Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32302e302f32342d3234203d3e203532363335.roa
File:                     3137372e3132352e32302e302f32342d3234203d3e203532363335.roa (raw, json)
Hash identifier:          Z2KnizDNQfztN2jdmA8yO3sNQNEfMhGS27Ul2HBhQY0=
Subject key identifier:   5C:E6:EB:E4:CC:D4:EA:3D:02:FB:3D:75:E4:9D:28:38:52:17:D1:6B
Certificate issuer:       /CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
Certificate serial:       7B9BF70A82EB73D50CF9219C87EA0B22C337FA39
Authority key identifier: 63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32302e302f32342d3234203d3e203532363335.roa
Signing time:             Fri 16 Dec 2022 19:00:00 +0000
ROA not before:           Fri 16 Dec 2022 18:55:00 +0000
ROA not after:            Fri 15 Dec 2023 19:00:00 +0000
asID:                     52635
IP address blocks:        177.125.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9b:f7:0a:82:eb:73:d5:0c:f9:21:9c:87:ea:0b:22:c3:37:fa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ED338701F5B4BCE8EF3D9881EE5EF1299FD237
        Validity
            Not Before: Dec 16 18:55:00 2022 GMT
            Not After : Dec 15 19:00:00 2023 GMT
        Subject: CN=5CE6EBE4CCD4EA3D02FB3D75E49D28385217D16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:2f:27:6e:c7:ad:c1:e3:a8:78:53:1f:a4:
                    5c:4d:9d:e7:28:27:3b:d6:9c:09:93:06:74:26:48:
                    8f:15:fd:6a:d1:da:11:e9:25:17:45:a1:5f:68:a3:
                    22:8e:4e:41:23:56:01:f5:6e:1d:ba:e3:89:19:77:
                    e8:d3:08:06:d0:d8:6e:b0:a7:30:0b:7d:d2:03:e5:
                    7f:fb:83:91:9e:c2:5f:24:46:1d:e6:00:53:90:b9:
                    ce:07:b7:f5:aa:10:23:c9:dd:ef:b0:48:b0:18:a0:
                    f5:bb:ee:da:ff:18:ad:d3:06:87:df:65:01:ff:4a:
                    7e:47:09:8c:8d:c6:cd:6d:8d:9f:22:07:39:2d:f0:
                    a1:df:e8:a5:b1:96:c9:66:a7:3f:a5:da:0d:5d:9b:
                    0e:7b:36:5b:f3:c3:6d:8f:7b:db:f7:05:4a:0d:4f:
                    c5:a0:87:ed:5e:8c:0a:29:aa:b8:00:c9:98:f3:d4:
                    cc:42:d0:72:a5:aa:cc:92:49:e4:1e:cd:bd:a9:f8:
                    09:c0:36:86:2a:d7:84:c4:81:e6:1a:1c:91:b4:61:
                    eb:5f:22:6a:5c:5c:dd:01:62:b1:0d:79:a4:99:cd:
                    83:19:fb:df:e8:10:f1:72:23:ac:c4:2a:d0:b7:7c:
                    ba:44:1b:17:bb:14:e7:62:b8:23:f8:e0:eb:eb:d9:
                    80:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E6:EB:E4:CC:D4:EA:3D:02:FB:3D:75:E4:9D:28:38:52:17:D1:6B
            X509v3 Authority Key Identifier:
                keyid:63:ED:33:87:01:F5:B4:BC:E8:EF:3D:98:81:EE:5E:F1:29:9F:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63ED338701F5B4BCE8EF3D9881EE5EF1299FD237.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tJGjvr6ueVqSSbFuvgSHnzNEyR2VkJHwMcu9TA9mamE/0/3137372e3132352e32302e302f32342d3234203d3e203532363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e6:63:4b:0d:69:a5:c4:5b:16:0d:c0:09:d9:1e:0a:75:a2:69:
         16:ce:3a:07:79:4c:cc:27:35:17:c2:c8:b1:e4:f8:93:b6:aa:
         6f:72:91:42:1f:cc:16:e8:7c:1f:44:1d:61:60:ba:3d:36:29:
         e2:ed:43:8c:5d:15:ea:ba:1f:4a:2b:48:39:ba:6a:e6:4b:63:
         c3:44:72:dc:ce:35:5d:d2:6f:24:74:48:43:87:ea:d7:7c:cc:
         6e:65:f2:ab:b4:34:ce:be:f3:c1:5c:3b:3b:ad:db:b1:9a:6f:
         bb:42:27:53:de:c0:91:b3:5d:77:00:fe:7d:9a:9b:ef:56:7d:
         bc:9f:7b:ec:1e:83:c8:0a:66:d3:c3:fe:4a:9d:b8:4a:25:a9:
         45:c2:3b:b1:bd:82:bc:c9:59:a4:7a:c2:13:83:57:af:ad:23:
         46:83:e6:43:2e:bb:4b:5d:e4:31:56:6d:40:91:97:f0:e4:bc:
         99:ac:8d:1a:87:30:6c:92:70:35:43:d9:db:09:5f:7c:40:2b:
         62:4f:3b:2a:d4:4b:f5:6d:d3:64:00:37:0a:f2:82:c7:d9:81:
         58:55:f0:bd:62:5f:cf:96:f0:c4:0d:e7:09:a6:8f:53:c9:7a:
         63:89:7b:3f:71:53:b5:76:73:09:01:0f:b6:0e:c3:96:b6:d3:
         c5:70:82:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org