Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132362e302f32332d3233203d3e20323633333935.roa
File:                     3137372e3132352e3132362e302f32332d3233203d3e20323633333935.roa (raw, json)
Hash identifier:          r4XT8f2d+MmcW0qEfo8FMB8xaqxYoWe//T/k0QX8QUg=
Subject key identifier:   11:E2:62:C6:A9:D2:4C:F8:6F:CB:9D:DF:2B:CE:0A:55:32:49:53:C0
Certificate issuer:       /CN=67666492B102F21109D368673B2B20745692E1A8
Certificate serial:       D2CAE9FA52FAD48B8A3E4054B3DDD2920BDA37
Authority key identifier: 67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132362e302f32332d3233203d3e20323633333935.roa
Signing time:             Sun 25 Dec 2022 17:22:16 +0000
ROA not before:           Sun 25 Dec 2022 17:17:16 +0000
ROA not after:            Sun 24 Dec 2023 17:22:16 +0000
asID:                     263395
IP address blocks:        177.125.126.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d2:ca:e9:fa:52:fa:d4:8b:8a:3e:40:54:b3:dd:d2:92:0b:da:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67666492B102F21109D368673B2B20745692E1A8
        Validity
            Not Before: Dec 25 17:17:16 2022 GMT
            Not After : Dec 24 17:22:16 2023 GMT
        Subject: CN=11E262C6A9D24CF86FCB9DDF2BCE0A55324953C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:89:79:4c:18:6b:0f:8a:14:b6:2a:2d:13:
                    04:aa:df:0a:84:d5:9a:c0:4f:26:02:14:ff:1e:78:
                    6e:53:25:24:92:90:0a:3f:b6:86:02:01:ff:e5:f9:
                    8e:83:5b:9c:5f:51:a2:ca:6d:7a:a2:27:5a:f0:60:
                    d9:df:7f:b3:58:a3:25:d8:90:0e:0e:a9:2f:0e:f2:
                    77:3a:16:59:2c:d8:d7:e4:ff:1c:2c:7b:15:cf:5f:
                    75:41:7b:0f:d7:6f:a8:4b:b4:d5:85:c4:8f:a6:c1:
                    c2:81:96:77:8c:1a:6c:7f:4f:be:ab:46:e4:bc:87:
                    b4:01:e7:ed:85:e8:1e:9c:99:65:07:47:d5:24:18:
                    6e:98:37:ee:0e:b8:b8:92:43:fb:70:d3:48:d0:b3:
                    6a:b0:12:32:11:97:91:39:fc:0e:87:c9:75:5b:34:
                    86:ad:dc:e4:1c:b3:40:0f:4c:30:61:ba:fc:3d:fa:
                    88:99:5d:20:c7:48:31:01:52:6d:b5:ab:d0:57:9f:
                    fa:3b:29:fd:9b:1c:2d:fe:7a:75:81:ca:77:e5:09:
                    80:52:e3:78:c4:2f:3d:af:4d:fd:71:88:0b:cf:5c:
                    4f:48:1b:56:78:2b:11:61:cc:58:14:75:dc:03:ea:
                    b5:46:c4:ac:ea:e1:00:4f:ef:db:2d:4c:52:db:2d:
                    b6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E2:62:C6:A9:D2:4C:F8:6F:CB:9D:DF:2B:CE:0A:55:32:49:53:C0
            X509v3 Authority Key Identifier:
                keyid:67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/67666492B102F21109D368673B2B20745692E1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132362e302f32332d3233203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:59:54:4b:fe:c6:06:de:a6:d2:58:eb:81:64:1d:39:2c:29:
