Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235352e302f32342d3234203d3e20323633333936.roa
File:                     3137372e3132352e3235352e302f32342d3234203d3e20323633333936.roa (raw, json)
Hash identifier:          XZjAW0uqgvXJTcutHsPctykmMMvsAbhOTAbj82e4VQY=
Subject key identifier:   6B:F2:51:16:7E:81:FE:A8:92:2B:08:2A:4C:80:7D:5C:78:D6:3F:9A
Certificate issuer:       /CN=533B8335992AC24C92CD2553C5F62AC293DF880D
Certificate serial:       4C5F5A14A505233549574996D6FAD36D60F6170D
Authority key identifier: 53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533B8335992AC24C92CD2553C5F62AC293DF880D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235352e302f32342d3234203d3e20323633333936.roa
Signing time:             Thu 16 Nov 2023 13:58:29 +0000
ROA not before:           Thu 16 Nov 2023 13:53:29 +0000
ROA not after:            Thu 14 Nov 2024 13:58:29 +0000
asID:                     263396
IP address blocks:        177.125.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5f:5a:14:a5:05:23:35:49:57:49:96:d6:fa:d3:6d:60:f6:17:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533B8335992AC24C92CD2553C5F62AC293DF880D
        Validity
            Not Before: Nov 16 13:53:29 2023 GMT
            Not After : Nov 14 13:58:29 2024 GMT
        Subject: CN=6BF251167E81FEA8922B082A4C807D5C78D63F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:cd:60:4e:fc:06:de:5a:e5:21:1e:19:1b:
                    99:cc:7b:e4:db:24:d3:ba:74:54:50:f0:ce:4e:36:
                    7c:52:dc:13:6a:a3:85:f2:7e:4b:9d:98:23:df:f2:
                    ce:d5:66:ae:2c:76:11:39:b4:97:69:5f:df:a8:06:
                    2b:d4:d1:e3:66:b2:dd:42:be:42:cd:18:fb:b0:cc:
                    96:90:42:e2:72:e1:dc:3c:11:19:d5:9e:78:1f:e7:
                    6f:c7:49:b3:ad:e4:80:2a:e1:86:11:20:71:d4:b4:
                    2d:69:85:40:26:d3:ea:19:b6:f7:59:1f:ff:2c:ab:
                    18:63:30:36:42:1a:c7:a8:6e:db:fa:ba:2c:2c:46:
                    a1:8d:42:d9:52:78:ca:d8:35:34:6c:1d:03:dc:27:
                    98:2c:01:ec:19:75:dc:8c:cf:7d:da:3e:e3:e9:fd:
                    b1:33:e1:9c:3b:4d:48:92:1c:4a:2e:73:e8:d0:1d:
                    26:70:03:b3:4d:58:60:6c:86:21:d7:4a:72:54:06:
                    8c:0c:22:5e:33:ed:4b:fc:5d:fc:7a:92:57:77:50:
                    23:8b:ab:e1:56:d0:ee:8f:42:a8:02:99:ef:76:f5:
                    79:31:e1:dc:76:0f:75:22:fa:25:36:f1:50:86:53:
                    84:92:b3:c2:6a:04:58:de:70:1b:cc:d3:c8:ce:be:
                    f5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F2:51:16:7E:81:FE:A8:92:2B:08:2A:4C:80:7D:5C:78:D6:3F:9A
            X509v3 Authority Key Identifier:
                keyid:53:3B:83:35:99:2A:C2:4C:92:CD:25:53:C5:F6:2A:C2:93:DF:88:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/533B8335992AC24C92CD2553C5F62AC293DF880D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533B8335992AC24C92CD2553C5F62AC293DF880D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/0/3137372e3132352e3235352e302f32342d3234203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:81:2f:65:18:5d:03:f2:46:66:ff:a7:42:b0:24:f9:d5:6c:
         5b:5c:9e:9a:d3:6a:07:5c:e3:1b:3b:76:ad:7c:1c:ec:be:bb:
         3e:cf:80:50:5d:ed:91:f2:c1:67:66:11:a2:53:c8:ad:02:2d:
         7d:ad:1b:7f:9f:00:72:34:9f:2d:be:c9:46:3a:b4:25:41:45:
         08:cd:6e:15:0d:c5:ee:35:c3:40:74:43:b4:23:8e:99:a8:e7:
         7a:4a:ba:25:75:4d:23:d5:ff:ce:09:b5:f2:72:95:c7:9b:51:
         2b:42:02:b6:56:b7:6a:53:1f:63:80:a8:fa:ac:a4:a7:dd:cd:
         6d:23:c6:c5:eb:ec:df:1c:c7:23:15:91:6d:a0:e1:1b:6f:85:
         fd:e7:df:8a:d1:46:a2:d9:75:13:8a:35:71:73:6b:cb:d0:5a:
         5e:dc:ee:10:2b:c2:78:8c:e4:bd:b7:88:e3:02:b2:4b:80:28:
         ce:d5:03:6e:d0:e3:5f:e6:8b:a8:92:1a:c6:f6:c6:12:88:c7:
         79:7b:41:32:50:f4:c4:0c:fa:de:5b:43:33:48:9e:3d:3e:5e:
         d7:30:2e:43:e8:3a:30:be:b3:c2:d4:e6:6c:90:85:28:b8:38:
         f4:90:ba:4a:30:a5:30:25:5d:9e:25:37:12:be:13:2c:85:88:
         c8:ca:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org