Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132342e302f32322d3232203d3e20323730373738.roa
File:                     3138372e36332e3132342e302f32322d3232203d3e20323730373738.roa (raw, json)
Hash identifier:          MnFBmRu30BoOVMOo4fE/Ma8GPEIJ5IyT+j4FdXkUDmQ=
Subject key identifier:   64:A1:46:07:59:37:0B:0C:DB:01:55:7B:A7:19:50:A5:9D:CE:6A:9F
Certificate issuer:       /CN=B480637B71A5BAB7D8E09175513FD415DB03785D
Certificate serial:       2009509E842A630EAFA3113EFD0D61A406691673
Authority key identifier: B4:80:63:7B:71:A5:BA:B7:D8:E0:91:75:51:3F:D4:15:DB:03:78:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B480637B71A5BAB7D8E09175513FD415DB03785D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132342e302f32322d3232203d3e20323730373738.roa
Signing time:             Thu 07 Dec 2023 02:24:08 +0000
ROA not before:           Thu 07 Dec 2023 02:19:08 +0000
ROA not after:            Thu 05 Dec 2024 02:24:08 +0000
asID:                     270778
IP address blocks:        187.63.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:09:50:9e:84:2a:63:0e:af:a3:11:3e:fd:0d:61:a4:06:69:16:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B480637B71A5BAB7D8E09175513FD415DB03785D
        Validity
            Not Before: Dec  7 02:19:08 2023 GMT
            Not After : Dec  5 02:24:08 2024 GMT
        Subject: CN=64A1460759370B0CDB01557BA71950A59DCE6A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:57:57:9f:94:3a:a8:ea:17:fd:84:9d:e1:d2:
                    a8:b4:21:b5:1d:0f:ac:fe:81:64:95:cb:4a:29:1b:
                    2b:79:39:34:a3:4e:17:74:1f:cc:62:c3:c8:dc:72:
                    89:9d:c0:c2:c0:b5:c7:5c:e4:6d:20:13:9a:a1:c8:
                    c0:29:74:08:86:dd:7c:a7:e2:09:ec:68:9b:c8:a7:
                    4c:45:8d:ee:3c:d3:2f:e3:87:25:d7:bc:b1:ca:56:
                    5f:9b:ed:ef:17:e6:e1:f1:a4:7b:e4:d0:a6:3d:7f:
                    12:f6:6c:f9:25:74:dc:67:32:b3:07:b0:e2:3c:2f:
                    10:cf:fb:e0:b3:51:2e:43:8f:32:d3:6b:40:f3:36:
                    5f:2f:da:1c:e6:c1:cf:a2:77:db:84:f8:15:f7:fc:
                    03:e8:e0:cd:33:f0:91:b3:b5:c7:9d:cf:c9:63:69:
                    f7:63:52:85:22:42:57:93:0e:cd:c8:23:70:c6:d9:
                    4a:39:f9:f2:09:9a:3d:a2:21:a9:5d:74:74:d5:4e:
                    c6:b0:94:97:a0:76:3b:73:e2:5e:1b:21:c0:6f:5f:
                    79:d0:5c:d9:ce:0d:0b:e7:40:79:b7:17:e0:57:99:
                    93:80:6e:a6:d3:b8:6a:b4:d0:3a:f3:95:a4:5b:55:
                    0a:ff:60:c4:72:d3:ec:17:73:5b:05:b5:88:be:3b:
                    d9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A1:46:07:59:37:0B:0C:DB:01:55:7B:A7:19:50:A5:9D:CE:6A:9F
            X509v3 Authority Key Identifier:
                keyid:B4:80:63:7B:71:A5:BA:B7:D8:E0:91:75:51:3F:D4:15:DB:03:78:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/B480637B71A5BAB7D8E09175513FD415DB03785D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B480637B71A5BAB7D8E09175513FD415DB03785D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132342e302f32322d3232203d3e20323730373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         dc:9c:d1:82:32:2d:55:ea:ae:43:76:07:f2:a0:03:60:da:af:
         48:3a:83:35:41:b1:1e:92:eb:f7:66:e3:23:6f:2f:2a:e0:66:
         f7:56:2d:90:25:76:23:97:7c:10:64:5a:01:1b:9d:c4:df:de:
         5d:5f:82:ca:ce:00:a5:ec:a9:41:97:1d:4e:4a:90:63:27:fb:
         f2:c1:74:c6:c4:bb:c3:0f:f7:1c:de:81:5b:e0:cd:55:a5:f3:
         30:1d:35:88:a9:3f:d2:7a:6f:f1:e9:cc:6a:f9:aa:6a:eb:3d:
         7c:0f:57:8f:c2:7f:51:bd:f0:b7:99:e2:63:2d:51:fb:0a:6c:
         52:08:7c:55:6e:cf:a8:9b:43:f9:37:74:3d:d7:cc:67:a0:d8:
         49:57:11:c7:67:a1:cf:c0:f7:bd:c6:cc:75:93:1b:4a:9a:22:
         53:59:b6:d4:7a:57:46:28:be:40:fc:46:8f:ba:27:14:88:4e:
         48:bc:11:6b:49:37:04:61:15:41:25:82:fc:50:fd:c8:f9:72:
         ea:3f:ce:c1:a4:b2:64:48:3a:23:f9:53:6b:95:e6:8f:e0:c3:
         02:e8:6b:14:50:82:15:bc:60:0e:e5:72:7b:11:4a:ce:f5:96:
         74:46:03:e4:50:7c:07:75:2e:55:65:7e:e0:e4:04:81:59:6e:
         41:b2:78:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org