Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132362e302f32342d3234203d3e20323633333935.roa
File:                     3137372e3132352e3132362e302f32342d3234203d3e20323633333935.roa (raw, json)
Hash identifier:          xGgbDP7Apz0NW9fktd7OHViPoO26WKhsUNjbljMPNHE=
Subject key identifier:   7D:45:F6:61:A6:E7:79:20:B4:0D:34:70:F3:02:7D:A6:30:8A:75:6C
Certificate issuer:       /CN=67666492B102F21109D368673B2B20745692E1A8
Certificate serial:       7077188926DDBD5F24B5EC9F920B3AD9732F5590
Authority key identifier: 67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132362e302f32342d3234203d3e20323633333935.roa
Signing time:             Sun 25 Dec 2022 17:22:18 +0000
ROA not before:           Sun 25 Dec 2022 17:17:18 +0000
ROA not after:            Sun 24 Dec 2023 17:22:18 +0000
asID:                     263395
IP address blocks:        177.125.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:77:18:89:26:dd:bd:5f:24:b5:ec:9f:92:0b:3a:d9:73:2f:55:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67666492B102F21109D368673B2B20745692E1A8
        Validity
            Not Before: Dec 25 17:17:18 2022 GMT
            Not After : Dec 24 17:22:18 2023 GMT
        Subject: CN=7D45F661A6E77920B40D3470F3027DA6308A756C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:1f:71:ab:0f:68:57:c0:97:a3:07:f6:fd:
                    06:c7:ff:24:c0:f8:0e:9a:fb:eb:85:3a:c5:3e:0f:
                    8c:35:46:fb:30:e2:6a:31:5b:1d:44:9a:56:1e:3e:
                    03:18:1a:27:eb:5b:70:34:c6:29:34:9b:3f:79:84:
                    84:12:ec:3a:8f:8c:06:e4:3e:53:4d:f7:c2:25:db:
                    d3:97:3c:d6:08:cc:d7:64:bc:a9:df:b3:36:d3:3a:
                    31:37:02:77:f0:19:c2:38:05:9b:8c:64:47:ed:02:
                    76:96:bc:da:fc:8f:8a:02:dd:e1:31:d9:4b:2c:ee:
                    00:ad:bd:c3:69:fe:8e:cd:8b:3b:15:94:f0:a8:38:
                    af:8c:79:e7:a0:ac:46:3f:ac:98:1d:83:59:89:96:
                    eb:3a:ae:3e:d3:47:61:ad:53:be:b1:b1:be:44:c6:
                    ce:13:f7:7e:27:85:19:2c:c8:23:d6:ba:00:78:0d:
                    a9:31:d9:e1:a8:5f:80:86:c3:b7:bf:9d:15:36:72:
                    bc:86:cd:ac:e6:0c:06:0e:c1:a9:15:ab:a1:53:6c:
                    be:69:9a:92:4f:a0:90:02:1e:4e:f5:7c:77:2c:ce:
                    27:f2:fc:54:60:61:e9:7d:36:bd:4c:0d:55:61:17:
                    68:aa:3d:ed:53:e8:89:a2:15:a1:93:89:50:13:e0:
                    85:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:45:F6:61:A6:E7:79:20:B4:0D:34:70:F3:02:7D:A6:30:8A:75:6C
            X509v3 Authority Key Identifier:
                keyid:67:66:64:92:B1:02:F2:11:09:D3:68:67:3B:2B:20:74:56:92:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/67666492B102F21109D368673B2B20745692E1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67666492B102F21109D368673B2B20745692E1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/3137372e3132352e3132362e302f32342d3234203d3e20323633333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:81:9b:0f:46:0e:cc:e7:31:fd:65:73:f4:28:0c:56:5a:73:
         e4:42:cc:6b:7e:6e:4c:32:ec:90:64:35:69:5b:fb:fa:d6:31:
         ec:60:c5:a3:fb:cf:5b:9a:e6:2a:e0:4b:17:13:3e:ef:60:cb:
         09:75:2b:1a:c2:f6:5f:5d:da:ff:3b:7e:0f:e9:bf:87:19:ef:
         d3:65:e9:1a:1e:7f:4f:ad:96:50:c6:99:e5:45:b3:ad:64:ac:
         75:d6:ae:40:1e:4b:2e:74:d0:8e:9f:0e:31:2a:9c:c9:51:62:
         dd:69:df:b0:55:35:b0:65:5d:f3:26:d3:62:a1:f7:78:9a:60:
         6e:e1:de:72:2e:21:cd:cb:d0:5d:f8:d9:e3:57:a3:24:34:5a:
         97:aa:3a:55:5d:a8:e6:1c:19:9b:5e:62:eb:67:d2:83:68:4c:
         8c:bc:e1:c7:56:aa:54:83:63:da:57:39:73:1c:da:4a:3b:c7:
         7b:47:bc:47:7a:72:4e:04:5a:f0:35:03:ed:f4:20:73:a8:ac:
         d3:ef:09:90:3a:dc:da:76:c8:00:69:71:5e:26:10:08:fa:74:
         b7:95:a3:04:84:02:95:4d:21:05:23:de:0a:f0:93:f2:33:a4:
         0b:f3:3f:d6:1b:01:30:88:28:f2:ba:ad:21:81:fa:d1:a5:76:
         59:9a:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org