Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa
File:                     3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa (raw, json)
Hash identifier:          TAGgEsIRlCRMMrWtaCGGemLHAlD9g/Wmemu1aG9lOWI=
Subject key identifier:   53:A5:91:3F:C8:3C:2F:43:D8:29:EA:CF:DC:61:4B:44:EC:6D:B0:83
Certificate issuer:       /CN=D95469442C3ED3E11B9EEA259D4A0049C3748D03
Certificate serial:       7A43A9C28CE4986EB0ADB20C018A5E083F258A23
Authority key identifier: D9:54:69:44:2C:3E:D3:E1:1B:9E:EA:25:9D:4A:00:49:C3:74:8D:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95469442C3ED3E11B9EEA259D4A0049C3748D03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa
Signing time:             Thu 04 Apr 2024 11:28:08 +0000
ROA not before:           Thu 04 Apr 2024 11:23:08 +0000
ROA not after:            Thu 03 Apr 2025 11:28:08 +0000
asID:                     270778
IP address blocks:        187.63.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:43:a9:c2:8c:e4:98:6e:b0:ad:b2:0c:01:8a:5e:08:3f:25:8a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95469442C3ED3E11B9EEA259D4A0049C3748D03
        Validity
            Not Before: Apr  4 11:23:08 2024 GMT
            Not After : Apr  3 11:28:08 2025 GMT
        Subject: CN=53A5913FC83C2F43D829EACFDC614B44EC6DB083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:24:79:07:ca:2b:4d:af:93:d7:1e:e4:73:
                    2f:b7:cb:15:8d:b6:09:1c:7f:62:03:36:ce:eb:68:
                    a8:9a:8e:36:c7:58:4b:40:5a:12:34:cb:32:24:c8:
                    1f:2b:2b:b7:6d:ce:42:50:85:58:ca:d3:71:b7:c3:
                    95:2c:03:9d:e9:60:de:60:77:1a:78:54:61:99:68:
                    6c:ae:7c:aa:29:ff:87:52:9e:ac:54:0f:bb:68:59:
                    a4:71:b1:ce:80:11:6b:31:ed:47:3e:70:1e:37:70:
                    22:1c:c9:fd:4e:ac:e8:06:c9:f3:e0:96:fd:a9:47:
                    bb:ab:b2:3e:29:87:da:40:d1:a4:e2:aa:81:3a:8c:
                    86:5f:f8:21:61:f7:5d:5e:9a:6a:5f:e1:b4:c2:e5:
                    c1:bf:11:4c:58:b6:83:1f:1e:ca:4d:79:9d:47:13:
                    04:4a:11:f8:8a:bb:ec:de:15:d7:e8:68:f4:93:e9:
                    8a:06:0a:a8:9d:fb:39:43:33:45:28:18:3b:17:02:
                    fb:54:29:6e:0a:b8:2e:aa:7e:64:0c:b8:04:9e:2b:
                    07:b4:13:82:69:53:1d:7e:ac:ec:40:eb:c4:de:ff:
                    e1:75:be:33:52:cd:1a:1d:1d:64:5a:cd:e8:4f:bb:
                    a8:fe:71:1e:7d:a3:80:c4:de:7d:26:9b:4c:2a:9a:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A5:91:3F:C8:3C:2F:43:D8:29:EA:CF:DC:61:4B:44:EC:6D:B0:83
            X509v3 Authority Key Identifier:
                keyid:D9:54:69:44:2C:3E:D3:E1:1B:9E:EA:25:9D:4A:00:49:C3:74:8D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/D95469442C3ED3E11B9EEA259D4A0049C3748D03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95469442C3ED3E11B9EEA259D4A0049C3748D03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/3138372e36332e3132342e302f32342d3234203d3e20323730373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:a0:8f:2f:65:65:3b:9b:a1:e9:ac:77:3f:a9:46:60:46:11:
