Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132342e302f32322d3232203d3e20323633333935.roa
File:                     3137372e3132352e3132342e302f32322d3232203d3e20323633333935.roa (raw, json)
Hash identifier:          QVg8+kBfMZErxy6mAt2UKbtViAIGah05ASXA0r8uSkk=
Subject key identifier:   15:20:84:7E:15:D0:42:C5:A7:D1:9B:56:B9:57:B7:A4:91:DE:27:8D
Certificate issuer:       /CN=67666492B102F21109D368673B2B20745692E1A8
Certificate serial:       651CEC520E31F83C463D8DAC1E22221AA16D1600
Authority key identifier: 67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132342e302f32322d3232203d3e20323633333935.roa
Signing time:             Sun 25 Dec 2022 17:22:18 +0000
ROA not before:           Sun 25 Dec 2022 17:17:18 +0000
ROA not after:            Sun 24 Dec 2023 17:22:18 +0000
asID:                     263395
IP address blocks:        177.125.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1c:ec:52:0e:31:f8:3c:46:3d:8d:ac:1e:22:22:1a:a1:6d:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67666492B102F21109D368673B2B20745692E1A8
        Validity
            Not Before: Dec 25 17:17:18 2022 GMT
            Not After : Dec 24 17:22:18 2023 GMT
        Subject: CN=1520847E15D042C5A7D19B56B957B7A491DE278D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:63:fe:24:ad:cc:42:20:53:78:24:6e:80:
                    74:e8:16:84:b5:5b:ca:95:dd:fd:69:9c:ef:50:e5:
                    22:76:21:a4:e1:01:ec:30:9e:e8:16:51:86:a2:fa:
                    ee:c8:00:c3:e1:7c:a2:98:03:d0:a2:62:59:0e:41:
                    2a:f5:7b:6f:6b:86:a4:f7:a2:5b:de:de:83:2d:83:
                    d7:dc:68:05:e2:bc:81:1d:b7:bd:e5:f0:60:a4:f6:
                    b6:10:e5:a1:12:e0:4a:e0:fd:3c:4d:b1:7d:62:3c:
                    1e:78:95:40:e8:18:c1:06:99:25:26:3d:39:a8:fb:
                    5b:fb:75:b3:66:9f:19:07:b5:dc:62:39:57:8f:78:
                    da:08:8d:f2:69:e2:92:4a:95:b0:14:44:08:fc:52:
                    56:a9:be:a0:9d:62:9a:a2:98:04:1a:2a:65:3a:55:
                    94:a7:27:b4:8c:80:13:de:bc:9a:39:ff:93:ff:eb:
                    03:e6:12:1b:dd:2a:b7:60:b6:c6:81:6b:c9:06:ed:
                    ef:02:1c:e0:5a:9b:9f:17:bc:15:f0:0f:58:3d:ee:
                    07:e5:5e:77:43:5e:70:bd:0f:a3:49:bc:53:60:ab:
                    0d:2e:d9:fd:e4:f0:f9:dd:c8:c4:4d:6f:4c:21:5b:
                    01:0e:d3:10:71:dc:80:84:42:2b:f4:8f:cd:1b:99:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:20:84:7E:15:D0:42:C5:A7:D1:9B:56:B9:57:B7:A4:91:DE:27:8D
            X509v3 Authority Key Identifier:
                keyid:67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/67666492B102F21109D368673B2B20745692E1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132342e302f32322d3232203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:86:69:aa:79:c6:a2:e1:10:b0:f1:9b:1a:58:d4:ee:1b:72:
         aa:78:9f:ce:ec:7e:f2:2d:72:5f:91:47:01:7c:6e:fb:29:e6:
         45:eb:ad:29:3f:ae:dd:95:7b:9f:76:f7:39:25:02:cd:3e:91:
         3a:57:86:12:00:07:3c:a6:67:1c:2c:1f:8e:35:bd:17:a0:4e:
         ad:8d:8e:50:bd:62:18:dd:1b:7f:a8:16:b4:a7:20:4e:fc:5e:
         6f:03:3c:86:c7:9a:75:84:18:28:b3:0e:92:b0:76:02:c2:e3:
         3d:3f:da:18:1b:b0:04:f6:33:77:14:33:32:9a:fd:66:f6:cf:
         a5:dc:08:1e:a0:69:05:f0:f5:2f:f4:ed:73:5d:26:a0:59:6e:
         d9:78:35:bc:5d:05:48:f2:5f:54:32:3f:0f:b7:87:34:e4:07:
         11:08:e7:e0:eb:ef:54:8f:eb:0c:9f:6d:d3:ce:51:3b:f4:a2:
         0a:93:d7:a4:e1:54:77:b5:09:8c:80:68:a8:2f:11:d1:26:e1:
         3a:aa:89:1f:64:3d:6f:f6:f8:04:2b:42:1c:de:89:74:3b:fe:
         fd:7a:62:9c:63:0e:33:e2:55:ce:61:c5:69:52:5a:d2:3d:ff:
         00:f0:e9:40:73:c5:44:c4:97:15:c8:2d:5e:cf:e1:16:0c:5a:
         5d:58:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org