         c5:68:5c:f7:8a:f7:8b:71:f3:cd:94:ba:3e:5b:9e:2c:76:ba:
         a4:59:ad:17:1b:31:86:c2:88:0e:9f:23:4d:ff:e7:21:3c:22:
         40:f5:12:f7:df:56:af:ca:1c:87:db:74:29:ef:09:26:9e:15:
         94:72:9d:18:8d:f4:58:c3:5a:ff:76:78:59:fd:cb:a8:88:58:
         92:ab:51:f2:f6:1c:46:60:10:3c:a3:5a:13:4e:3c:27:4f:70:
         e7:58:04:75:29:b9:fa:58:48:95:c5:03:54:93:f8:ce:d2:f8:
         b3:94:e5:4d:43:8e:71:da:59:f8:26:f1:44:7b:03:db:72:aa:
         ed:8e:be:dc:a2:f7:41:d5:bf:ae:2b:8f:6d:93:86:db:20:59:
         90:41:af:08:f2:7d:3f:58:9a:f1:83:43:a3:18:f1:62:71:91:
         2e:0e:f7:a3:a5:77:fd:b2:24:98:75:4c:37:96:bf:77:eb:2f:
         0d:37:bd:6f:3d:5f:c4:ed:f7:46:5e:97:0b:e5:da:23:9e:73:
         ec:38:32:13:a0:55:d6:5f:4b:d8:8c:cc:a8:5d:56:27:e4:c1:
         5c:aa:1d:df:bd:71:2a:cf:fc:b0:29:70:c2:25:e1:d3:1d:6f:
         75:60:de:97
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUANLK6fpS+tSLij5AVLPd0pIL2jcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc2NjY0OTJCMTAyRjIxMTA5RDM2ODY3M0IyQjIwNzQ1
NjkyRTFBODAeFw0yMjEyMjUxNzE3MTZaFw0yMzEyMjQxNzIyMTZaMDMxMTAvBgNV
BAMTKDExRTI2MkM2QTlEMjRDRjg2RkNCOURERjJCQ0UwQTU1MzI0OTUzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/PIl5TBhrD4oUtiotEwSq3wqE
1ZrATyYCFP8eeG5TJSSSkAo/toYCAf/l+Y6DW5xfUaLKbXqiJ1rwYNnff7NYoyXY
kA4OqS8O8nc6Flks2Nfk/xwsexXPX3VBew/Xb6hLtNWFxI+mwcKBlneMGmx/T76r
RuS8h7QB5+2F6B6cmWUHR9UkGG6YN+4OuLiSQ/tw00jQs2qwEjIRl5E5/A6HyXVb
NIat3OQcs0APTDBhuvw9+oiZXSDHSDEBUm21q9BXn/o7Kf2bHC3+enWBynflCYBS
43jELz2vTf1xiAvPXE9IG1Z4KxFhzFgUddwD6rVGxKzq4QBP79stTFLbLbbpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEeJixqnSTPhvy53fK84KVTJJU8AwHwYDVR0j
BBgwFoAUZ2ZkkrEC8hEJ02hnOysgdFaS4agwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVT
bjQvMC82NzY2NjQ5MkIxMDJGMjExMDlEMzY4NjczQjJCMjA3NDU2OTJFMUE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3NjY2NDkyQjEwMkYyMTEw
OUQzNjg2NzNCMkIyMDc0NTY5MkUxQTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZGb0ZxQng3eFN2U3JqMzJaRjJ6SnRCcUNMaXRFRUdEMng0OVZxZFE1U240LzAv
MzEzNzM3MmUzMTMyMzUyZTMxMzIzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzMzMzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbF9fjANBgkqhkiG9w0BAQsFAAOCAQEARllU
S/7GBt6m0ljrgWQdOSwpxWhc94r3i3HzzZS6PlueLHa6pFmtFxsxhsKIDp8jTf/n
ITwiQPUS999Wr8och9t0Ke8JJp4VlHKdGI30WMNa/3Z4Wf3LqIhYkqtR8vYcRmAQ
PKNaE048J09w51gEdSm5+lhIlcUDVJP4ztL4s5TlTUOOcdpZ+CbxRHsD23Kq7Y6+
3KL3QdW/riuPbZOG2yBZkEGvCPJ9P1ia8YNDoxjxYnGRLg73o6V3/bIkmHVMN5a/
d+svDTe9bz1fxO33Rl6XC+XaI55z7DgyE6BV1l9L2IzMqF1WJ+TBXKod371xKs/8
sClwwiXh0x1vdWDelw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org