Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/3138372e36332e3132372e302f32342d3234203d3e20323730373738.roa
File:                     3138372e36332e3132372e302f32342d3234203d3e20323730373738.roa (raw, json)
Hash identifier:          h9fnSLdDYUIY7fqss/S+beH6daNpQD/XqX5C9nlck+k=
Subject key identifier:   15:09:63:8D:F1:10:29:86:64:46:38:0E:1D:4A:9E:0D:5A:AA:07:21
Certificate issuer:       /CN=D95469442C3ED3E11B9EEA259D4A0049C3748D03
Certificate serial:       2653E6CCC330942C6198514F2BBF0EB5C772F800
Authority key identifier: D9:54:69:44:2C:3E:D3:E1:1B:9E:EA:25:9D:4A:00:49:C3:74:8D:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95469442C3ED3E11B9EEA259D4A0049C3748D03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/3138372e36332e3132372e302f32342d3234203d3e20323730373738.roa
Signing time:             Thu 04 Apr 2024 11:28:09 +0000
ROA not before:           Thu 04 Apr 2024 11:23:09 +0000
ROA not after:            Thu 03 Apr 2025 11:28:09 +0000
asID:                     270778
IP address blocks:        187.63.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:53:e6:cc:c3:30:94:2c:61:98:51:4f:2b:bf:0e:b5:c7:72:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95469442C3ED3E11B9EEA259D4A0049C3748D03
        Validity
            Not Before: Apr  4 11:23:09 2024 GMT
            Not After : Apr  3 11:28:09 2025 GMT
        Subject: CN=1509638DF11029866446380E1D4A9E0D5AAA0721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:be:db:99:18:f6:5c:64:23:b1:31:f8:0f:12:
                    00:42:33:14:8a:91:47:e3:4a:26:73:f1:13:4f:53:
                    41:85:ae:c5:3d:07:da:2b:34:21:88:71:46:ec:e1:
                    04:78:22:94:9d:96:cb:4b:de:e5:21:85:f6:29:f2:
                    c5:e4:51:49:f2:56:c9:62:58:db:56:1e:a2:fc:a3:
                    93:9c:70:cc:5b:81:bc:c0:89:80:a3:5c:54:02:d8:
                    9e:e0:cc:39:d8:11:0f:6f:ae:bd:a4:3d:71:2e:53:
                    e8:7d:10:12:d2:b8:ce:db:4e:a7:22:3b:9e:9e:07:
                    af:72:84:21:9a:18:7a:67:78:e1:0d:93:44:58:47:
                    02:b1:26:48:8b:f0:f6:93:00:08:66:dd:97:8c:0c:
                    5b:ba:a7:1a:8f:07:d7:9b:a7:39:18:b0:91:d2:f0:
                    d5:96:4c:c2:2c:8f:dd:61:9e:09:4a:65:b6:28:dd:
                    04:af:56:66:7e:55:78:56:52:d1:d3:4f:44:c2:ca:
                    95:d3:1e:08:53:60:3e:ca:40:4a:37:97:11:d0:e3:
                    2c:8a:2c:9f:d0:a9:2c:36:aa:95:77:08:4c:42:6d:
                    ee:ae:d1:e0:82:af:92:53:57:b6:d3:61:53:30:90:
                    dd:83:10:bb:87:a7:31:8b:6e:9c:42:70:47:52:35:
                    b1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:09:63:8D:F1:10:29:86:64:46:38:0E:1D:4A:9E:0D:5A:AA:07:21
            X509v3 Authority Key Identifier:
                keyid:D9:54:69:44:2C:3E:D3:E1:1B:9E:EA:25:9D:4A:00:49:C3:74:8D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/D95469442C3ED3E11B9EEA259D4A0049C3748D03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95469442C3ED3E11B9EEA259D4A0049C3748D03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/3138372e36332e3132372e302f32342d3234203d3e20323730373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f8:9d:94:33:e9:6d:1d:b0:74:64:70:4f:83:a8:4c:2a:59:
         6e:b0:f0:d6:6f:75:12:e9:df:7c:8f:10:59:3c:35:41:c9:f2:
         82:3c:72:f5:2c:d0:a4:f0:77:dd:ea:26:3e:ef:5e:4a:3e:24:
         0a:06:98:cd:52:76:13:f9:62:5f:51:51:2a:ca:0b:e9:ea:5e:
         a3:f3:ea:64:33:6b:a7:37:f8:04:ec:06:38:77:4f:54:51:62:
         68:0f:a8:08:af:79:44:68:6d:8f:e2:ca:79:aa:41:08:e8:9f:
         f7:e6:47:fc:02:c5:04:e8:bf:3f:9c:d8:d4:7c:0f:66:ec:6e:
         6e:5a:68:72:da:c6:04:12:10:3b:92:9d:97:f7:c9:b8:d6:22:
         17:d7:2e:72:15:29:a5:04:07:01:87:36:e7:eb:fb:3a:ac:67:
         5d:92:c8:56:8f:75:d0:e4:7c:6f:2c:93:af:5a:44:13:7c:f8:
         72:0f:29:66:dc:af:95:b3:7b:70:86:91:8d:1a:d7:f9:23:c7:
         4b:6a:54:c0:5c:65:4c:11:d8:1d:90:b3:8d:ac:93:3d:4c:0d:
         f2:8a:3f:e8:0f:fd:b1:8c:07:32:82:34:4a:8e:8a:f4:27:7d:
         3e:c2:e9:85:f6:b9:85:a5:30:82:48:eb:ea:d5:36:b7:80:46:
         06:3b:47:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org