Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132372e302f32342d3234203d3e20323730373738.roa
File:                     3138372e36332e3132372e302f32342d3234203d3e20323730373738.roa (raw, json)
Hash identifier:          d+LBGvi5IQEl9asNZb9ZHE8S3PdfU9A5kyJ4xbrV658=
Subject key identifier:   9E:A1:07:56:93:49:46:26:9E:79:03:29:F1:CB:9E:8B:96:64:D9:77
Certificate issuer:       /CN=B480637B71A5BAB7D8E09175513FD415DB03785D
Certificate serial:       7DA6C28AB2EDE21EB17B6DD0EC20C3F8CEBFCEE5
Authority key identifier: B4:80:63:7B:71:A5:BA:B7:D8:E0:91:75:51:3F:D4:15:DB:03:78:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B480637B71A5BAB7D8E09175513FD415DB03785D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132372e302f32342d3234203d3e20323730373738.roa
Signing time:             Thu 07 Dec 2023 02:32:03 +0000
ROA not before:           Thu 07 Dec 2023 02:27:03 +0000
ROA not after:            Thu 05 Dec 2024 02:32:03 +0000
asID:                     270778
IP address blocks:        187.63.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:c2:8a:b2:ed:e2:1e:b1:7b:6d:d0:ec:20:c3:f8:ce:bf:ce:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B480637B71A5BAB7D8E09175513FD415DB03785D
        Validity
            Not Before: Dec  7 02:27:03 2023 GMT
            Not After : Dec  5 02:32:03 2024 GMT
        Subject: CN=9EA10756934946269E790329F1CB9E8B9664D977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:69:7b:70:d2:85:3b:4e:6f:1a:92:a3:61:66:
                    34:f0:f3:13:c2:81:34:62:09:82:05:19:7c:74:2a:
                    9a:d7:00:32:40:39:d5:3c:69:11:d0:5f:1b:d2:82:
                    f3:e0:dc:0c:a0:02:1a:0b:cb:89:9b:b0:55:99:29:
                    bf:7e:f2:72:39:67:b9:5d:e8:c7:36:b8:84:e5:04:
                    80:8b:26:8d:eb:c9:0f:b1:02:f7:44:6d:95:0d:a2:
                    a0:a7:75:41:c5:86:dc:91:80:9a:80:00:90:76:81:
                    4c:4c:64:42:77:a2:ad:05:65:bd:20:5d:2a:e9:bd:
                    b8:33:10:db:34:dc:69:21:92:5c:d2:17:16:9d:16:
                    8c:55:4b:14:46:65:9c:e3:68:1b:39:d6:0d:c1:25:
                    2c:11:05:e9:b8:c4:07:76:eb:ba:30:bf:e0:d0:df:
                    cb:50:de:aa:7c:e7:e2:92:7f:28:f1:0a:ce:03:77:
                    ca:7c:3c:fe:f5:59:73:42:61:46:c1:a9:23:d8:8f:
                    0c:8c:61:23:72:74:b3:1c:0c:ce:a4:c7:ec:42:fd:
                    b0:43:b4:96:4a:55:cd:35:3e:ea:fd:65:b1:53:10:
                    1b:58:07:e8:4e:74:53:cd:9b:d8:16:3e:a1:11:44:
                    f9:5e:5b:47:76:a0:00:ac:f6:4a:5a:dc:79:a9:ce:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A1:07:56:93:49:46:26:9E:79:03:29:F1:CB:9E:8B:96:64:D9:77
            X509v3 Authority Key Identifier:
                keyid:B4:80:63:7B:71:A5:BA:B7:D8:E0:91:75:51:3F:D4:15:DB:03:78:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/B480637B71A5BAB7D8E09175513FD415DB03785D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B480637B71A5BAB7D8E09175513FD415DB03785D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/0/3138372e36332e3132372e302f32342d3234203d3e20323730373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:2d:1e:37:12:4f:5f:84:a4:6f:66:59:de:26:7d:91:54:ac:
         ec:60:69:84:97:02:e1:d5:64:6c:56:90:b3:00:e5:85:cd:78:
         9d:5b:4c:f6:00:c9:8f:f0:c9:c7:fe:9b:9e:2a:88:c2:99:15:
         33:03:63:86:bc:2e:93:af:17:fe:a2:16:4e:5e:83:4e:83:92:
         23:1a:d8:2f:c8:d9:a7:bb:96:22:98:80:c7:d6:33:9f:ec:50:
         7d:32:bf:54:62:18:ae:28:b5:53:2a:a8:61:93:b4:56:7d:f8:
         1c:ad:bc:75:ca:7c:51:a7:d0:2e:0e:93:ed:17:64:04:7b:18:
         b4:23:8b:4a:a2:7f:8b:32:16:53:7f:0e:13:54:70:ee:17:fb:
         7b:15:89:28:55:b8:4f:5b:02:f8:3a:ca:59:0f:d5:b5:bb:e8:
         9d:85:40:c8:b1:26:53:cc:69:0c:7c:d5:5d:c9:a4:81:9f:74:
         94:ba:cf:6b:0e:3a:11:b0:c4:44:1f:63:58:dc:8a:90:ad:b5:
         1e:fd:62:4e:b6:80:ac:49:d3:cd:fe:4b:bd:16:a1:de:ef:08:
         d4:d4:88:dc:54:20:f5:e7:c0:fe:ef:8e:0e:65:4c:bd:c4:a5:
         3b:9e:65:48:9f:2c:92:d4:b0:68:a6:2f:98:83:7d:77:83:11:
         fd:e0:b7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org