Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132352e302f32342d3234203d3e20323633333935.roa
File:                     3137372e3132352e3132352e302f32342d3234203d3e20323633333935.roa (raw, json)
Hash identifier:          PJsGTMEoI97+8P+srb524ug1n7RYG9syjZkjK5hmKus=
Subject key identifier:   8D:EA:FD:E2:BE:0E:DF:FE:CC:3F:2D:F6:AB:2F:DB:5B:A6:F2:60:B1
Certificate issuer:       /CN=67666492B102F21109D368673B2B20745692E1A8
Certificate serial:       2AB100A340CF237C07D3EB9AB70A41078D3EDB81
Authority key identifier: 67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132352e302f32342d3234203d3e20323633333935.roa
Signing time:             Sun 25 Dec 2022 17:22:18 +0000
ROA not before:           Sun 25 Dec 2022 17:17:18 +0000
ROA not after:            Sun 24 Dec 2023 17:22:18 +0000
asID:                     263395
IP address blocks:        177.125.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b1:00:a3:40:cf:23:7c:07:d3:eb:9a:b7:0a:41:07:8d:3e:db:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67666492B102F21109D368673B2B20745692E1A8
        Validity
            Not Before: Dec 25 17:17:18 2022 GMT
            Not After : Dec 24 17:22:18 2023 GMT
        Subject: CN=8DEAFDE2BE0EDFFECC3F2DF6AB2FDB5BA6F260B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:d1:4a:13:f8:91:5a:71:09:63:58:34:e6:
                    e9:57:2f:26:1d:44:db:5a:0a:74:95:27:85:fb:2c:
                    7e:9b:60:85:7f:3d:0c:24:b6:73:19:a9:e9:1b:48:
                    ab:13:56:56:34:14:fe:9a:8b:94:66:16:5b:f2:8c:
                    be:94:0f:c3:13:3f:5a:8c:1d:4e:94:08:a0:fd:9f:
                    41:84:26:bf:97:27:fe:37:63:4f:a9:9e:94:ee:a1:
                    8b:cc:9b:c6:18:3c:fc:47:23:a3:e4:c8:4f:2f:b8:
                    44:49:56:8c:0b:63:28:7b:fd:36:77:cc:2d:93:83:
                    5e:d7:e2:6c:e4:f2:ef:e7:a4:68:9f:14:aa:d4:da:
                    2e:de:5e:28:07:1f:67:41:7b:b8:d4:92:56:90:09:
                    e6:62:6a:c9:2e:7b:31:43:ae:7a:b1:a6:5a:db:ff:
                    cb:92:68:7a:04:f1:ae:ce:83:49:59:a7:b5:0a:81:
                    56:eb:92:c5:29:b0:5f:cb:65:ff:61:28:5e:b3:0c:
                    bd:2e:49:2c:65:17:8f:b1:aa:99:db:1d:7a:b0:3c:
                    4f:79:cf:4d:3c:10:ae:94:83:3a:b3:48:68:13:7d:
                    f1:e5:22:7a:86:29:52:90:b1:ff:7d:16:de:01:74:
                    c2:1f:97:ea:4c:07:e5:df:95:5f:45:a0:06:51:4a:
                    53:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EA:FD:E2:BE:0E:DF:FE:CC:3F:2D:F6:AB:2F:DB:5B:A6:F2:60:B1
            X509v3 Authority Key Identifier:
                keyid:67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/67666492B102F21109D368673B2B20745692E1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132352e302f32342d3234203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:7b:37:8f:b1:f8:6d:01:01:19:a0:a6:d9:9e:c6:71:3a:eb:
         f0:46:fc:da:28:eb:5f:3a:fb:f6:68:81:a7:42:f7:af:ce:ac:
         ee:85:cc:79:81:da:4b:7c:13:66:75:26:78:8a:c8:7d:8d:7e:
         4b:01:53:61:b9:ea:aa:21:5d:3c:ea:99:c2:54:37:42:83:cb:
         0f:43:87:e4:73:8e:10:ba:10:63:46:7c:b2:7f:1d:d1:77:bb:
         2a:09:80:ec:b3:f4:1c:63:88:14:92:74:32:c9:8a:0a:a6:b3:
         e7:78:90:2d:fa:71:98:07:e1:5f:d7:4b:9f:e1:90:5a:03:e0:
         71:ba:43:0a:be:31:72:c6:9e:e8:9a:b9:76:79:16:cd:2e:e1:
         89:6b:49:9c:eb:76:10:60:73:83:af:40:42:aa:22:ad:5e:f8:
         44:29:8d:0e:40:12:40:1c:9f:93:d8:bd:56:8a:21:36:98:d0:
         1c:1a:2a:8b:f7:7b:6e:09:08:a8:d7:72:6c:b5:c8:72:93:14:
         2c:2f:4d:0a:25:10:a3:e8:6b:ae:f8:26:aa:0d:0a:1e:1c:bf:
         0b:cd:47:5c:e0:7a:d9:9c:fd:f3:ac:bc:0a:8b:08:d6:f7:c8:
         75:7d:f5:53:0e:b5:2e:8b:37:21:06:21:b9:da:cd:72:80:c6:
         54:0e:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org