Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235322e302f32322d3232203d3e20323633333936.roa
File:                     3137372e3132352e3235322e302f32322d3232203d3e20323633333936.roa (raw, json)
Hash identifier:          20r9CqyWb/87v4uBbgyXHJ1SYJrniKWk9akOeYm2szA=
Subject key identifier:   DF:38:1E:60:C9:57:A1:61:C8:F7:13:92:D3:00:F7:60:37:49:F9:7C
Certificate issuer:       /CN=533B8335992AC24C92CD2553C5F62AC293DF880D
Certificate serial:       1F0E0A971F695CA3DB0485AB0CF2AA602E18357E
Authority key identifier: 53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533B8335992AC24C92CD2553C5F62AC293DF880D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235322e302f32322d3232203d3e20323633333936.roa
Signing time:             Thu 16 Nov 2023 13:58:30 +0000
ROA not before:           Thu 16 Nov 2023 13:53:30 +0000
ROA not after:            Thu 14 Nov 2024 13:58:30 +0000
asID:                     263396
IP address blocks:        177.125.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0e:0a:97:1f:69:5c:a3:db:04:85:ab:0c:f2:aa:60:2e:18:35:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533B8335992AC24C92CD2553C5F62AC293DF880D
        Validity
            Not Before: Nov 16 13:53:30 2023 GMT
            Not After : Nov 14 13:58:30 2024 GMT
        Subject: CN=DF381E60C957A161C8F71392D300F7603749F97C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:96:5e:cd:27:31:58:08:85:bd:b8:bd:11:
                    90:08:28:2f:0e:97:01:dd:ee:92:95:09:60:e0:44:
                    f0:78:21:25:c6:96:bf:29:80:e9:46:9e:50:47:a8:
                    f1:64:7a:5f:02:da:4d:b0:4d:77:9d:42:91:04:6e:
                    af:71:a3:bf:26:f2:31:b7:f8:a8:d3:91:07:a3:a6:
                    05:21:da:cc:58:41:e7:03:0a:6b:e7:7e:e2:c9:3e:
                    43:3c:b6:e0:bf:8f:41:ee:76:4e:3c:59:0d:c5:cb:
                    a4:8c:ae:7d:73:e3:81:9b:08:e8:cb:be:6e:58:7d:
                    a0:5b:61:79:a9:c1:fc:77:8b:15:7b:eb:61:8c:e9:
                    b3:a3:8b:1c:29:8b:3a:51:6f:ef:f0:24:5c:23:c4:
                    a2:0f:48:4d:18:92:53:82:77:72:59:b9:bf:03:ec:
                    78:73:1e:ae:95:36:67:8a:1c:10:60:a3:0f:51:3a:
                    4d:5e:41:8e:18:83:ef:2d:be:f3:e7:b0:8d:e9:be:
                    8c:82:bb:3d:4e:84:ab:26:fa:51:ec:b1:31:7b:df:
                    33:83:fc:c5:2e:b7:d5:a9:bf:0d:9b:a1:b7:80:6a:
                    c0:43:b5:c7:22:28:85:07:69:ea:8c:3c:a6:87:5f:
                    0f:e5:b1:59:ea:03:30:ce:ee:57:63:45:b0:af:b0:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:38:1E:60:C9:57:A1:61:C8:F7:13:92:D3:00:F7:60:37:49:F9:7C
            X509v3 Authority Key Identifier:
                keyid:53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/533B8335992AC24C92CD2553C5F62AC293DF880D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533B8335992AC24C92CD2553C5F62AC293DF880D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235322e302f32322d3232203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:1b:3c:da:cf:61:a0:2b:52:98:38:d6:0a:dc:58:f2:14:99:
         67:34:c3:74:7e:d8:89:3a:96:f6:eb:c2:27:0c:c3:9d:4f:61:
         cc:b2:c6:0e:36:99:76:41:7d:ae:56:ae:54:d6:ce:0c:42:30:
         19:18:7d:f3:c8:44:76:a3:c4:47:ee:02:9f:a8:65:c8:f0:e4:
         73:26:eb:ed:db:09:f6:7f:d8:72:7d:07:55:39:90:bf:62:68:
         c3:3b:70:14:56:62:6b:d1:c7:c2:d8:1f:66:0b:fd:77:2d:4a:
         6e:c1:5c:bd:5a:95:ef:b4:71:49:03:30:7a:11:cb:33:0b:12:
         62:8d:f4:d3:f9:e2:39:f3:e4:3c:ee:f4:87:3f:4c:5a:38:e8:
         07:71:3d:c9:be:d9:df:2b:4f:fa:f6:d4:d3:bd:f0:29:35:5e:
         95:be:08:d9:f2:4e:cd:c5:2b:7d:1f:f8:c4:f3:15:4b:54:20:
         cd:de:51:ca:8c:d3:ed:1d:4c:50:fc:01:f0:5b:e7:77:19:4a:
         f0:03:11:de:1d:b3:1c:25:51:3f:5d:b9:c6:26:be:fe:f9:20:
         97:23:f5:ba:d5:84:39:05:28:7a:82:af:b6:45:cb:02:57:b2:
         da:8c:1f:61:a3:d1:d9:4a:2c:ff:ca:07:f5:28:ef:0a:c1:b2:
         5b:e5:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org