Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa
File:                     3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa (raw, json)
Hash identifier:          hkRwjcqWA365jgfNqxInrHD63vYxjHQLWVBijTY89Vs=
Subject key identifier:   89:CD:27:55:E7:AF:16:63:75:26:B5:B1:56:49:50:54:12:64:3E:93
Certificate issuer:       /CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
Certificate serial:       47EDD646F78FC66D8611D3944461BBF1A6F68D39
Authority key identifier: 68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa
Signing time:             Wed 22 Nov 2023 22:00:00 +0000
ROA not before:           Wed 22 Nov 2023 21:55:00 +0000
ROA not after:            Wed 20 Nov 2024 22:00:00 +0000
asID:                     52604
IP address blocks:        177.124.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ed:d6:46:f7:8f:c6:6d:86:11:d3:94:44:61:bb:f1:a6:f6:8d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
        Validity
            Not Before: Nov 22 21:55:00 2023 GMT
            Not After : Nov 20 22:00:00 2024 GMT
        Subject: CN=89CD2755E7AF16637526B5B15649505412643E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:f8:5f:05:be:2d:33:66:b7:4c:e6:53:71:
                    48:e5:c7:d6:c4:28:f6:73:11:d5:0f:80:f3:28:29:
                    7e:0b:b4:03:f0:97:34:ff:15:22:ca:fd:7f:32:52:
                    2a:53:97:c5:a4:5c:b2:a0:a4:89:32:33:50:b5:17:
                    82:0d:91:73:d9:5b:32:fb:a7:01:96:7f:81:1d:5e:
                    c3:f8:5d:70:cf:fd:34:92:0f:f0:ec:2e:d3:4e:99:
                    ee:46:e1:db:a3:eb:a3:6b:62:39:47:2f:4f:7d:e4:
                    0d:bb:86:b7:10:2d:c7:56:d9:1e:2b:88:c4:fe:02:
                    48:6a:9c:5f:9d:f1:5b:cf:e5:12:57:5a:43:30:1e:
                    df:f8:0b:6d:aa:6f:40:a0:c7:50:88:60:58:83:40:
                    90:c0:f2:87:3e:5e:32:59:69:08:c5:69:a1:8a:71:
                    d4:bc:f3:c7:ba:b4:da:9b:77:5b:07:0a:52:b5:77:
                    6b:d5:9d:3c:d9:8f:e8:1e:5c:ba:14:d3:e3:3c:67:
                    44:79:11:e5:fa:79:c7:da:50:a1:4f:95:39:45:dc:
                    5d:f1:df:85:29:7f:b2:c5:0a:e9:4b:00:0e:b7:29:
                    55:a8:af:c3:94:a3:44:d8:a4:1a:84:f1:3d:46:f6:
                    58:bf:e6:50:0c:d5:5b:40:31:0d:61:8c:ec:ce:62:
                    8e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CD:27:55:E7:AF:16:63:75:26:B5:B1:56:49:50:54:12:64:3E:93
            X509v3 Authority Key Identifier:
                keyid:68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:53:ec:ca:71:b6:83:b0:4b:c2:99:71:77:8a:b9:e8:18:75:
         ca:36:a6:f1:cd:e5:d9:4a:19:a8:b8:21:3e:89:39:e5:75:c9:
         80:50:fa:76:70:cc:2d:73:a0:b0:41:81:fc:76:cf:08:f5:91:
         d3:0e:b7:bc:47:aa:22:68:aa:a2:5f:65:cc:d1:28:c7:b0:4e:
         16:53:4d:f9:95:a9:96:c7:a0:bd:68:4c:6c:40:8d:34:57:28:
         09:72:15:f1:95:50:4f:0d:9d:bf:27:45:36:6e:69:30:cd:59:
         1d:83:c5:6b:fc:c4:cf:48:16:b2:8d:e0:3f:4d:9e:18:46:1a:
         fb:7b:fa:b1:a3:dd:7c:50:9e:41:95:79:e7:c2:dd:7c:b2:f8:
         69:d9:ec:5b:d1:13:2a:46:d5:4f:37:35:ed:c2:4d:b3:d0:31:
         f9:ec:32:6a:cb:f8:18:38:76:dc:2b:52:84:6c:ee:ed:7b:45:
         04:2a:37:47:bb:2f:93:dd:18:b3:a6:27:7b:06:a9:f6:b2:89:
         bd:3b:18:0b:7c:83:15:4e:94:ba:63:0f:31:31:d4:63:f6:ee:
         fd:e6:38:9b:6a:f6:ac:84:d3:ab:3a:45:c2:a8:ad:d7:ab:05:
         f6:ea:b7:54:f9:ae:39:c8:b2:b5:02:25:93:eb:a4:14:33:43:
         67:83:52:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org