Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31362e302f32342d3234203d3e20323633363235.roa
File:                     3137392e3132352e31362e302f32342d3234203d3e20323633363235.roa (raw, json)
Hash identifier:          Q+OnYKl78+XNSVOkI/ddzlEU0i1k4HDSVaIli6lcN68=
Subject key identifier:   7F:6C:CC:A7:B4:2E:1E:D7:3E:E1:EA:04:C4:0C:E9:BA:1E:8F:41:BA
Certificate issuer:       /CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
Certificate serial:       41F9EF3F4AB87AF8240862898C07F84B386EED43
Authority key identifier: FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31362e302f32342d3234203d3e20323633363235.roa
Signing time:             Tue 05 Dec 2023 16:32:27 +0000
ROA not before:           Tue 05 Dec 2023 16:27:27 +0000
ROA not after:            Tue 03 Dec 2024 16:32:27 +0000
asID:                     263625
IP address blocks:        179.125.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f9:ef:3f:4a:b8:7a:f8:24:08:62:89:8c:07:f8:4b:38:6e:ed:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB88A3AE00102036C8EC91B22854F1DE410D59C2
        Validity
            Not Before: Dec  5 16:27:27 2023 GMT
            Not After : Dec  3 16:32:27 2024 GMT
        Subject: CN=7F6CCCA7B42E1ED73EE1EA04C40CE9BA1E8F41BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:72:d1:fe:52:9d:86:26:f6:f6:8c:9f:b1:
                    a8:9a:e8:08:ca:2d:d3:63:76:1a:37:1f:80:e7:1a:
                    31:09:d1:96:32:38:33:f1:d4:e4:82:75:b7:ae:af:
                    fe:ae:22:0f:f1:c9:77:b1:f5:45:be:65:dc:a2:6a:
                    da:e4:2d:85:08:5b:1c:8a:79:3b:ea:99:cd:24:c2:
                    1f:e5:64:5f:7a:33:3c:91:b6:53:4b:6f:8a:0a:be:
                    71:ad:56:49:32:f4:12:6c:15:6f:b2:fb:66:e6:54:
                    9d:94:e9:b8:6f:80:49:b1:20:74:ef:1a:bf:a9:a2:
                    73:93:aa:4e:b9:75:0f:57:10:68:b1:41:60:0c:23:
                    bb:70:b2:af:9d:fa:c4:93:00:8e:27:97:99:65:4b:
                    72:7d:b0:6e:34:78:0e:1b:fe:98:e1:b1:3b:a8:ee:
                    bd:ad:9d:3b:61:11:b8:dd:a9:c6:c5:e9:0f:15:a3:
                    00:fa:e5:0f:2c:83:8f:a5:ec:3b:74:66:c8:ad:92:
                    69:98:4e:1c:a8:72:e3:d5:ac:ba:ea:4f:99:8a:d3:
                    02:7d:77:5a:a2:25:47:2a:9d:2f:5c:f7:9d:1f:85:
                    fb:76:4f:60:cd:e1:9b:2d:ad:da:0f:b4:7a:55:b1:
                    c8:be:3b:56:8f:e4:4e:e5:01:fe:da:45:12:5b:97:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6C:CC:A7:B4:2E:1E:D7:3E:E1:EA:04:C4:0C:E9:BA:1E:8F:41:BA
            X509v3 Authority Key Identifier:
                keyid:FB:88:A3:AE:00:10:20:36:C8:EC:91:B2:28:54:F1:DE:41:0D:59:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB88A3AE00102036C8EC91B22854F1DE410D59C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNmoz3xipHzkSqvSMqkdW2S9SdzWd7nWA62EMiQEPYfH/0/3137392e3132352e31362e302f32342d3234203d3e20323633363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:b2:56:f5:76:96:f6:a1:56:c3:f4:81:2c:f2:7b:44:95:a2:
