Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3231312e302f32342d3234203d3e20323632333534.roa
File:                     3137372e3132352e3231312e302f32342d3234203d3e20323632333534.roa (raw, json)
Hash identifier:          JkyC62/ro93Acb31xR/f3GdmxnimKXhrYNz/rm04fFA=
Subject key identifier:   6F:37:02:64:60:85:85:D5:34:3E:8B:8E:7C:A4:E9:FD:EC:EF:5A:CC
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       1C8F65EB8F71B77E532D5E6FD7F5011DF3DDEDCF
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3231312e302f32342d3234203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:34 +0000
ROA not before:           Wed 06 Mar 2024 14:09:34 +0000
ROA not after:            Wed 05 Mar 2025 14:14:34 +0000
asID:                     262354
IP address blocks:        177.125.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8f:65:eb:8f:71:b7:7e:53:2d:5e:6f:d7:f5:01:1d:f3:dd:ed:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:34 2024 GMT
            Not After : Mar  5 14:14:34 2025 GMT
        Subject: CN=6F370264608585D5343E8B8E7CA4E9FDECEF5ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:52:9c:f7:34:a4:a4:44:dd:34:c0:fa:06:
                    5a:c7:c4:a3:3b:1d:17:63:5f:f4:ce:3b:75:65:23:
                    c3:cf:98:25:2b:0d:1f:1b:e6:b1:19:a9:8b:dc:7a:
                    a8:f1:00:bf:b9:63:d1:73:ae:bc:1f:90:2f:47:02:
                    88:da:ec:06:90:45:cf:31:3f:39:32:55:d3:f6:69:
                    23:9a:98:36:61:22:a7:6e:bb:29:c1:0e:f3:86:77:
                    ce:1f:28:e9:50:da:d5:e6:f5:b4:7a:ba:3f:f3:01:
                    19:38:5f:be:0a:a7:2d:44:1d:50:54:16:f1:6f:4b:
                    3c:e2:98:94:24:55:e3:f3:c9:be:bd:ea:92:fe:4c:
                    f9:81:d9:83:5f:2b:33:4a:aa:38:f1:d8:c3:f8:1c:
                    65:e7:00:38:6c:fc:62:5f:55:e0:88:a5:ff:05:01:
                    37:01:d9:2f:26:1f:07:80:a0:35:c1:e0:21:c2:cf:
                    76:11:bd:96:88:59:61:f4:74:5c:b6:84:de:37:32:
                    73:0d:af:97:62:30:e9:a6:19:e5:76:07:da:7a:d5:
                    a8:72:23:d4:a3:9d:19:50:fa:39:b6:8b:6c:88:7d:
                    31:af:d3:d3:54:de:71:c3:80:57:3a:45:81:cb:e2:
                    af:c9:d9:cb:07:50:18:bb:a2:48:39:5b:ac:08:01:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:37:02:64:60:85:85:D5:34:3E:8B:8E:7C:A4:E9:FD:EC:EF:5A:CC
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3231312e302f32342d3234203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:fe:6c:fa:bc:63:6a:43:f8:f7:17:0e:9f:2b:e5:6c:42:fe:
         c6:77:de:7b:ed:78:22:ae:ff:61:b5:d4:f7:40:75:08:82:60:
         ef:9a:d0:5f:6c:5d:5f:16:60:6e:54:5b:4e:10:b5:c3:5a:97:
         df:81:2e:1f:e3:dd:91:56:e4:11:cf:7c:e0:dc:ab:06:f4:0c:
         7a:87:24:40:c3:41:d6:13:2c:55:97:2a:a4:fd:2d:4d:84:9d:
         cb:8e:95:79:0e:11:8a:d9:14:cb:9c:a7:6b:a6:2f:1e:63:0a:
         4f:88:43:b3:88:4e:aa:b7:3c:f4:0e:81:2c:9a:62:d1:5c:2f:
         c1:6e:23:a0:cb:34:e5:3c:d9:b9:6f:cf:3d:ff:53:d8:bb:8f:
         d1:52:db:68:8d:f7:2a:50:22:17:eb:00:7c:04:79:97:a3:3d:
         36:cb:fd:8a:c8:1f:0f:f4:04:b4:0b:1f:cf:0c:83:32:aa:85:
         e0:91:7a:fd:aa:12:b6:70:f8:7e:ba:ec:a3:81:da:20:ea:9b:
         57:fa:ff:74:9f:46:9e:2a:1b:e0:e8:59:ea:31:fb:b5:74:ca:
         5d:d4:db:71:45:64:6d:2f:ca:ab:f3:d1:04:6b:05:cf:f7:ee:
         eb:8b:e8:55:38:8e:85:45:3d:b5:ce:f5:63:43:7b:82:fc:0f:
         83:71:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org