Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa
File:                     3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa (raw, json)
Hash identifier:          bPK2uXC7YcJddzB9LFSv81TUjt3ldxjgUDjzmNgp/CM=
Subject key identifier:   2A:4C:9A:86:68:12:DA:A4:69:A0:F1:71:17:C6:BD:4F:C6:5A:DD:C2
Certificate issuer:       /CN=D95469442C3ED3E11B9EEA259D4A0049C3748D03
Certificate serial:       2CE80655FE552DA0660DE7F5BDFC30484AF0C203
Authority key identifier: D9:54:69:44:2C:3E:D3:E1:1B:9E:EA:25:9D:4A:00:49:C3:74:8D:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95469442C3ED3E11B9EEA259D4A0049C3748D03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa
Signing time:             Thu 04 Apr 2024 11:28:08 +0000
ROA not before:           Thu 04 Apr 2024 11:23:08 +0000
ROA not after:            Thu 03 Apr 2025 11:28:08 +0000
asID:                     270778
IP address blocks:        187.63.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e8:06:55:fe:55:2d:a0:66:0d:e7:f5:bd:fc:30:48:4a:f0:c2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95469442C3ED3E11B9EEA259D4A0049C3748D03
        Validity
            Not Before: Apr  4 11:23:08 2024 GMT
            Not After : Apr  3 11:28:08 2025 GMT
        Subject: CN=2A4C9A866812DAA469A0F17117C6BD4FC65ADDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:42:e8:c5:7a:98:df:49:89:aa:f4:73:09:
                    1b:14:a3:4a:95:33:7e:ff:5c:60:af:25:74:23:23:
                    18:30:df:d9:2b:07:e8:65:e1:c2:1c:73:9f:40:f4:
                    75:aa:36:21:98:1e:d7:ec:b7:0a:1f:d5:4a:b2:f8:
                    7c:29:0d:f4:92:5e:5b:33:38:61:46:c3:f0:16:24:
                    7e:05:0e:a3:96:72:00:30:65:51:c3:2b:4e:37:59:
                    56:16:b6:35:50:46:e2:cf:8a:45:b8:55:35:36:9d:
                    77:4e:b3:b2:99:38:5f:01:49:12:86:ad:02:a2:ce:
                    08:6a:15:8a:85:bd:92:61:71:10:c7:b0:d7:cd:8a:
                    fb:7e:bb:fc:44:e8:46:64:51:b4:6a:49:7d:81:b2:
                    66:42:76:65:41:43:79:50:33:b8:08:c3:e2:56:4b:
                    e4:dc:42:98:c0:a7:4c:47:3f:64:66:f6:ab:36:6f:
                    44:47:f4:ef:8a:e3:33:10:96:53:3c:0e:82:6a:20:
                    dd:a7:b6:9c:2f:66:45:d9:04:8b:99:a6:0c:65:5e:
                    c5:62:22:3f:e0:3d:cc:cf:1f:9d:d5:98:1a:74:3d:
                    83:3f:eb:ab:94:f3:3d:c4:3c:69:9a:c0:41:3c:fb:
                    3b:43:01:26:c6:73:06:bc:fd:88:59:51:63:95:48:
                    77:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4C:9A:86:68:12:DA:A4:69:A0:F1:71:17:C6:BD:4F:C6:5A:DD:C2
            X509v3 Authority Key Identifier:
                keyid:D9:54:69:44:2C:3E:D3:E1:1B:9E:EA:25:9D:4A:00:49:C3:74:8D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/D95469442C3ED3E11B9EEA259D4A0049C3748D03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95469442C3ED3E11B9EEA259D4A0049C3748D03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/3138372e36332e3132352e302f32342d3234203d3e20323730373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:a7:ee:a6:d2:3b:09:b6:48:19:5e:fe:e5:71:3b:1c:65:e6:
         dd:c6:e5:37:d7:0d:d6:b8:60:49:ae:de:af:fa:7e:5b:84:60:
         5b:5a:b6:ef:87:54:6b:77:8d:26:f5:1c:22:aa:c5:dd:56:5e:
         1b:7d:2f:5c:46:eb:6d:7a:53:33:1f:ae:3c:0f:92:88:df:d1:
         f7:57:e4:d5:f7:6a:64:c4:86:0a:ff:46:12:1e:8d:79:fc:eb:
         65:bb:c6:42:7e:3a:fb:be:f2:71:b3:99:8a:73:76:69:b7:ab:
         c5:74:55:7a:9f:cf:a3:39:b6:76:c1:97:41:25:49:f9:86:c7:
         d9:bc:5a:7d:b4:4e:71:81:21:a3:f9:54:0a:8a:8d:6d:5b:1c:
         ee:d1:d2:c4:dd:15:1f:fc:4b:90:1a:a3:54:1e:d4:3a:92:fb:
         f4:7e:07:af:6d:fc:c8:8b:58:5f:fd:c2:17:25:cf:8e:02:38:
         62:ef:14:c7:95:b1:da:f3:3b:56:84:1d:aa:4e:86:46:31:f1:
         a5:87:65:f0:1e:27:28:f8:41:9c:ac:15:fa:3b:12:d0:18:68:
         70:cf:14:93:7e:1c:dc:7d:6b:a4:83:e3:dd:3a:b8:72:de:96:
         3b:5f:af:57:9f:ee:31:74:8e:a4:f4:d8:f4:e4:15:7e:d8:6e:
         fd:5d:cc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org