Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/0/3137392e3132352e3132302e302f32322d3234203d3e20323633363335.roa
File:                     3137392e3132352e3132302e302f32322d3234203d3e20323633363335.roa (raw, json)
Hash identifier:          adGPIbk6vwN7fJF3Cn21JuuV7B2EOJN+79PK7QmSOvo=
Subject key identifier:   12:63:06:51:49:71:04:B0:16:AB:61:58:E1:30:8B:69:00:9B:C1:82
Certificate issuer:       /CN=8DC4B85108F4A684A65E90F0550453A66C62D87D
Certificate serial:       94AEACF7ACA53BCC45D7B3D0316F5D6481982E
Authority key identifier: 8D:C4:B8:51:08:F4:A6:84:A6:5E:90:F0:55:04:53:A6:6C:62:D8:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DC4B85108F4A684A65E90F0550453A66C62D87D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/0/3137392e3132352e3132302e302f32322d3234203d3e20323633363335.roa
Signing time:             Sat 22 Jul 2023 00:00:00 +0000
ROA not before:           Fri 21 Jul 2023 23:55:00 +0000
ROA not after:            Sat 20 Jul 2024 00:00:00 +0000
asID:                     263635
IP address blocks:        179.125.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            94:ae:ac:f7:ac:a5:3b:cc:45:d7:b3:d0:31:6f:5d:64:81:98:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC4B85108F4A684A65E90F0550453A66C62D87D
        Validity
            Not Before: Jul 21 23:55:00 2023 GMT
            Not After : Jul 20 00:00:00 2024 GMT
        Subject: CN=3082010A0282010100DE4EB7E377DFF55BBCD9D3A17E53A9EEB199E14780DD199585B92B721E753EE5BD7148CAA68FD72FF4A3FC13BC3EB711559473779F3DA034B844207D556DB1DB8CE351B69FCCC248839C2B914E5DCC8B8ABAE3D3A05B84BC54EB5C841B1FE9B45EBD6E6B46FF8FBE1187975A2EF85EFF216CECA9FAC341C814D381CCF70BAA2A5407E2CBC81DE61E62D2AAE9DA7CBCDFA27576A5220A5B4068F5ED7E942972DB628CE295CF792F1043E0E5312812A913AC33710589E5B092034EF2D365B4729F737BE2F1C659EAA039CE0E4820753034977D37E4D350BD042B17B8684A51ABADFBC250B8E1302A7AC6FBFF2EEAF8EE82618AF2BACAE39747635A1986115FE8930203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4e:b7:e3:77:df:f5:5b:bc:d9:d3:a1:7e:53:
                    a9:ee:b1:99:e1:47:80:dd:19:95:85:b9:2b:72:1e:
                    75:3e:e5:bd:71:48:ca:a6:8f:d7:2f:f4:a3:fc:13:
                    bc:3e:b7:11:55:94:73:77:9f:3d:a0:34:b8:44:20:
                    7d:55:6d:b1:db:8c:e3:51:b6:9f:cc:c2:48:83:9c:
                    2b:91:4e:5d:cc:8b:8a:ba:e3:d3:a0:5b:84:bc:54:
                    eb:5c:84:1b:1f:e9:b4:5e:bd:6e:6b:46:ff:8f:be:
                    11:87:97:5a:2e:f8:5e:ff:21:6c:ec:a9:fa:c3:41:
                    c8:14:d3:81:cc:f7:0b:aa:2a:54:07:e2:cb:c8:1d:
                    e6:1e:62:d2:aa:e9:da:7c:bc:df:a2:75:76:a5:22:
                    0a:5b:40:68:f5:ed:7e:94:29:72:db:62:8c:e2:95:
                    cf:79:2f:10:43:e0:e5:31:28:12:a9:13:ac:33:71:
                    05:89:e5:b0:92:03:4e:f2:d3:65:b4:72:9f:73:7b:
                    e2:f1:c6:59:ea:a0:39:ce:0e:48:20:75:30:34:97:
                    7d:37:e4:d3:50:bd:04:2b:17:b8:68:4a:51:ab:ad:
                    fb:c2:50:b8:e1:30:2a:7a:c6:fb:ff:2e:ea:f8:ee:
                    82:61:8a:f2:ba:ca:e3:97:47:63:5a:19:86:11:5f:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:63:06:51:49:71:04:B0:16:AB:61:58:E1:30:8B:69:00:9B:C1:82
            X509v3 Authority Key Identifier:
                keyid:8D:C4:B8:51:08:F4:A6:84:A6:5E:90:F0:55:04:53:A6:6C:62:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/0/8DC4B85108F4A684A65E90F0550453A66C62D87D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DC4B85108F4A684A65E90F0550453A66C62D87D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/0/3137392e3132352e3132302e302f32322d3234203d3e20323633363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:be:1f:8c:ab:7e:a6:a2:e7:b2:a2:cf:e5:78:33:dd:07:8f:
         6e:b7:a1:be:09:ce:f7:96:00:f3:10:0a:44:89:26:2a:37:7f:
         1f:a2:c8:d4:76:66:23:da:8d:7b:f9:5f:f1:92:d1:1a:66:c2:
         e6:82:f4:b0:ac:27:85:f3:4b:d1:3c:07:4f:02:4a:85:dd:f2:
         76:19:0b:ee:f1:05:ae:28:fb:be:12:98:81:e0:33:92:f8:ee:
         d6:14:06:88:3e:4a:9e:0e:b9:18:bb:2c:a1:79:81:b9:02:18:
         15:bc:b6:39:43:60:da:f3:c2:ec:ca:f2:ce:08:34:5e:81:06:
         3d:b4:ec:af:b8:f0:f6:f7:a2:cf:c8:36:b5:01:99:ae:bf:fd:
         44:c6:1a:fa:40:41:7b:fc:cc:e3:aa:e2:8b:18:f9:3b:a7:35:
         03:2f:f9:db:32:90:f5:52:60:79:ac:33:76:df:01:60:b1:a1:
         4b:1b:61:59:49:7f:78:bd:e0:ea:b6:84:e2:83:6e:42:31:bf:
         e9:a5:b4:0d:b5:50:4e:33:3b:81:c9:a5:fe:a9:d1:d8:2e:1c:
         09:63:b1:f1:33:a1:50:56:ab:85:a5:d7:70:9f:d9:c7:d0:80:
         c5:df:96:fc:a0:bd:07:a4:18:98:ab:b9:38:35:c7:9d:fd:68:
         b8:6e:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org