Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3231322e302f32322d3232203d3e20323632333534.roa
File:                     3137372e3132352e3231322e302f32322d3232203d3e20323632333534.roa (raw, json)
Hash identifier:          g+19SXJN++vurNHUsLdl2QXfEdIp1uprZ7Hn4oE6qvk=
Subject key identifier:   E8:79:9C:96:D9:D3:98:CE:9F:26:2C:8B:5C:81:8F:04:01:B9:E7:80
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       212343CC9E9EC3B5539D7707888B328FE71BA71C
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3231322e302f32322d3232203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:32 +0000
ROA not before:           Wed 06 Mar 2024 14:09:32 +0000
ROA not after:            Wed 05 Mar 2025 14:14:32 +0000
asID:                     262354
IP address blocks:        177.125.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:23:43:cc:9e:9e:c3:b5:53:9d:77:07:88:8b:32:8f:e7:1b:a7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:32 2024 GMT
            Not After : Mar  5 14:14:32 2025 GMT
        Subject: CN=E8799C96D9D398CE9F262C8B5C818F0401B9E780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:eb:e7:4a:42:93:bd:66:ea:95:a8:ce:f8:
                    91:85:9d:91:37:87:38:92:64:32:27:e3:82:03:ef:
                    a3:cc:72:8e:b6:8b:65:51:13:e5:f8:ee:d9:9d:57:
                    83:d9:7a:cb:5d:a0:ff:98:54:94:fb:e8:44:b1:fc:
                    97:d0:38:d7:57:60:72:67:56:16:ed:2c:44:6d:a9:
                    67:03:1a:62:b7:4d:b5:83:2e:25:51:98:f8:33:9f:
                    53:fb:59:0c:bb:59:90:ea:22:42:4f:f9:43:a8:43:
                    63:51:e0:41:d4:c3:d4:cb:59:28:e3:3a:d8:4c:fb:
                    5b:0e:12:ad:40:16:44:ed:4d:d5:93:6c:db:c9:54:
                    5d:d8:f3:d5:8b:ea:50:be:8a:1f:57:15:72:70:b1:
                    1f:1f:06:90:d8:46:39:1f:52:18:ca:42:68:df:a7:
                    4f:a5:5b:97:ed:03:20:26:6a:1a:60:ef:a3:b4:fb:
                    65:59:fa:d8:61:10:c4:6d:6b:81:1e:56:46:0e:ec:
                    cf:dc:98:77:a8:7a:da:3a:36:77:9c:3e:f6:47:95:
                    05:a3:a2:a9:4b:ec:6f:df:7b:ab:98:2a:cb:c4:67:
                    f8:3e:9e:06:39:59:7a:29:dd:f8:a6:60:57:a9:e2:
                    89:3f:98:a2:65:c4:30:ce:4f:36:b1:23:4c:71:e0:
                    e3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:79:9C:96:D9:D3:98:CE:9F:26:2C:8B:5C:81:8F:04:01:B9:E7:80
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3231322e302f32322d3232203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:40:b3:aa:00:7a:06:4c:a9:eb:41:f5:f3:48:7f:4f:5b:2f:
         7d:a9:04:58:12:f9:4d:60:94:ca:b2:7b:89:b2:a1:fb:d7:6f:
         85:c8:2f:76:d5:ea:43:9f:d2:98:ae:dd:0b:87:53:8e:d6:8a:
         40:cb:6d:a0:98:d6:7e:2f:e1:12:b2:d4:15:ac:76:c5:a9:6f:
         95:07:83:7a:12:d1:dd:45:43:a5:6b:6c:b9:67:21:39:da:83:
         0f:ca:45:da:e7:a4:50:55:bd:81:77:57:5e:c6:55:17:82:86:
         f2:98:d4:41:96:bb:3d:44:1b:61:69:ed:aa:2d:8b:42:6f:b6:
         58:ca:c7:bf:a7:7f:9f:75:84:46:22:2a:08:5f:4b:44:75:80:
         35:51:f0:ce:b2:a2:5b:17:ed:86:cd:54:15:6f:4d:f1:65:55:
         6a:a9:8e:63:38:cb:de:51:f5:d1:82:69:9c:eb:a4:ba:f9:fc:
         8c:95:e6:72:f8:c4:e3:17:85:45:e5:ff:02:38:38:f3:0d:e0:
         e0:60:29:f3:42:fd:e7:57:e4:95:66:f4:08:26:78:c8:cd:80:
         a6:f3:8e:3f:ae:c1:f8:59:f1:a4:7f:a0:dd:02:e9:2e:2b:82:
         be:89:e5:47:a9:54:63:22:51:22:59:ff:98:81:e9:db:ea:8f:
         1c:44:6f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org