Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135372e302f32342d3234203d3e203631363032.roa
File:                     3137372e3132342e3135372e302f32342d3234203d3e203631363032.roa (raw, json)
Hash identifier:          y7qhx+UceGIJX5ENCaeVrfMDIYSPIgHly/sxndm/igw=
Subject key identifier:   6A:8E:59:37:DE:D5:C4:8A:FC:B4:07:6A:1E:68:5C:C6:E8:21:46:83
Certificate issuer:       /CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
Certificate serial:       3FFC30339450F3A8F11A3F6F281B0BE7D4750FAF
Authority key identifier: 1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135372e302f32342d3234203d3e203631363032.roa
Signing time:             Sun 24 Sep 2023 21:58:56 +0000
ROA not before:           Sun 24 Sep 2023 21:53:56 +0000
ROA not after:            Sun 22 Sep 2024 21:58:56 +0000
asID:                     61602
IP address blocks:        177.124.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fc:30:33:94:50:f3:a8:f1:1a:3f:6f:28:1b:0b:e7:d4:75:0f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA586C2B2DD0A7F0D4468C37B32464203B4C007
        Validity
            Not Before: Sep 24 21:53:56 2023 GMT
            Not After : Sep 22 21:58:56 2024 GMT
        Subject: CN=6A8E5937DED5C48AFCB4076A1E685CC6E8214683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:c5:b3:5e:e6:37:25:49:b5:f2:fb:48:69:
                    e2:88:6f:5d:fe:cc:f5:4d:ec:57:b5:e3:65:f3:22:
                    fe:20:65:36:78:80:0d:75:30:a9:35:fc:81:a4:0b:
                    8e:3e:f1:57:a8:3c:c3:7f:a6:9f:28:66:1b:e5:e8:
                    8c:f0:1e:0f:ed:b3:ff:70:58:41:f2:3c:17:a2:7f:
                    0a:a5:15:26:2c:fa:89:c5:76:84:23:09:7a:8e:98:
                    9c:31:19:d2:02:c8:bf:de:1c:57:b4:2b:ec:39:68:
                    9f:d7:7f:11:eb:d6:41:ff:a7:4a:7f:f1:ce:b1:75:
                    08:eb:70:5c:cf:12:3f:e9:d6:1d:d3:ae:bd:35:2f:
                    9b:8e:03:fd:37:04:73:a1:b2:e3:08:5b:26:cc:34:
                    61:24:b0:cf:e6:bb:43:af:81:62:0c:2b:33:e2:85:
                    99:2a:b6:e3:8d:dc:d6:a0:4a:ac:93:58:d7:71:0a:
                    90:84:ec:e4:78:90:ad:af:2c:6d:0f:93:15:42:c1:
                    67:61:08:87:ee:2b:e8:e4:ec:6b:7d:47:a2:87:7b:
                    43:a5:9a:30:94:72:67:ba:fc:e1:b3:d1:84:72:3d:
                    75:ff:18:1d:0d:45:5a:c0:dd:92:33:50:3c:1a:60:
                    3e:e1:90:48:06:ee:04:1b:f8:ac:a6:e7:d3:9e:ac:
                    3f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8E:59:37:DE:D5:C4:8A:FC:B4:07:6A:1E:68:5C:C6:E8:21:46:83
            X509v3 Authority Key Identifier:
                keyid:1D:A5:86:C2:B2:DD:0A:7F:0D:44:68:C3:7B:32:46:42:03:B4:C0:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DA586C2B2DD0A7F0D4468C37B32464203B4C007.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/3137372e3132342e3135372e302f32342d3234203d3e203631363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:62:b8:79:28:41:61:a1:f1:82:12:91:c5:3f:07:a7:54:50:
         de:eb:18:fb:23:17:1c:9f:b0:34:e9:e3:ba:f9:fb:1b:eb:0e:
         1e:56:72:b1:79:0d:8a:ba:23:4f:8b:5b:d2:1d:d7:0c:b3:77:
         81:14:37:d6:1e:65:a7:0f:f8:11:4e:3f:78:96:f1:a9:3c:3c:
         d2:3d:bf:69:c3:e1:fb:76:be:c0:64:46:41:38:e8:82:21:aa:
         f0:c6:e0:06:a3:28:90:84:c2:2a:96:da:c5:ee:36:81:e5:df:
         f9:3b:a0:b9:e6:b6:67:e5:eb:1d:d3:48:12:54:a2:70:4a:bc:
         49:e6:ac:af:6f:bf:61:59:46:51:93:83:e2:39:17:2a:92:de:
         3c:2f:20:85:45:10:50:db:b5:f7:4d:e8:52:1d:05:9c:df:43:
         b8:1c:a5:75:c2:a6:09:fc:04:18:af:b1:ac:f0:6f:69:91:60:
         fe:ce:c6:ea:a3:2c:dd:8e:62:51:93:a1:b6:8c:15:e8:8b:1b:
         83:bc:9c:d5:ad:e9:ca:53:d6:fa:d5:46:78:13:2c:73:3d:6f:
         02:45:21:82:46:bc:84:a9:bb:1d:91:34:61:30:44:b1:ce:1d:
         e0:a8:e8:c5:d6:11:27:b6:c5:c8:f6:70:60:13:dd:4e:7e:4a:
         bd:82:14:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org