Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132342e302f32332d3233203d3e20323633333935.roa
File:                     3137372e3132352e3132342e302f32332d3233203d3e20323633333935.roa (raw, json)
Hash identifier:          7nNK/f8T6zLm0My9wmZSIzPS/FZgJnjC03vfTvx6KFg=
Subject key identifier:   D3:AA:77:46:B0:CA:FF:2A:42:8C:2D:2B:51:82:27:0D:46:D8:3E:CF
Certificate issuer:       /CN=67666492B102F21109D368673B2B20745692E1A8
Certificate serial:       7DEA669D326A7452FBD29B9A2413A620D3294775
Authority key identifier: 67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132342e302f32332d3233203d3e20323633333935.roa
Signing time:             Sun 25 Dec 2022 17:22:17 +0000
ROA not before:           Sun 25 Dec 2022 17:17:17 +0000
ROA not after:            Sun 24 Dec 2023 17:22:17 +0000
asID:                     263395
IP address blocks:        177.125.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ea:66:9d:32:6a:74:52:fb:d2:9b:9a:24:13:a6:20:d3:29:47:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67666492B102F21109D368673B2B20745692E1A8
        Validity
            Not Before: Dec 25 17:17:17 2022 GMT
            Not After : Dec 24 17:22:17 2023 GMT
        Subject: CN=D3AA7746B0CAFF2A428C2D2B5182270D46D83ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f3:c4:5d:f8:73:ab:8e:06:64:43:32:cc:e1:
                    3e:67:1f:d5:e9:25:51:26:1b:4f:9a:a7:8c:ca:82:
                    02:11:3a:a5:8d:e4:0d:37:da:03:20:81:9e:a2:f1:
                    00:23:4b:98:0b:51:fa:49:02:5d:93:5d:35:68:4e:
                    f0:c7:5b:0a:52:98:78:2b:84:4f:36:36:05:e7:b8:
                    e3:a8:0c:8d:c4:e5:10:a5:5d:d8:6e:40:db:3b:6f:
                    bc:f9:cc:f1:f7:45:f3:8a:c3:27:c9:f9:81:03:90:
                    81:c9:ba:3b:d3:fc:38:0e:00:ec:6d:a6:3b:a1:14:
                    4a:2c:f0:e8:d4:92:eb:40:43:ef:89:12:92:fc:3b:
                    5c:5c:73:5a:bc:74:20:42:22:3d:be:8d:2d:25:02:
                    77:fd:97:d9:7e:92:ff:49:36:5a:3e:e2:78:44:74:
                    cb:43:2c:8a:0f:d9:27:eb:65:bf:3b:5c:3c:d7:96:
                    b2:e4:d4:ff:fc:c4:fe:9b:f1:74:f7:8b:8f:ee:27:
                    b2:19:af:a7:75:46:70:d0:fe:70:f3:48:12:22:0a:
                    91:6f:27:e8:4a:05:f2:bc:e2:08:b9:3c:e6:0f:a6:
                    2b:2e:42:df:fc:0d:0b:c3:e8:3a:d5:ee:1c:f3:06:
                    39:72:03:fd:80:cd:99:33:12:c8:73:15:0c:46:09:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AA:77:46:B0:CA:FF:2A:42:8C:2D:2B:51:82:27:0D:46:D8:3E:CF
            X509v3 Authority Key Identifier:
                keyid:67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/67666492B102F21109D368673B2B20745692E1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132342e302f32332d3233203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:1c:14:c3:db:57:27:30:e6:91:3d:8f:36:b0:01:82:77:d4:
         4e:9e:01:01:76:86:c1:22:f3:62:f2:b1:29:0f:0c:de:aa:b6:
         83:5c:66:3b:48:2a:e6:c7:c9:6e:94:4f:37:3c:1b:6a:97:bb:
         e7:4b:fd:1f:80:99:63:df:cc:86:e2:5a:84:8a:f3:e2:24:6d:
         53:51:e3:09:4d:7d:10:5f:5b:20:b0:4a:e4:1a:b5:ec:2a:54:
         ff:f3:1f:7d:46:c8:a3:96:d3:90:30:8d:44:5c:3d:31:aa:60:
         3c:ed:70:48:86:02:a0:14:92:37:53:f2:67:76:c3:b8:38:95:
         c3:64:cd:0b:c4:6f:c2:5b:0b:40:2f:00:2e:02:e1:67:83:c5:
         e4:57:7a:9f:0c:3b:f7:1d:1f:2e:49:ae:bd:1b:ca:b5:6c:c4:
         27:b8:03:a3:7a:37:37:64:81:bb:8c:b8:0c:f9:f6:4a:66:23:
         19:51:b1:3f:e6:be:5e:b5:3c:e1:67:e3:6a:c8:4f:fa:ca:e4:
         17:04:bc:7e:24:5a:5c:32:d1:a8:5b:20:2b:7a:0f:b8:4e:27:
         02:e9:15:2f:75:9e:23:3b:ee:35:f4:e1:90:de:63:54:a5:7a:
         88:4f:89:61:60:41:14:d8:0a:1d:d2:77:5d:40:8e:97:bc:3b:
         9d:aa:5c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org