Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32302e302f32322d3234203d3e203532363335.roa
File:                     3137372e3132352e32302e302f32322d3234203d3e203532363335.roa (raw, json)
Hash identifier:          Xn4qkxDWtSiq418O7b8PDyoSmFQWlLo6u8GmCiu0fn4=
Subject key identifier:   51:37:26:6A:55:24:81:71:B6:8C:A4:EF:C8:3A:45:18:85:23:29:38
Certificate issuer:       /CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Certificate serial:       0711BC0985EE9FD810EC1F1763BBC6B8CEDAA291
Authority key identifier: 63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32302e302f32322d3234203d3e203532363335.roa
Signing time:             Thu 21 Mar 2024 15:00:00 +0000
ROA not before:           Thu 21 Mar 2024 14:55:00 +0000
ROA not after:            Thu 20 Mar 2025 15:00:00 +0000
asID:                     52635
IP address blocks:        177.125.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:11:bc:09:85:ee:9f:d8:10:ec:1f:17:63:bb:c6:b8:ce:da:a2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
        Validity
            Not Before: Mar 21 14:55:00 2024 GMT
            Not After : Mar 20 15:00:00 2025 GMT
        Subject: CN=5137266A55248171B68CA4EFC83A451885232938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:06:bf:58:bc:d0:84:d3:28:01:0d:b2:f7:
                    27:5a:df:96:4a:91:d4:a2:b7:c2:51:94:85:d3:4c:
                    ce:92:1a:68:4f:0b:8c:ab:81:49:00:0d:11:6e:90:
                    91:22:83:cb:37:71:bf:16:de:24:82:75:6a:84:e8:
                    a7:fb:03:7e:b5:13:c9:4d:fd:51:46:fc:10:59:af:
                    ea:cd:d5:3b:cd:90:75:95:cf:74:47:3c:7e:1d:1a:
                    cb:f5:18:97:6a:f3:85:b3:67:8c:19:f9:ae:e3:98:
                    dd:23:fe:ce:b3:7f:aa:65:e0:4f:70:b4:88:b6:5e:
                    69:45:2a:7d:bf:1e:81:98:d9:ba:f9:23:7e:af:dd:
                    ca:4d:a7:35:97:a7:35:b6:bb:e6:b0:9b:b8:d1:dc:
                    06:f8:a4:15:22:5c:05:8b:5e:3e:93:97:be:fa:de:
                    10:f4:e8:73:9e:c2:b5:80:e9:f4:5f:67:b8:2c:25:
                    30:70:d9:92:da:e2:42:ce:95:a7:5e:b2:39:48:dd:
                    16:ff:cf:c8:47:98:77:ad:b6:c8:40:9f:30:bb:10:
                    fb:2a:7c:94:89:be:76:11:5c:c6:f8:8c:83:89:e1:
                    5c:76:99:21:c1:9e:58:48:a7:b1:ee:d1:b1:22:39:
                    12:3b:90:95:ac:71:34:91:fb:c3:75:b7:7c:bb:d7:
                    45:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:37:26:6A:55:24:81:71:B6:8C:A4:EF:C8:3A:45:18:85:23:29:38
            X509v3 Authority Key Identifier:
                keyid:63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32302e302f32322d3234203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:50:5a:bf:9f:ca:1e:04:97:e3:a8:c6:06:b7:0d:17:52:d9:
         ed:8d:cc:d9:0a:ab:92:32:7c:79:a3:cb:2a:cb:67:f6:0b:9b:
         c5:f5:b0:85:a9:df:0a:e0:f2:82:82:af:9a:c1:d6:4d:f1:f6:
         50:7e:3a:4d:ba:7e:96:c0:66:ff:e0:8f:a0:f6:22:cf:82:d2:
         b1:8b:fd:74:d9:bf:27:64:8a:2e:71:ac:af:f3:46:aa:09:10:
         c5:27:5c:93:95:9e:b8:92:61:a6:1b:80:c1:82:e5:86:cf:32:
         2b:bb:04:04:30:a8:a4:97:28:8a:97:61:32:70:f8:07:23:a6:
         92:ca:3d:20:ac:51:67:9b:d7:64:31:fb:89:98:af:ee:d5:4a:
         06:68:91:08:90:86:c3:34:2d:97:ae:0a:26:c7:97:b3:55:31:
         24:1a:6a:44:d4:65:26:6c:6c:1d:bf:83:82:e5:dc:13:eb:df:
         0f:38:89:2e:86:96:6a:aa:09:e9:20:0d:86:f7:3b:70:94:0c:
         26:4a:fb:91:92:56:b7:3f:87:86:34:de:e6:ab:1d:ec:04:7a:
         c9:d4:2b:0f:dc:ed:a5:35:22:6b:69:f4:d3:51:0f:63:d0:79:
         ed:b0:72:da:05:c1:17:f5:f7:69:28:56:0d:41:e9:ad:dc:e3:
         dc:b8:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org