Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e39352e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e39352e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          MAoIEqIbO5+5lZ35KpC140tr4W1dvuKIfSL664Mhzd4=
Subject key identifier:   67:09:73:1A:3F:76:E4:FF:3B:20:E7:4A:90:D1:69:9D:27:CC:DA:F3
Certificate issuer:       /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial:       4545CF421E04337A4667E17485234F596E5A3346
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e39352e302f32342d3234203d3e20323632333532.roa
Signing time:             Mon 25 Sep 2023 17:01:28 +0000
ROA not before:           Mon 25 Sep 2023 16:56:28 +0000
ROA not after:            Mon 23 Sep 2024 17:01:28 +0000
asID:                     262352
IP address blocks:        177.126.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:45:cf:42:1e:04:33:7a:46:67:e1:74:85:23:4f:59:6e:5a:33:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
        Validity
            Not Before: Sep 25 16:56:28 2023 GMT
            Not After : Sep 23 17:01:28 2024 GMT
        Subject: CN=6709731A3F76E4FF3B20E74A90D1699D27CCDAF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7f:cc:7f:30:f6:03:09:10:cc:c6:06:76:9c:
                    b9:fd:1d:bf:7d:a3:5d:19:d3:14:e6:92:28:38:f2:
                    0e:c0:94:d5:dd:dd:5a:7b:1d:37:9f:63:12:5b:38:
                    c7:48:bd:a3:46:20:56:fa:68:b5:ef:f3:49:b7:d0:
                    5a:7f:6e:4d:28:ff:8a:f3:ce:74:e2:3c:0f:69:00:
                    93:44:d8:fc:68:2c:79:92:6f:ee:e5:18:37:a9:fd:
                    a6:24:0b:1d:19:0b:f6:d0:32:8b:61:e7:63:25:12:
                    59:89:e7:5d:19:5a:5f:9d:e0:23:51:64:da:b4:22:
                    f4:25:4b:73:77:2a:ef:a4:73:2f:39:9a:80:31:6d:
                    b0:bf:f1:9c:99:ab:2f:90:0c:60:ee:90:57:60:e2:
                    71:93:a0:0b:57:60:52:f0:9a:41:42:d3:fc:f3:1e:
                    89:21:02:6e:ea:35:ea:22:0f:ae:33:9e:12:d5:1b:
                    1f:c5:e7:e1:ea:fb:6f:73:39:b1:20:ab:69:a9:3a:
                    48:de:72:02:82:87:06:38:25:f4:ae:b8:fa:e6:bf:
                    f4:e1:e1:9c:37:a9:46:71:d2:5d:17:7a:57:c3:68:
                    98:fb:11:46:4f:07:63:8e:59:37:97:56:f3:52:f2:
                    24:34:91:10:8d:7c:66:fe:cc:b4:16:a0:19:82:18:
                    e9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:09:73:1A:3F:76:E4:FF:3B:20:E7:4A:90:D1:69:9D:27:CC:DA:F3
            X509v3 Authority Key Identifier:
                keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/3137372e3132362e39352e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:48:89:11:78:46:ad:f7:c2:b7:1e:ba:12:13:74:41:52:84:
         cb:ac:60:41:e2:49:a8:78:ed:0a:4c:26:5f:81:d6:a6:1e:ea:
         5a:a8:f1:3b:5a:6e:35:ed:8a:40:b4:06:26:93:f2:56:66:83:
         af:3c:71:72:ed:34:00:92:56:30:db:88:ad:91:82:2d:92:4f:
         48:f5:8e:fc:f7:f5:3d:dc:5c:9a:49:c8:3f:d7:a8:a2:a1:d9:
         cc:46:7f:af:79:7c:a6:4d:5f:c1:4c:c1:4e:00:bd:ae:91:dd:
         aa:92:bb:20:67:ab:1b:75:d2:40:20:69:84:b5:c1:38:c6:c0:
         c0:fc:f7:3c:42:b4:06:0e:8c:5a:e8:fe:74:7b:c1:b2:84:78:
         44:08:cd:a6:68:8b:0d:43:40:0f:35:48:db:6d:76:f9:c4:5a:
         05:44:c7:1e:c2:2c:63:f0:7f:1d:04:79:e8:16:83:f2:8f:1d:
         39:7e:6e:fb:05:9a:77:cb:f9:77:ac:98:36:13:e6:39:5d:5f:
         6d:13:e4:3b:d8:c1:93:66:7c:64:e8:c8:69:de:95:55:93:84:
         30:f1:be:8c:b0:2c:29:45:34:48:ab:77:7b:f6:7d:ec:73:18:
         fe:6f:ef:b3:e4:78:dd:0c:aa:7c:31:5f:cd:5c:f4:fa:3e:6f:
         ab:1f:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org