         22:5b:02:02:2e:6e:e0:53:fe:ec:35:bc:40:e5:a8:26:92:35:
         11:d2:96:d9:f6:57:fa:bb:eb:32:05:47:a2:82:99:ca:12:2f:
         ce:66:ce:5d:e1:91:5f:ac:2a:bc:d7:1e:47:29:93:a2:37:25:
         7a:09:8c:69:fd:92:39:53:25:cf:a4:6e:0f:70:ff:84:75:10:
         60:c9:cc:ac:62:9d:0a:95:b4:fc:33:46:91:d2:14:e7:2c:f0:
         ca:14:90:a3:7b:1d:8a:5d:8f:f2:5b:19:4f:6d:e4:4e:62:d0:
         c2:73:d4:a8:50:71:37:16:6c:15:95:34:66:64:78:0c:91:50:
         41:d2:1a:a7:0e:56:c3:c1:d0:57:1f:91:98:34:5c:74:39:a5:
         1c:29:43:c3:87:01:90:2b:57:38:81:1f:59:c5:fd:d1:53:09:
         a3:73:de:5b:eb:19:9b:31:da:db:75:e1:15:58:3e:90:f5:31:
         8c:3c:c1:83:b8:ea:ef:cc:9e:4d:70:65:03:6d:91:9f:cf:85:
         c5:27:62:55:64:2f:4d:3e:22:a3:eb:69:17:a2:ea:95:09:6f:
         ca:56:ca:93:f3:5d:75:8c:a4:17:e1:02:6b:f1:8b:0d:7f:fa:
         b7:9f:cd:78
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQfnvP0q4evgkCGKJjAf4Szhu7UMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI4OEEzQUUwMDEwMjAzNkM4RUM5MUIyMjg1NEYxREU0
MTBENTlDMjAeFw0yMzEyMDUxNjI3MjdaFw0yNDEyMDMxNjMyMjdaMDMxMTAvBgNV
BAMTKDdGNkNDQ0E3QjQyRTFFRDczRUUxRUEwNEM0MENFOUJBMUU4RjQxQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDrHLR/lKdhib29oyfsaia6AjK
LdNjdho3H4DnGjEJ0ZYyODPx1OSCdbeur/6uIg/xyXex9UW+ZdyiatrkLYUIWxyK
eTvqmc0kwh/lZF96MzyRtlNLb4oKvnGtVkky9BJsFW+y+2bmVJ2U6bhvgEmxIHTv
Gr+ponOTqk65dQ9XEGixQWAMI7twsq+d+sSTAI4nl5llS3J9sG40eA4b/pjhsTuo
7r2tnTthEbjdqcbF6Q8VowD65Q8sg4+l7Dt0ZsitkmmYThyocuPVrLrqT5mK0wJ9
d1qiJUcqnS9c950fhft2T2DN4ZstrdoPtHpVsci+O1aP5E7lAf7aRRJbly4LAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUf2zMp7QuHtc+4eoExAzpuh6PQbowHwYDVR0j
BBgwFoAU+4ijrgAQIDbI7JGyKFTx3kENWcIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ05tb3ozeGlwSHprU3F2U01xa2RXMlM5U2R6V2Q3bldBNjJFTWlRRVBZ
ZkgvMC9GQjg4QTNBRTAwMTAyMDM2QzhFQzkxQjIyODU0RjFERTQxMEQ1OUMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZCODhBM0FFMDAxMDIwMzZD
OEVDOTFCMjI4NTRGMURFNDEwRDU5QzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NObW96M3hpcEh6a1NxdlNNcWtkVzJTOVNkeldkN25XQTYyRU1pUUVQWWZILzAv
MzEzNzM5MmUzMTMyMzUyZTMxMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzfRAwDQYJKoZIhvcNAQELBQADggEBAKWyVvV2
lvahVsP0gSzye0SVoiJbAgIubuBT/uw1vEDlqCaSNRHSltn2V/q76zIFR6KCmcoS
L85mzl3hkV+sKrzXHkcpk6I3JXoJjGn9kjlTJc+kbg9w/4R1EGDJzKxinQqVtPwz
RpHSFOcs8MoUkKN7HYpdj/JbGU9t5E5i0MJz1KhQcTcWbBWVNGZkeAyRUEHSGqcO
VsPB0FcfkZg0XHQ5pRwpQ8OHAZArVziBH1nF/dFTCaNz3lvrGZsx2tt14RVYPpD1
MYw8wYO46u/Mnk1wZQNtkZ/PhcUnYlVkL00+IqPraRei6pUJb8pWypPzXXWMpBfh
Amvxiw1/+refzXg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org