Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/3137372e3132352e3132382e302f32322d3234203d3e20323632333434.roa
File:                     3137372e3132352e3132382e302f32322d3234203d3e20323632333434.roa (raw, json)
Hash identifier:          FCADU0gdF6ZUuZ+Gw1CdJbFD/kKNBvB/BnKpQZsz+Yc=
Subject key identifier:   CB:AD:0F:69:BF:32:EC:3B:28:7B:9C:76:47:8E:BC:4B:09:2C:18:E8
Certificate issuer:       /CN=C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3
Certificate serial:       027AC9C817C5958F4333798FB49BD70BBE030638
Authority key identifier: C2:C1:FB:01:62:2C:A7:E7:2A:68:D5:CB:55:AA:FB:03:FD:BD:C6:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/3137372e3132352e3132382e302f32322d3234203d3e20323632333434.roa
Signing time:             Wed 03 Apr 2024 11:47:10 +0000
ROA not before:           Wed 03 Apr 2024 11:42:10 +0000
ROA not after:            Wed 02 Apr 2025 11:47:10 +0000
asID:                     262344
IP address blocks:        177.125.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7a:c9:c8:17:c5:95:8f:43:33:79:8f:b4:9b:d7:0b:be:03:06:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3
        Validity
            Not Before: Apr  3 11:42:10 2024 GMT
            Not After : Apr  2 11:47:10 2025 GMT
        Subject: CN=CBAD0F69BF32EC3B287B9C76478EBC4B092C18E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:dd:f7:00:44:36:b4:68:51:d4:71:90:bc:
                    be:75:80:ea:b5:be:a1:5d:07:a4:3b:1d:e4:07:82:
                    b1:e9:c3:da:af:41:97:cb:6b:c2:70:ed:79:27:3c:
                    8b:50:ce:3e:59:ea:ac:02:48:52:5b:7c:22:d3:fa:
                    75:6e:b9:4c:c5:78:a7:29:cf:26:04:a9:cf:34:25:
                    2f:4b:05:36:7f:67:fd:23:71:d0:8c:b3:83:75:8f:
                    18:af:b6:24:d9:d1:d0:c2:a2:6d:0b:05:ad:46:50:
                    a0:74:1f:3d:89:97:62:9c:a8:01:66:09:db:c2:a6:
                    36:05:a7:59:92:dc:ef:37:e7:46:2e:90:0c:67:24:
                    90:9b:05:87:88:39:9a:88:6d:9e:55:de:0b:8f:b9:
                    6b:4c:92:bf:3b:cb:df:b0:c9:46:f0:7f:c5:a4:7b:
                    31:5c:4a:00:10:5a:31:25:3f:f2:92:06:3a:7f:c6:
                    d1:84:de:31:36:44:4e:f0:cc:b6:09:bb:33:00:01:
                    c6:17:80:82:22:b9:7e:14:a6:1e:85:03:3e:12:00:
                    fa:dc:38:75:7d:c3:2f:00:83:04:4c:31:6c:1a:29:
                    e1:65:07:e0:4b:eb:87:44:c0:28:03:1d:0e:6a:ea:
                    ba:44:64:19:e5:b4:c3:49:16:cc:db:0f:71:45:95:
                    4f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AD:0F:69:BF:32:EC:3B:28:7B:9C:76:47:8E:BC:4B:09:2C:18:E8
            X509v3 Authority Key Identifier:
                keyid:C2:C1:FB:01:62:2C:A7:E7:2A:68:D5:CB:55:AA:FB:03:FD:BD:C6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C2C1FB01622CA7E72A68D5CB55AAFB03FDBDC6E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75sVJGL2VZAEqr7LJ3bUwzmjdU9bxyvXPBbCVzkv4Y5m/0/3137372e3132352e3132382e302f32322d3234203d3e20323632333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:ba:47:65:01:c3:76:a8:7d:45:c1:9f:a9:db:bf:35:1f:f4:
         fa:e5:51:25:7a:4e:bc:04:59:30:02:37:9c:6c:b7:ed:b2:de:
         de:54:31:f3:e8:ac:9e:74:0c:7a:80:91:b5:58:9b:54:28:16:
         50:c1:c8:88:39:87:d8:bb:dd:12:d7:9d:ea:f6:c8:d1:b5:fb:
         ed:f0:d1:3b:22:ef:60:4c:83:cf:80:91:d2:61:69:a1:2f:22:
         c5:a8:10:8a:47:33:cf:fb:66:ec:ac:3d:9d:cb:7e:e7:ad:8a:
         29:17:8b:b8:9a:fc:8e:15:58:70:64:d0:15:e5:9b:0c:45:f8:
         2d:60:ac:04:4e:bf:78:b6:5f:12:b3:af:08:a4:8e:95:1f:f6:
         b7:93:40:1b:6e:7f:19:fc:f7:3e:c2:7f:cc:41:de:97:51:0f:
         5a:d6:e6:d2:b4:43:fa:0b:96:1c:7a:35:3c:28:4e:73:d5:8c:
         1f:8a:c9:8e:5a:dd:65:c2:db:7e:ff:9b:a7:9c:42:f8:b6:f5:
         f1:c3:46:3e:5d:84:ad:8f:5c:1d:93:cc:5d:a0:6a:77:15:39:
         20:5d:bf:83:d9:9d:ac:a6:f3:8a:ab:b6:be:84:72:4f:0b:c1:
         5b:6e:24:b6:a5:e1:af:ff:6d:26:32:17:7f:48:7f:34:d0:11:
         f4:9f:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org