         5e:90:25:16:f6:8b:3d:3f:e5:c4:24:dd:a0:3a:32:f5:4a:9b:
         25:e6:33:44:01:64:d1:9c:bb:dd:52:94:01:3d:a0:74:24:63:
         cf:22:07:44:bf:78:a1:b8:e9:63:51:01:51:30:7c:34:99:87:
         29:e2:47:88:2b:d3:9f:09:f3:0c:31:3f:05:9b:e7:79:b0:06:
         53:30:cd:9b:c1:90:77:a5:6a:b7:34:dd:ff:7e:ea:d4:d2:bd:
         8b:9e:4c:72:59:65:9b:6b:fb:12:07:37:d6:01:16:86:eb:60:
         71:0a:73:10:3f:81:ef:49:9c:e8:e8:de:32:99:36:ad:66:9b:
         71:2e:04:c3:8a:39:e9:2a:fa:15:ac:eb:a4:91:0b:06:89:27:
         62:5a:6a:ff:bb:45:70:81:5a:6c:bd:9a:12:92:6d:dd:13:ec:
         34:32:c4:f5:54:5a:11:b8:31:56:bc:4b:9a:8d:5d:31:f3:44:
         fe:23:4f:c6:de:80:8b:a3:99:f8:12:65:f1:8e:f1:88:8c:7d:
         60:e6:9a:08:50:ef:94:a9:38:15:23:8c:06:7b:b5:ff:84:00:
         69:3a:57:10:f1:73:fe:01:fb:12:4c:0f:30:5e:7e:e0:03:4b:
         02:8a:d1:d0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUekOpwozkmG6wrbIMAYpeCD8liiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk1NDY5NDQyQzNFRDNFMTFCOUVFQTI1OUQ0QTAwNDlD
Mzc0OEQwMzAeFw0yNDA0MDQxMTIzMDhaFw0yNTA0MDMxMTI4MDhaMDMxMTAvBgNV
BAMTKDUzQTU5MTNGQzgzQzJGNDNEODI5RUFDRkRDNjE0QjQ0RUM2REIwODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCquyR5B8orTa+T1x7kcy+3yxWN
tgkcf2IDNs7raKiajjbHWEtAWhI0yzIkyB8rK7dtzkJQhVjK03G3w5UsA53pYN5g
dxp4VGGZaGyufKop/4dSnqxUD7toWaRxsc6AEWsx7Uc+cB43cCIcyf1OrOgGyfPg
lv2pR7ursj4ph9pA0aTiqoE6jIZf+CFh911emmpf4bTC5cG/EUxYtoMfHspNeZ1H
EwRKEfiKu+zeFdfoaPST6YoGCqid+zlDM0UoGDsXAvtUKW4KuC6qfmQMuASeKwe0
E4JpUx1+rOxA68Te/+F1vjNSzRodHWRazehPu6j+cR59o4DE3n0mm0wqmhlbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUU6WRP8g8L0PYKerP3GFLROxtsIMwHwYDVR0j
BBgwFoAU2VRpRCw+0+EbnuolnUoAScN0jQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE1mM0FvTEdteG9odVR1TnBTSkw1cVJXTFdZZ2dYNGV3RGRXUmZuc1ZC
Rm0vMS9EOTU0Njk0NDJDM0VEM0UxMUI5RUVBMjU5RDRBMDA0OUMzNzQ4RDAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NTQ2OTQ0MkMzRUQzRTEx
QjlFRUEyNTlENEEwMDQ5QzM3NDhEMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RNZjNBb0xHbXhvaHVUdU5wU0pMNXFSV0xXWWdnWDRld0RkV1JmbnNWQkZtLzEv
MzEzODM3MmUzNjMzMmUzMTMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNzM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7P3wwDQYJKoZIhvcNAQELBQADggEBAKqgjy9l
ZTuboemsdz+pRmBGEV6QJRb2iz0/5cQk3aA6MvVKmyXmM0QBZNGcu91SlAE9oHQk
Y88iB0S/eKG46WNRAVEwfDSZhyniR4gr058J8wwxPwWb53mwBlMwzZvBkHelarc0
3f9+6tTSvYueTHJZZZtr+xIHN9YBFobrYHEKcxA/ge9JnOjo3jKZNq1mm3EuBMOK
Oekq+hWs66SRCwaJJ2Jaav+7RXCBWmy9mhKSbd0T7DQyxPVUWhG4MVa8S5qNXTHz
RP4jT8begIujmfgSZfGO8YiMfWDmmghQ75SpOBUjjAZ7tf+EAGk6VxDxc/4B+xJM
DzBefuADSwKK0dA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:25 2024 by rpki-client on console-ams.rpki-client.org