Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa
File:                     3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa (raw, json)
Hash identifier:          173qM4AEW3DKRziRWibETEHchnmLX+uPLz/VRRzlJGg=
Subject key identifier:   FA:03:A4:A4:74:5E:A3:2D:AA:57:47:6D:1F:55:B1:93:F0:D5:E9:27
Certificate issuer:       /CN=B480637B71A5BAB7D8E09175513FD415DB03785D
Certificate serial:       0EBDECBCA2B057A998F48DC083E729F82AA59433
Authority key identifier: B4:80:63:7B:71:A5:BA:B7:D8:E0:91:75:51:3F:D4:15:DB:03:78:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B480637B71A5BAB7D8E09175513FD415DB03785D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa
Signing time:             Thu 07 Dec 2023 02:31:38 +0000
ROA not before:           Thu 07 Dec 2023 02:26:38 +0000
ROA not after:            Thu 05 Dec 2024 02:31:38 +0000
asID:                     270778
IP address blocks:        187.63.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bd:ec:bc:a2:b0:57:a9:98:f4:8d:c0:83:e7:29:f8:2a:a5:94:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B480637B71A5BAB7D8E09175513FD415DB03785D
        Validity
            Not Before: Dec  7 02:26:38 2023 GMT
            Not After : Dec  5 02:31:38 2024 GMT
        Subject: CN=FA03A4A4745EA32DAA57476D1F55B193F0D5E927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:90:8a:62:73:fc:82:b4:6b:08:9d:d8:f4:
                    d6:44:56:cd:81:2d:55:d0:15:73:4b:fb:21:fc:cc:
                    de:42:a5:73:d6:f9:ec:b9:db:9f:1f:46:a4:32:81:
                    83:81:b8:d8:e7:4d:97:07:9c:51:90:86:6e:16:45:
                    f8:3b:43:b1:8c:06:dd:e4:e6:88:0d:ee:b3:a6:6d:
                    09:6f:b7:8d:94:74:67:45:04:c5:0d:4c:06:aa:eb:
                    71:69:f7:4f:ae:f3:b9:89:10:3d:12:fe:b2:db:98:
                    a3:d4:8f:42:51:84:49:d7:e6:94:a7:65:b4:fb:a7:
                    84:ee:97:56:61:be:58:f1:63:b9:b1:9e:19:25:a7:
                    32:49:43:08:4e:1d:eb:39:b3:b7:9d:c0:90:a8:1d:
                    5d:3f:0d:18:a9:03:d7:1a:f8:e7:9a:31:99:b8:c1:
                    aa:3f:a6:11:23:74:81:f2:57:b0:35:3d:03:34:e4:
                    39:1b:bc:e2:18:77:5e:18:d2:cd:c0:30:2c:08:af:
                    99:6f:91:46:88:51:28:1a:87:37:26:2b:f7:68:a7:
                    25:09:4e:06:31:19:7b:cd:ad:8b:ba:e7:27:7b:db:
                    59:59:bc:7e:de:11:3d:73:81:14:ae:ac:00:b2:12:
                    20:5f:30:56:e9:a6:d6:77:ca:18:70:b8:82:4c:75:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:A4:A4:74:5E:A3:2D:AA:57:47:6D:1F:55:B1:93:F0:D5:E9:27
            X509v3 Authority Key Identifier:
                keyid:B4:80:63:7B:71:A5:BA:B7:D8:E0:91:75:51:3F:D4:15:DB:03:78:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/B480637B71A5BAB7D8E09175513FD415DB03785D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B480637B71A5BAB7D8E09175513FD415DB03785D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:4d:84:df:7f:54:cd:2b:3c:99:32:95:11:e2:b8:28:2d:42:
