Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/3137372e3132342e36342e302f32312d3234203d3e20323632333137.roa
File:                     3137372e3132342e36342e302f32312d3234203d3e20323632333137.roa (raw, json)
Hash identifier:          e6xdSfXsVOOo1A/8y/uirflYvEaxwGmlGgj1m/s/TN8=
Subject key identifier:   55:03:63:9A:71:94:E2:EE:09:71:11:F1:B8:61:F6:E0:D8:23:2E:A8
Certificate issuer:       /CN=DE8B1F98BD6CD33262608FF38C243CF7EC783B76
Certificate serial:       6CD65B653D9DFF11570A8764BB690FE7A80FAB25
Authority key identifier: DE:8B:1F:98:BD:6C:D3:32:62:60:8F:F3:8C:24:3C:F7:EC:78:3B:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8B1F98BD6CD33262608FF38C243CF7EC783B76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/3137372e3132342e36342e302f32312d3234203d3e20323632333137.roa
Signing time:             Tue 14 Nov 2023 12:57:34 +0000
ROA not before:           Tue 14 Nov 2023 12:52:34 +0000
ROA not after:            Tue 12 Nov 2024 12:57:34 +0000
asID:                     262317
IP address blocks:        177.124.64.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d6:5b:65:3d:9d:ff:11:57:0a:87:64:bb:69:0f:e7:a8:0f:ab:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8B1F98BD6CD33262608FF38C243CF7EC783B76
        Validity
            Not Before: Nov 14 12:52:34 2023 GMT
            Not After : Nov 12 12:57:34 2024 GMT
        Subject: CN=5503639A7194E2EE097111F1B861F6E0D8232EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:e9:36:02:0d:f1:66:80:2b:34:e3:6b:1b:
                    ba:65:8d:81:1e:21:a2:26:56:56:1d:77:e4:b6:ec:
                    8e:6d:31:3f:52:0e:42:d2:86:4b:97:d4:47:6c:d3:
                    b7:a4:fd:43:76:23:97:02:d0:28:61:d0:5b:1d:a1:
                    16:44:48:0a:7b:de:4b:84:db:93:9e:90:32:3b:72:
                    ec:ef:88:ef:42:d4:d6:c4:88:65:66:8b:e4:30:ac:
                    2f:de:0d:2b:1f:c5:c2:3f:00:05:e8:68:02:4f:cb:
                    2f:1e:04:1e:b4:14:ee:72:06:d4:03:53:e7:bc:ad:
                    e4:9b:52:de:9d:21:0d:76:fa:d7:73:1b:a4:94:5c:
                    38:2a:7b:86:5b:77:53:d6:61:1b:31:24:e6:6e:b0:
                    89:a9:3c:cb:bd:60:22:7c:0e:3c:e3:5a:38:8e:ba:
                    0a:8a:ab:11:7f:ee:cb:6e:b0:28:fb:31:5c:0a:50:
                    15:3c:73:8d:49:92:5f:80:f0:d8:e8:44:b3:d4:c7:
                    4d:c6:ad:3b:bc:8e:b7:be:8a:8a:28:e3:2d:f2:2a:
                    a4:30:b3:bc:f7:6a:fd:ec:b6:be:39:11:8f:29:e3:
                    1a:70:9d:fc:ad:09:a4:f2:20:1a:01:f2:73:22:47:
                    2d:70:f2:d9:b0:1b:1a:16:7f:7e:ba:08:36:9a:48:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:03:63:9A:71:94:E2:EE:09:71:11:F1:B8:61:F6:E0:D8:23:2E:A8
            X509v3 Authority Key Identifier:
                keyid:DE:8B:1F:98:BD:6C:D3:32:62:60:8F:F3:8C:24:3C:F7:EC:78:3B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/DE8B1F98BD6CD33262608FF38C243CF7EC783B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8B1F98BD6CD33262608FF38C243CF7EC783B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/0/3137372e3132342e36342e302f32312d3234203d3e20323632333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:43:f2:fc:60:ee:6d:97:a4:73:33:79:30:96:4f:ff:0c:83:
         38:96:75:4c:0c:0d:0f:36:73:03:82:eb:f8:24:56:42:24:38:
         56:a0:d0:82:db:82:e1:0b:7c:0a:9a:44:ec:37:85:ba:8c:f3:
         9c:18:34:a2:79:72:ee:d7:24:02:10:2d:df:2c:9e:f9:3b:51:
         7b:46:4a:39:3f:f5:16:ae:e8:a6:28:bc:e1:5d:83:93:ad:71:
         b8:ef:13:11:12:22:65:d0:3f:f3:36:cf:26:a7:be:4a:ad:2e:
         fa:cc:7d:e7:f6:fe:d6:d7:f3:14:54:b3:b3:58:be:a5:29:66:
         fd:fc:a7:04:40:a7:cc:98:0e:ef:0d:00:98:43:cb:e8:49:bc:
         33:e7:2f:77:67:3f:67:6c:82:63:a9:ce:6d:eb:86:02:61:d9:
         95:93:78:b8:b7:78:1b:6d:11:49:d7:09:60:04:01:07:ec:3a:
         a6:95:13:35:b9:df:41:4c:8a:16:34:4a:5c:68:90:36:59:53:
         75:40:47:10:64:34:65:d9:a9:cd:ab:c9:2f:31:ce:b7:69:66:
         06:bf:d7:b2:fa:08:fb:54:c5:63:4b:19:97:f3:6a:34:27:ef:
         f1:dd:f2:a2:5b:b8:b2:f2:cf:11:3a:c6:f9:79:2e:a7:dd:f2:
         0f:e9:ee:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org