Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/0/3137372e3132342e3136342e302f32322d3234203d3e203532363239.roa
File:                     3137372e3132342e3136342e302f32322d3234203d3e203532363239.roa (raw, json)
Hash identifier:          NIJC0rz7nqSfsIzkH6fAvKhnCDN3aBIf/uhJUojoRcc=
Subject key identifier:   58:C9:FC:0D:16:89:B4:9F:A4:17:AE:68:4C:65:31:FF:B3:76:D2:03
Certificate issuer:       /CN=BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75
Certificate serial:       67B40DF41BCB925DF0ED6B17CB12F997EFA7939A
Authority key identifier: BF:4A:62:08:1D:DF:9D:BF:FD:D7:B8:42:8E:72:14:8E:DE:AC:DC:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/0/3137372e3132342e3136342e302f32322d3234203d3e203532363239.roa
Signing time:             Tue 25 Jul 2023 18:09:12 +0000
ROA not before:           Tue 25 Jul 2023 18:04:12 +0000
ROA not after:            Tue 23 Jul 2024 18:09:12 +0000
asID:                     52629
IP address blocks:        177.124.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b4:0d:f4:1b:cb:92:5d:f0:ed:6b:17:cb:12:f9:97:ef:a7:93:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75
        Validity
            Not Before: Jul 25 18:04:12 2023 GMT
            Not After : Jul 23 18:09:12 2024 GMT
        Subject: CN=58C9FC0D1689B49FA417AE684C6531FFB376D203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:7f:ea:2f:9e:dc:6b:e5:56:17:05:56:af:
                    7f:2b:64:c5:b8:29:d1:54:a1:c2:4a:fa:15:f4:47:
                    be:1a:9e:b5:58:c5:1d:b9:81:7b:49:5f:81:73:0a:
                    53:60:67:63:51:2c:f2:d1:a2:96:6c:b3:65:a6:29:
                    70:7f:c1:09:71:08:13:ac:5c:ca:c2:cc:87:c7:dd:
                    50:41:8a:2b:de:09:d5:54:85:58:93:bf:eb:0e:0a:
                    db:57:c2:9f:c7:11:44:64:93:55:6a:2d:31:2c:87:
                    8f:ac:15:6e:f7:b4:f8:41:a6:05:c3:04:28:28:cb:
                    a1:c5:98:f9:66:8a:e6:ae:7b:4b:db:b8:7d:d4:f5:
                    31:a8:d9:48:60:1f:78:a0:17:9a:1c:24:6e:44:36:
                    b5:6c:f4:01:6f:4f:f7:e0:30:87:04:03:6a:ee:86:
                    62:7c:bc:91:fe:22:0c:a8:c2:8f:ff:81:04:ca:f0:
                    07:01:53:e6:88:c1:94:47:46:2d:cb:91:f3:1c:2a:
                    e1:7e:1b:d6:d4:ca:f6:83:69:7b:02:23:94:51:d9:
                    ed:ab:7f:61:43:aa:a9:07:fa:76:37:65:b2:01:d5:
                    49:31:b4:55:d2:08:ce:dd:d0:36:bb:19:43:d8:c4:
                    cf:a5:01:0b:f6:49:e5:5a:56:a5:c3:b0:00:7b:84:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C9:FC:0D:16:89:B4:9F:A4:17:AE:68:4C:65:31:FF:B3:76:D2:03
            X509v3 Authority Key Identifier:
                keyid:BF:4A:62:08:1D:DF:9D:BF:FD:D7:B8:42:8E:72:14:8E:DE:AC:DC:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/0/BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF4A62081DDF9DBFFDD7B8428E72148EDEACDC75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/0/3137372e3132342e3136342e302f32322d3234203d3e203532363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:8d:54:57:5e:2a:7d:1a:bb:62:8e:c4:18:65:20:ea:32:2a:
         18:76:59:b7:e3:84:d2:e5:cf:5e:05:71:e1:27:4e:c8:ea:2e:
         9a:1a:2b:5f:41:82:22:fb:d5:44:23:9e:c2:f7:04:4c:e5:4a:
         03:ea:17:8c:3b:f2:e8:8c:cc:ed:a0:71:cf:71:90:35:4c:9b:
         e7:5c:ce:72:5a:fd:b8:c1:f1:36:a9:a7:09:64:0a:33:a8:e2:
         5f:c3:99:5c:c8:3d:55:b5:6d:53:e4:14:45:57:cd:30:19:0d:
         6b:c7:bd:04:88:8b:5c:79:d5:24:cd:10:2b:ef:c2:81:d9:ee:
         7a:8c:ac:3d:44:16:7f:4a:56:00:7a:61:8d:5c:da:2b:e1:43:
         9d:c6:37:f4:f7:b5:55:63:d6:4b:57:79:e8:67:dd:bf:1d:b2:
         d9:63:38:39:09:88:69:46:55:40:52:58:12:51:02:b7:6b:75:
         fa:47:9e:e5:c3:c5:f0:11:6d:c5:71:94:1e:52:ab:ab:c0:a7:
         35:96:98:bd:29:3c:bb:17:9b:4e:cc:bb:7b:7d:96:2e:65:73:
         ee:49:66:d5:a6:06:56:44:e2:2b:91:f5:41:ab:e1:00:33:0e:
         09:3a:98:54:c6:35:24:4a:85:9d:d4:b9:b6:ea:8a:ec:da:87:
         2c:63:a0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org