Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa
File:                     3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa (raw, json)
Hash identifier:          X0OEoTc5ELtF5YDpcZGWMbsF/jvGDTVU6o+wNKhLxF0=
Subject key identifier:   8C:B2:95:CE:F9:7B:59:B3:B3:03:0A:D9:89:64:6A:96:01:9A:0A:57
Certificate issuer:       /CN=81162F75A7037BA4B812202269BFCFBA63E840FE
Certificate serial:       0FE4FBA6255BEC2976E0B4710E77ABD64C1C139C
Authority key identifier: 81:16:2F:75:A7:03:7B:A4:B8:12:20:22:69:BF:CF:BA:63:E8:40:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81162F75A7037BA4B812202269BFCFBA63E840FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa
Signing time:             Wed 17 Jan 2024 09:05:10 +0000
ROA not before:           Wed 17 Jan 2024 09:00:10 +0000
ROA not after:            Wed 15 Jan 2025 09:05:10 +0000
asID:                     61602
IP address blocks:        177.124.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e4:fb:a6:25:5b:ec:29:76:e0:b4:71:0e:77:ab:d6:4c:1c:13:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81162F75A7037BA4B812202269BFCFBA63E840FE
        Validity
            Not Before: Jan 17 09:00:10 2024 GMT
            Not After : Jan 15 09:05:10 2025 GMT
        Subject: CN=8CB295CEF97B59B3B3030AD989646A96019A0A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f4:2d:c9:72:da:70:5e:bc:93:be:d9:1c:0a:
                    23:16:87:e9:e2:06:76:b1:ee:40:97:9a:c1:fa:0c:
                    ca:cc:74:f0:7a:46:c9:9e:8b:44:da:79:ac:50:df:
                    85:ef:34:31:5e:27:a2:52:f5:d2:19:d4:0d:ce:b9:
                    26:31:40:7f:ca:9e:e5:35:c6:55:d4:c1:a1:f1:98:
                    c0:55:df:f7:92:de:b8:f1:62:ac:02:87:bf:ee:40:
                    cb:3e:51:b0:9a:b4:f8:f7:48:c5:8d:a1:4f:cf:83:
                    7f:13:ef:d3:12:a4:e7:51:0f:f7:0a:90:98:15:24:
                    eb:d6:d8:bf:db:54:79:9e:53:b1:5c:e3:ed:b6:23:
                    8c:a1:2f:2c:25:b2:74:cf:39:50:32:16:6a:2e:bd:
                    6e:32:a4:c7:8c:32:14:6a:09:7b:46:0e:2f:5c:ea:
                    2e:c3:7b:cd:32:1d:93:86:d6:12:40:e4:df:17:08:
                    a6:98:4e:16:91:ce:21:84:8d:9a:b4:6f:60:eb:0f:
                    fd:2b:86:79:cb:b8:25:2e:4d:bb:d1:5d:41:6b:5e:
                    4f:18:7b:01:62:91:fe:10:4d:66:de:85:0f:c2:3f:
                    c0:9f:98:d5:aa:48:84:5b:d2:2f:ae:fa:1d:84:9a:
                    cf:21:88:24:83:8f:1d:3b:4c:1e:c4:9e:e9:6e:dc:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B2:95:CE:F9:7B:59:B3:B3:03:0A:D9:89:64:6A:96:01:9A:0A:57
            X509v3 Authority Key Identifier:
                keyid:81:16:2F:75:A7:03:7B:A4:B8:12:20:22:69:BF:CF:BA:63:E8:40:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/81162F75A7037BA4B812202269BFCFBA63E840FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81162F75A7037BA4B812202269BFCFBA63E840FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/1/3137372e3132342e3135382e302f32342d3234203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:a9:6d:8f:9e:7d:47:d2:b0:8e:a4:3d:b4:a6:18:e4:40:08:
         a7:42:f6:8a:24:5b:ba:cc:bd:4c:bf:07:81:44:1c:56:8b:1e:
         4f:0a:1d:da:8e:09:73:7f:69:41:f7:8f:b6:19:09:8e:30:cc:
         95:8f:0e:a9:e6:d8:1e:cd:be:76:bb:34:6f:3b:e4:51:e7:43:
         9e:2a:55:e6:92:cb:2b:21:be:56:62:5a:a2:23:44:20:d4:7b:
         5a:a3:10:1f:a5:cc:7b:e5:9f:df:c4:e0:56:80:a6:0b:0d:01:
         80:3c:52:78:4c:1d:70:9b:1c:92:10:23:a4:a7:00:78:a2:d8:
         24:3d:2c:ab:12:b7:20:df:23:5d:2f:54:01:d1:ed:3a:be:66:
         c7:70:9f:74:96:81:a7:c3:f4:61:fe:07:eb:47:7d:95:58:91:
         c9:e9:a2:4f:89:9f:3d:c9:09:d4:04:7f:2f:b4:d4:04:2a:f9:
         13:ad:53:2c:f9:b7:ed:ba:b9:2a:d4:ce:96:bd:68:3e:f8:e5:
         a2:ac:45:1b:f4:dd:c5:a7:89:a3:19:9d:5c:64:6d:23:9c:5d:
         03:04:0c:c7:5a:9a:86:6e:94:0a:78:b1:08:e8:b5:f7:c1:3e:
         84:cb:b5:0e:62:ce:0b:49:d3:ab:3f:0c:7a:2a:e3:10:fd:06:
         c4:29:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org