Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32302e302f32332d3233203d3e203532363335.roa
File:                     3137372e3132352e32302e302f32332d3233203d3e203532363335.roa (raw, json)
Hash identifier:          s2vuf3rxFxR/W1N+JDOvpeNpsLBcno9bQZ8aTFYG7hE=
Subject key identifier:   E4:C8:04:5F:77:DD:C9:E8:27:BC:E7:69:25:B0:83:39:A8:80:E0:3B
Certificate issuer:       /CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Certificate serial:       1E4B084A82E0AA5F68C527329329B69D892297A7
Authority key identifier: 63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32302e302f32332d3233203d3e203532363335.roa
Signing time:             Fri 16 Dec 2022 19:00:00 +0000
ROA not before:           Fri 16 Dec 2022 18:55:00 +0000
ROA not after:            Fri 15 Dec 2023 19:00:00 +0000
asID:                     52635
IP address blocks:        177.125.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4b:08:4a:82:e0:aa:5f:68:c5:27:32:93:29:b6:9d:89:22:97:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
        Validity
            Not Before: Dec 16 18:55:00 2022 GMT
            Not After : Dec 15 19:00:00 2023 GMT
        Subject: CN=E4C8045F77DDC9E827BCE76925B08339A880E03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:61:56:72:50:1f:76:ca:6f:7c:b3:c0:31:
                    78:65:db:e9:7f:07:d5:e5:d9:4d:6c:d0:32:5b:63:
                    7f:5f:6f:ba:e7:bc:86:df:96:41:a2:41:04:67:e9:
                    d0:96:2e:ad:ac:47:02:fc:64:31:59:cc:4e:26:2d:
                    2b:8c:6a:7d:38:b0:48:0f:f1:d1:31:cb:d7:91:a3:
                    36:e1:a0:0c:53:ea:21:02:b5:a4:3b:66:72:f5:e1:
                    8d:d2:4b:50:10:68:7d:4a:59:61:26:4d:a0:a6:ce:
                    cb:a3:48:93:53:4c:6b:c5:34:85:f1:9d:32:41:fb:
                    ad:32:01:3e:e3:f7:65:83:8a:6f:98:97:06:4f:cc:
                    0e:13:7d:b4:2e:3d:88:ee:39:a1:b7:61:d4:ac:cd:
                    f9:f3:0f:ca:fa:25:34:0c:d6:45:dc:6c:cf:06:4e:
                    0d:d3:ce:c9:f1:b4:4f:ce:34:5d:d4:7b:0d:ad:94:
                    84:ea:78:da:56:a9:36:00:b7:55:a2:7f:40:57:3a:
                    9f:9d:0a:cb:1a:87:d0:85:87:20:32:f4:7e:8c:ad:
                    67:3b:46:8c:7b:e6:3c:9d:df:c0:1c:c3:a4:c5:2c:
                    9c:e4:99:29:29:d9:9b:f8:be:15:27:8a:39:ec:7c:
                    97:a3:f7:42:e0:66:8d:a8:b6:af:bd:b3:18:18:3d:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C8:04:5F:77:DD:C9:E8:27:BC:E7:69:25:B0:83:39:A8:80:E0:3B
            X509v3 Authority Key Identifier:
                keyid:63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32302e302f32332d3233203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:62:40:95:41:25:80:62:40:9d:2e:17:06:aa:1a:9f:51:7f:
         0a:81:bc:e6:40:6b:38:95:e0:f7:a8:0e:d7:30:1b:28:e0:ea:
         44:a2:61:b0:d9:c8:65:83:4e:ed:c6:a5:36:7b:f5:fe:99:08:
         52:8c:5f:68:7c:37:48:24:4a:98:fe:86:56:e2:c4:d0:e8:10:
         9e:c6:b8:c7:86:5e:2c:39:74:4e:79:2a:50:89:25:69:ec:6c:
         c6:44:25:8c:01:3c:d7:f3:69:97:58:36:8e:d4:13:15:3a:06:
         4f:4f:fd:1f:4e:73:ee:eb:66:02:bf:88:b8:48:23:ef:7c:03:
         c3:e6:64:37:21:fb:8b:6c:b5:16:3c:68:3e:ca:8e:4c:69:5e:
         ae:47:bf:e3:3a:02:57:ec:a1:1b:c5:c6:3e:23:ab:c5:79:a2:
         7e:29:2b:5a:95:f9:33:16:71:33:0d:3d:7c:e8:31:67:58:c0:
         ea:46:35:42:bc:4d:bf:e2:cc:1f:31:60:bb:9c:b4:35:8e:89:
         1f:be:e2:26:3a:aa:51:63:ad:2d:74:2e:40:82:b7:a8:a9:fc:
         10:af:89:da:b4:fc:8a:c7:fb:4d:d2:34:b7:00:2b:86:02:90:
         ff:d9:66:ed:17:3d:25:7d:04:95:58:c8:a0:8c:19:06:0e:6b:
         21:40:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org