Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3132362e31302e302f32332d3234203d3e20323635333033.roa
File:                     3137372e3132362e31302e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          OQKz8cz2ToP69EVNhakQ5y/YlULFokIg4I//YjDXP10=
Subject key identifier:   10:3E:BD:20:79:92:4C:2E:22:75:C0:5D:EE:30:46:06:B5:C1:16:BE
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       52B76A15CAE35C024E6C8BA02AC3DFDA7826EC48
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3132362e31302e302f32332d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:06:54 +0000
ROA not before:           Mon 08 Apr 2024 14:01:54 +0000
ROA not after:            Mon 07 Apr 2025 14:06:54 +0000
asID:                     265303
IP address blocks:        177.126.10.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b7:6a:15:ca:e3:5c:02:4e:6c:8b:a0:2a:c3:df:da:78:26:ec:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 14:01:54 2024 GMT
            Not After : Apr  7 14:06:54 2025 GMT
        Subject: CN=103EBD2079924C2E2275C05DEE304606B5C116BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:cf:0d:2d:62:e7:01:c5:56:22:ae:fa:55:
                    a7:00:2e:ba:81:a2:cf:ea:11:13:a6:4c:32:b0:6d:
                    19:f1:51:2f:59:1d:3f:9a:46:c0:9b:5a:95:24:f7:
                    52:5c:ec:c4:30:fa:3c:33:42:88:e7:93:85:ea:86:
                    eb:67:f7:91:f2:96:5c:64:94:bb:a5:98:56:28:cd:
                    6c:33:c0:cf:2d:8c:bc:9b:7a:bb:4a:52:a2:75:66:
                    1e:54:f1:1b:99:7a:35:88:12:b6:f6:d5:bb:81:08:
                    d5:0f:2e:9e:c5:e7:34:c3:27:38:e8:c2:72:85:d3:
                    23:33:5c:42:ef:86:4a:e9:d0:b6:86:b4:6c:1d:66:
                    c4:93:ee:d2:ab:5f:80:dc:ec:0d:57:50:b9:0e:28:
                    a6:5a:89:e2:16:41:1a:06:29:0d:9c:28:ac:d2:46:
                    49:0d:86:fe:b7:8c:52:eb:f5:83:3e:d5:e6:35:04:
                    7a:98:32:f2:7e:73:60:c2:d6:2d:39:69:0c:53:ff:
                    73:c2:db:af:35:22:b3:be:9f:5b:03:af:bf:e5:f2:
                    16:22:a6:5d:bd:10:76:a9:5d:f7:7f:04:52:5f:9d:
                    a0:21:55:9f:cc:6c:9c:3c:57:73:ad:5d:4b:fe:60:
                    26:f8:57:99:7c:4f:ea:db:b8:5a:fe:5f:48:38:21:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3E:BD:20:79:92:4C:2E:22:75:C0:5D:EE:30:46:06:B5:C1:16:BE
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3137372e3132362e31302e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:f5:13:ae:ae:22:e4:72:c3:20:0e:9d:70:7a:df:ac:64:c5:
         76:c1:2f:86:84:ab:9d:99:ee:b3:e6:c3:a8:7c:93:fc:fa:f9:
         71:b2:c3:f4:4e:60:ba:d0:ea:23:e5:bb:e3:d3:e0:cc:bf:e1:
         35:58:34:b5:c7:86:c0:eb:e6:e9:23:07:ef:a6:a7:cf:9f:79:
         fa:0d:ea:b2:6d:9c:7e:db:a5:eb:b5:57:66:a6:aa:36:ac:8e:
         e9:c1:c8:11:3f:a8:18:aa:3b:cd:d0:0e:c7:58:75:df:37:90:
         a0:d2:82:8a:3e:cd:6d:e9:12:4d:03:89:1c:43:82:22:2f:24:
         fb:9c:e6:33:80:48:3a:48:4f:11:a6:4b:46:8f:33:46:e5:d1:
         ea:46:37:dc:c3:ca:dc:83:cf:e9:cb:ee:5c:36:10:73:e0:99:
         6b:f5:b1:f0:26:e9:49:be:48:96:37:45:d3:e5:df:31:5d:43:
         e5:64:8c:be:35:e0:4a:2b:2b:a8:ac:74:a2:50:99:67:ac:87:
         58:57:b9:70:c6:cd:c8:06:5b:4d:0a:09:ab:a5:16:84:5e:47:
         89:f7:14:4d:87:bd:2d:17:20:62:e1:5a:95:83:f9:0e:3c:2e:
         88:fb:a6:bb:7e:5a:1e:2b:52:d7:cb:87:a6:8f:1e:b3:79:c8:
         b0:a5:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org