Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3132352e302f32342d3234203d3e203238313335.roa
File:                     3137372e34362e3132352e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          zhaEHYPU0ETr9r0TXLpTF8qQm7oO1QBNB/+L6NgHeJk=
Subject key identifier:   FF:2F:FC:88:64:3A:7B:AF:B2:74:33:0A:74:9E:76:F8:92:56:E9:46
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       3EBAC584EF78CC1543EB6AEBC6B648C2E585F684
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3132352e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 12 Apr 2023 11:12:58 +0000
ROA not before:           Wed 12 Apr 2023 11:07:58 +0000
ROA not after:            Wed 10 Apr 2024 11:12:58 +0000
asID:                     28135
IP address blocks:        177.46.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ba:c5:84:ef:78:cc:15:43:eb:6a:eb:c6:b6:48:c2:e5:85:f6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Apr 12 11:07:58 2023 GMT
            Not After : Apr 10 11:12:58 2024 GMT
        Subject: CN=FF2FFC88643A7BAFB274330A749E76F89256E946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:36:f0:5e:68:4d:08:de:2e:4b:be:6b:16:6f:
                    71:c8:12:3d:7e:7e:75:07:2b:10:6d:db:15:d9:f2:
                    81:7e:e9:04:e0:45:5f:32:c5:6f:18:90:ff:0c:ae:
                    40:24:94:03:f5:2e:3d:83:1d:8a:2e:74:42:3b:e6:
                    33:61:78:da:7f:9f:c6:af:84:c8:b9:d3:ec:89:33:
                    bf:77:b3:b1:87:a2:6e:dd:8a:dd:ba:eb:e6:1d:6e:
                    18:0e:b9:83:34:8c:96:b0:c8:4e:8c:8d:e2:45:01:
                    96:5f:c0:3f:20:a8:0c:49:02:43:7a:ca:0c:2d:b0:
                    74:35:70:06:28:b1:d2:7f:47:71:48:74:82:ad:bb:
                    7b:0d:75:a3:84:7e:9c:38:9d:0e:21:86:c5:8d:95:
                    3a:19:13:20:b1:0e:d4:ca:7c:20:d4:22:9d:b6:69:
                    dc:7e:29:de:7d:c6:b5:ac:07:9c:cf:0e:21:89:3a:
                    cb:d3:ee:66:ab:14:e2:00:e8:2b:2b:cb:2b:54:22:
                    9d:c0:a5:46:11:b8:09:e3:0c:c3:fe:c3:b7:1a:73:
                    0f:02:5b:82:4c:0b:e2:12:70:de:6e:52:55:b3:4e:
                    35:59:82:e9:87:a6:bf:5f:01:f2:7d:df:3e:ef:95:
                    6a:9e:15:ed:3b:1a:c9:bf:48:df:f1:cb:e2:3c:0a:
                    22:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2F:FC:88:64:3A:7B:AF:B2:74:33:0A:74:9E:76:F8:92:56:E9:46
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3137372e34362e3132352e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:5e:31:1b:14:97:e4:60:72:32:bd:03:a0:9f:31:ea:fc:bf:
         6c:5d:dd:83:22:b9:9c:2b:e6:7a:d9:82:6b:64:80:57:fb:94:
         89:cf:c8:4d:8c:05:6f:15:55:fb:17:4a:4f:6d:fb:1e:07:ba:
         fd:ef:82:d4:29:80:59:95:61:42:8b:73:f4:4a:56:7b:35:6a:
         9b:1c:6d:b4:1a:f0:fc:fe:08:81:d6:38:51:f9:b3:c8:4c:ac:
         5b:89:b4:73:d3:44:94:93:3e:29:f9:95:57:05:c8:20:7f:56:
         57:e9:68:fe:bf:33:93:a4:bd:d1:5b:32:3a:cc:