Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3231322e302f32332d3233203d3e20323632333534.roa
File:                     3137372e3132352e3231322e302f32332d3233203d3e20323632333534.roa (raw, json)
Hash identifier:          c/AZA0hxJx9ojPcrWFEOnmqHKvm7eYnaYr3FpojpHjs=
Subject key identifier:   F4:E1:2F:BD:7D:93:57:54:8A:94:DD:B7:EB:C5:CF:80:D3:9A:F2:52
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       5E304E068F32F07A6A209682C116E83E3336279A
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3231322e302f32332d3233203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:35 +0000
ROA not before:           Wed 06 Mar 2024 14:09:35 +0000
ROA not after:            Wed 05 Mar 2025 14:14:35 +0000
asID:                     262354
IP address blocks:        177.125.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:30:4e:06:8f:32:f0:7a:6a:20:96:82:c1:16:e8:3e:33:36:27:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:35 2024 GMT
            Not After : Mar  5 14:14:35 2025 GMT
        Subject: CN=F4E12FBD7D9357548A94DDB7EBC5CF80D39AF252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:86:d6:51:f6:4e:f0:7a:c1:d4:4d:f0:65:
                    21:32:92:b0:28:86:37:1e:56:37:58:35:27:55:d2:
                    50:80:a4:3a:07:52:33:90:b3:f6:bd:e4:1f:5b:89:
                    3c:75:35:02:5b:21:ee:60:ea:2e:05:8d:2e:2a:c3:
                    e1:d9:d3:30:1d:11:aa:33:0d:8e:b9:ff:00:7b:95:
                    db:8e:ef:78:e0:51:8c:60:76:80:56:99:fe:0d:be:
                    85:e4:57:38:12:eb:52:31:84:c4:be:31:b0:22:b7:
                    48:9e:ad:35:83:ac:0b:d1:c7:9d:56:e2:4b:0f:e0:
                    01:48:d7:12:f9:a9:a2:1b:0e:de:74:ac:c9:77:43:
                    8b:20:b4:b6:da:75:b4:cd:9c:5b:a1:1e:13:26:79:
                    0b:85:4d:a5:83:f7:1b:08:ca:f9:29:9b:e0:14:9a:
                    a1:1c:cc:a5:be:c8:ed:e4:69:fd:bf:08:ad:8e:23:
                    79:f2:9a:a3:44:ef:5d:51:69:ed:0a:e4:c5:fa:0a:
                    0d:7c:a7:18:a3:a1:40:1e:1e:12:cd:83:08:30:66:
                    7e:50:a0:89:3a:06:68:65:fe:77:22:45:90:2c:6e:
                    0a:a7:91:1d:e3:01:ad:2d:99:e7:0d:a0:dd:36:68:
                    a0:86:fa:1c:81:f3:40:1e:55:4e:c0:67:a8:0e:36:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E1:2F:BD:7D:93:57:54:8A:94:DD:B7:EB:C5:CF:80:D3:9A:F2:52
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3137372e3132352e3231322e302f32332d3233203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:c6:76:e8:98:0e:01:6e:b2:c0:30:d5:41:0b:40:0a:a4:b5:
         97:61:34:3b:59:50:1b:0e:bc:4b:97:40:84:c6:43:46:10:cf:
         af:c3:41:67:98:b9:e8:b0:3b:c7:57:3a:e2:b5:b6:4c:e6:73:
         3d:0c:00:c2:e4:5d:96:d6:a7:d4:2e:fc:da:4f:ac:44:4d:9d:
         80:ae:b4:8b:8e:f3:b0:fe:a0:a4:7c:2e:31:47:24:52:51:15:
         6e:f2:4a:90:7e:26:3b:7e:5d:bb:79:b7:b3:fb:08:f5:fd:2b:
         61:3d:20:4f:22:3a:ed:25:f6:89:3b:76:8e:b9:52:a7:10:e8:
         9c:58:61:79:78:70:3e:a6:99:d2:43:eb:a9:84:bf:cd:f2:e1:
         f0:2e:57:49:22:a1:8a:dd:a5:78:50:06:a3:e3:f4:d4:4c:32:
         02:0e:dc:6f:71:89:a3:1b:c6:98:6f:e0:8b:31:61:bc:11:a7:
         d0:b9:90:e3:2c:d3:d5:4e:c3:f9:c2:2d:df:c4:dc:43:61:9a:
         11:dc:ad:92:8d:dc:37:0b:11:9e:f3:d4:61:27:e4:fe:00:59:
         e2:f2:88:88:22:63:65:49:e2:ad:1f:e5:f6:1a:2c:f8:f9:c1:
         bb:ca:71:43:5b:75:15:88:1f:c0:84:32:5b:db:4c:41:c5:d7:
         e1:06:ec:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org