         1c:c2:dc:79:18:ee:26:40:71:c6:5e:60:b4:82:86:b4:80:3c:
         eb:ce:9c:39:3e:d2:d1:75:e3:b6:91:38:ab:f3:c1:cf:fe:5d:
         d0:22:e1:f5:94:61:dc:c2:79:09:86:62:f7:aa:3f:2a:ab:dd:
         e6:8e:7b:a0:4c:ce:94:8b:4a:87:4f:cf:2a:d0:ed:93:a9:6c:
         a4:22:b3:97:4e:a3:16:8e:02:43:7e:2d:d3:72:f3:d2:9a:ed:
         62:22:f8:47:7a:33:60:a3:70:7b:da:5b:77:ee:bb:5b:43:4e:
         16:57:93:49:3e:84:49:ea:92:95:6b:04:8c:d1:7e:96:8b:0f:
         24:ba:69:23:50:47:8b:8e:bb:de:8a:d6:83:7c:2b:65:a4:24:
         61:58:1d:64:90:60:cf:1e:5e:ae:70:21:b2:ae:e6:89:6e:2d:
         99:f4:9d:6e:e2:33:96:96:aa:a1:9b:25:aa:18:4a:ee:0b:92:
         fb:ab:89:fb:06:d5:ae:fd:51:d5:86:3b:fd:62:64:bb:a3:5e:
         44:1f:6f:40:9f:aa:ff:b6:cf:6a:0d:7f:6f:f7:9a:cb:15:1c:
         e4:7b:28:d5:bc:b6:46:02:61:7d:55:74:cd:44:27:56:9b:12:
         d8:6f:6d:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDr3svKKwV6mY9I3Ag+cp+CqllDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ4MDYzN0I3MUE1QkFCN0Q4RTA5MTc1NTEzRkQ0MTVE
QjAzNzg1RDAeFw0yMzEyMDcwMjI2MzhaFw0yNDEyMDUwMjMxMzhaMDMxMTAvBgNV
BAMTKEZBMDNBNEE0NzQ1RUEzMkRBQTU3NDc2RDFGNTVCMTkzRjBENUU5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpl5CKYnP8grRrCJ3Y9NZEVs2B
LVXQFXNL+yH8zN5CpXPW+ey5258fRqQygYOBuNjnTZcHnFGQhm4WRfg7Q7GMBt3k
5ogN7rOmbQlvt42UdGdFBMUNTAaq63Fp90+u87mJED0S/rLbmKPUj0JRhEnX5pSn
ZbT7p4Tul1ZhvljxY7mxnhklpzJJQwhOHes5s7edwJCoHV0/DRipA9ca+OeaMZm4
wao/phEjdIHyV7A1PQM05DkbvOIYd14Y0s3AMCwIr5lvkUaIUSgahzcmK/dopyUJ
TgYxGXvNrYu65yd721lZvH7eET1zgRSurACyEiBfMFbpptZ3yhhwuIJMdTyZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+gOkpHReoy2qV0dtH1Wxk/DV6ScwHwYDVR0j
BBgwFoAUtIBje3GlurfY4JF1UT/UFdsDeF0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE1mM0FvTEdteG9odVR1TnBTSkw1cVJXTFdZZ2dYNGV3RGRXUmZuc1ZC
Rm0vMC9CNDgwNjM3QjcxQTVCQUI3RDhFMDkxNzU1MTNGRDQxNURCMDM3ODVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I0ODA2MzdCNzFBNUJBQjdE
OEUwOTE3NTUxM0ZENDE1REIwMzc4NUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RNZjNBb0xHbXhvaHVUdU5wU0pMNXFSV0xXWWdnWDRld0RkV1JmbnNWQkZtLzAv
MzEzODM3MmUzNjMzMmUzMTMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNzM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7P30wDQYJKoZIhvcNAQELBQADggEBAJBNhN9/
VM0rPJkylRHiuCgtQhzC3HkY7iZAccZeYLSChrSAPOvOnDk+0tF147aROKvzwc/+
XdAi4fWUYdzCeQmGYveqPyqr3eaOe6BMzpSLSodPzyrQ7ZOpbKQis5dOoxaOAkN+
LdNy89Ka7WIi+Ed6M2CjcHvaW3fuu1tDThZXk0k+hEnqkpVrBIzRfpaLDyS6aSNQ
R4uOu96K1oN8K2WkJGFYHWSQYM8eXq5wIbKu5oluLZn0nW7iM5aWqqGbJaoYSu4L
kvurifsG1a79UdWGO/1iZLujXkQfb0Cfqv+2z2oNf2/3mssVHOR7KNW8tkYCYX1V
dM1EJ1abEthvba8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org