Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33322e302f32332d3234203d3e20323634303235.roa
File:                     3134332e3133372e33322e302f32332d3234203d3e20323634303235.roa (raw, json)
Hash identifier:          ciqbj8Gw5evRXZzsws3Ed0g1Tfmu9K/jyLyEvCJKoKQ=
Subject key identifier:   11:56:DC:E2:52:B6:17:19:D3:16:99:2A:6E:9B:FC:87:BA:A7:1E:1E
Certificate issuer:       /CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Certificate serial:       7736497B8B1D5FF5DB825CA1586267440990C722
Authority key identifier: 12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33322e302f32332d3234203d3e20323634303235.roa
Signing time:             Mon 11 Mar 2024 12:30:10 +0000
ROA not before:           Mon 11 Mar 2024 12:25:10 +0000
ROA not after:            Mon 10 Mar 2025 12:30:10 +0000
asID:                     264025
IP address blocks:        143.137.32.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:36:49:7b:8b:1d:5f:f5:db:82:5c:a1:58:62:67:44:09:90:c7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
        Validity
            Not Before: Mar 11 12:25:10 2024 GMT
            Not After : Mar 10 12:30:10 2025 GMT
        Subject: CN=1156DCE252B61719D316992A6E9BFC87BAA71E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:ec:c6:4f:8a:0c:0e:a0:49:6e:ad:66:77:
                    26:15:ae:78:86:3b:be:ff:32:db:68:3a:a4:e9:52:
                    70:ff:1d:22:4d:49:26:e5:42:f2:14:ca:f4:ac:6f:
                    18:cd:68:b5:90:73:e3:77:75:ca:c0:8e:65:ca:b7:
                    e2:de:7a:7d:43:2c:3f:f0:73:24:38:db:43:1f:10:
                    8d:51:6f:27:fe:21:85:87:7a:d4:6a:af:b6:4e:b8:
                    a4:b2:a4:3e:f7:d4:e3:13:cb:a4:a7:e1:8d:0c:9b:
                    e2:13:74:9d:f6:8b:5b:ab:99:06:45:80:d3:53:86:
                    25:1c:52:b0:f1:a4:86:ff:73:cd:45:86:7f:4a:f3:
                    9f:00:1b:dd:f3:c2:c7:f1:e1:60:ba:7a:bc:4f:87:
                    c8:a7:6e:c3:2d:f4:92:38:a8:6c:e3:c1:10:1c:bc:
                    e9:02:04:54:eb:a0:71:8c:2f:25:fb:75:5d:b2:bb:
                    24:c4:f3:83:b0:40:09:7f:14:2f:f5:c7:a6:2b:b7:
                    ee:55:3d:69:d1:0d:d1:8e:a7:ec:05:f6:72:9a:de:
                    67:b8:27:ef:fd:c3:b6:37:a2:eb:5c:6f:30:4a:2b:
                    b6:c7:54:41:e1:23:46:1e:c9:05:b0:c4:38:21:ee:
                    27:27:cb:21:e3:ee:a3:07:32:12:4d:63:81:cd:2e:
                    a9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:56:DC:E2:52:B6:17:19:D3:16:99:2A:6E:9B:FC:87:BA:A7:1E:1E
            X509v3 Authority Key Identifier:
                keyid:12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3134332e3133372e33322e302f32332d3234203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:29:01:74:b1:12:41:c4:44:4d:de:65:35:9d:3b:a6:c0:90:
         a7:8d:ec:3f:0a:82:16:b1:50:4b:d5:c7:c3:1d:67:49:1c:d5:
         65:5c:cf:b3:ff:ef:92:b3:f2:39:73:e0:1a:ac:58:95:d4:9a:
         b4:31:39:35:c8:45:10:a2:18:98:13:c1:1d:0f:22:20:af:a5:
         dd:14:38:45:82:e5:20:74:1a:9f:e5:83:7a:fd:91:6e:01:5f:
         70:ad:02:e3:63:a2:dc:aa:e8:70:fa:14:2c:36:00:95:b8:aa:
         f3:6e:54:5e:db:94:86:ce:22:e9:32:88:40:8c:f4:92:9c:ab:
         53:44:ed:e0:54:3a:2f:89:d9:f8:9f:60:9b:36:cc:44:59:d7:
         04:93:6d:e1:37:83:c4:36:bc:eb:f7:72:b6:66:96:00:07:40:
         93:67:22:69:58:c6:b2:94:63:72:ee:be:a6:84:c6:16:74:8f:
         45:e6:58:dd:65:09:f5:e5:b4:a6:77:50:24:b2:7c:13:3f:0e:
         2d:f8:ef:06:24:43:01:fa:8c:ef:fe:3f:d4:85:6a:75:03:83:
         af:1e:21:56:01:f4:70:23:ce:be:0e:a6:01:2f:6b:1c:82:1e:
         14:a8:17:b9:71:ae:24:86:a5:92:f4:70:34:cb:01:5b:e2:68:
         ca:13:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org