8:30:6b:21:43:bc:ae:
                    d7:6e:b0:14:66:59:6e:1c:3d:e4:56:8e:47:e8:e0:
                    30:8f:36:15:90:96:3e:c0:9b:13:b3:b5:57:57:5b:
                    33:9a:c5:c5:97:f2:00:32:8a:66:dc:52:c1:43:5f:
                    25:31:85:ee:8d:6a:39:84:42:25:66:3a:00:75:f3:
                    9c:11:75:bd:b9:6d:4d:52:e9:41:9a:59:c8:99:c5:
                    bb:23:37:4a:63:28:f6:f1:81:e2:fc:bf:a7:4d:34:
                    c2:86:44:d0:a8:db:8b:c3:1f:53:26:11:fe:9c:53:
                    92:5e:25:05:fb:79:3b:91:27:eb:67:f0:af:61:69:
                    ff:22:08:9e:ad:2e:41:1d:5a:cb:f6:e2:e4:22:c1:
                    ab:5a:74:a1:04:4c:99:77:3f:64:85:70:61:51:ae:
                    24:08:62:59:74:37:b3:7e:b1:0b:48:79:ae:6f:25:
                    d8:9f:e4:57:6e:10:e3:ec:2f:fd:2c:fb:ad:ae:d1:
                    31:17:54:af:27:9a:4b:49:fb:cd:2a:3d:00:4e:97:
                    6b:54:79:32:da:d2:0b:78:94:ad:96:ed:9b:b0:69:
                    6d:13:55:7d:39:e1:c3:a1:84:d6:51:40:bc:58:36:
                    76:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F6:4D:29:BE:CE:BE:01:DA:52:1A:06:F0:7C:05:5B:A2:B2:90:7D
            X509v3 Authority Key Identifier:
                keyid:2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137372e3130352e3132382e302f32302d3234203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:0d:cc:94:0c:97:06:b7:71:2a:c3:77:5c:1f:eb:34:30:cf:
         b1:a9:cb:ec:d3:6b:2a:f9:b2:e9:9d:1a:f5:3e:a4:8b:7a:ed:
         25:5d:95:de:47:a4:67:cd:b6:dc:8e:1b:bf:a8:5c:96:a3:97:
         ef:0f:39:a1:e5:c0:ac:f4:1f:77:3e:61:06:5b:0f:88:60:c5:
         53:b9:67:b3:57:e4:bf:72:af:6d:f0:cf:a9:79:1b:91:e0:51:
         14:06:b8:ee:00:7d:6b:be:28:cb:40:ab:ac:ac:3b:8b:92:8e:
         ed:20:29:22:04:76:9a:0d:9c:b2:a0:b6:82:ef:5f:d1:cf:92:
         5a:ba:cf:58:15:bc:b5:de:2a:e5:6d:e0:df:6e:84:f7:ff:6f:
         67:09:22:2c:07:f2:27:b8:94:fe:73:d3:b2:23:cb:54:92:16:
         82:a5:29:90:e6:36:9c:15:12:d1:50:d0:37:64:77:71:47:d8:
         33:bc:fb:67:c2:bd:e5:4d:13:81:f3:60:ba:33:6d:0d:35:bf:
         55:aa:84:2b:17:73:c4:cb:22:71:c7:30:41:79:78:d0:b8:6e:
         00:c2:f9:51:cc:16:4a:b9:a4:97:27:a7:ba:90:98:65:e3:dd:
         ed:d9:bf:08:ef:1d:68:3f:af:90:23:d3:54:0f:64:76:4a:6d:
         ea:b2:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:39 2023 by rpki-client on console.sobornost.net