Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa
File:                     3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa (raw, json)
Hash identifier:          mCE98CrkfnXLK9mAx+NcqY2pDajwXbWElnoX9M7PopM=
Subject key identifier:   FB:C4:09:9D:CA:00:07:3C:F9:D3:BB:55:AE:9F:2C:40:5E:00:9E:66
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       17A8128E1FDA4EA5A8C1D39C11589E02ACF0C8E9
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa
Signing time:             Tue 02 Apr 2024 23:24:29 +0000
ROA not before:           Tue 02 Apr 2024 23:19:29 +0000
ROA not after:            Tue 01 Apr 2025 23:24:29 +0000
asID:                     262354
IP address blocks:        177.125.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a8:12:8e:1f:da:4e:a5:a8:c1:d3:9c:11:58:9e:02:ac:f0:c8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Apr  2 23:19:29 2024 GMT
            Not After : Apr  1 23:24:29 2025 GMT
        Subject: CN=FBC4099DCA00073CF9D3BB55AE9F2C405E009E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:65:cd:74:e2:67:8a:0d:64:e5:5c:32:27:
                    57:77:7d:a5:6e:73:05:30:cc:1b:af:a5:ac:4e:14:
                    ea:05:cd:e4:8a:e2:a0:ae:1f:d0:00:9e:f6:55:95:
                    b7:c7:37:9d:3b:64:d7:c1:cc:34:0a:9e:36:1b:c3:
                    da:70:62:30:1f:96:67:b2:9d:92:b3:90:a4:e8:2d:
                    2c:bf:23:32:b4:a0:d7:d9:52:85:f7:c4:ea:fe:d2:
                    89:46:99:a9:dc:9f:5d:ba:51:fa:10:5c:ff:fe:97:
                    7f:e3:6b:bc:ac:aa:85:ee:9d:4d:5b:0d:5a:76:af:
                    8f:ba:62:7a:43:25:8c:df:ca:83:ef:8f:a5:83:1d:
                    c5:24:70:b1:89:14:48:8f:97:74:9b:90:9d:4f:c2:
                    51:99:c9:2a:c3:be:6e:57:0c:00:25:fb:90:25:62:
                    8d:86:02:a8:3b:4f:b3:36:f5:d7:85:13:30:74:67:
                    06:8e:0a:2e:14:fb:41:60:0f:5c:fa:b3:9f:9a:c4:
                    08:c5:30:e4:1f:84:2b:63:69:b7:6b:a2:65:fa:7e:
                    74:c4:55:38:0f:46:fd:99:8d:89:51:ae:06:85:47:
                    57:2e:f4:1c:ad:ca:d7:be:a3:a1:e1:55:97:22:5c:
                    ab:d9:fc:40:81:4a:ba:49:77:3c:7c:f1:e0:8c:65:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C4:09:9D:CA:00:07:3C:F9:D3:BB:55:AE:9F:2C:40:5E:00:9E:66
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:e4:78:1c:5f:ec:cd:f2:55:82:5d:b8:54:9a:36:34:a1:6c:
         e7:01:1d:2f:1b:6e:e7:67:a2:0e:88:66:9f:cd:7a:69:b8:c4:
         2e:a9:f2:f3:c8:ce:6a:0e:35:7b:88:0e:3e:29:6c:1e:bf:23:
         6d:f1:8e:16:a8:d9:32:ae:d4:e7:2f:5c:6a:3b:de:7a:e1:88:
         96:9f:ef:37:2a:4d:b3:77:39:6f:6b:7f:e4:08:5b:53:bc:48:
         17:28:bd:61:42:ad:68:88:d7:f6:d7:43:bf:ed:78:19:8e:c0:
         9c:ed:47:7b:c5:a0:d7:66:96:df:ee:bb:75:dd:4a:c3:ac:3b:
         c4:8c:af:23:e5:a4:20:7c:d9:ec:87:db:e7:f4:99:9f:a7:7c:
         36:87:8b:cd:48:3a:ca:b5:7a:92:8a:e9:a2:31:0c:68:47:1f:
         cb:40:d4:f3:5e:14:ec:86:48:c9:53:42:41:72:e8:b9:4c:57:
         17:69:7b:35:96:c2:49:f5:3a:da:7a:ea:5e:a7:fc:a8:fb:aa:
         b7:89:bb:97:ea:2b:c3:22:dc:ed:ad:af:9f:a5:e5:a3:b3:be:
         42:91:cd:ea:c1:5a:0b:28:30:be:cb:96:33:c4:d5:91:d2:07:
         cc:44:da:0a:0c:31:60:60:2f:bb:16:10:70:29:e6:12:e8:73:
         9d:c9:08:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org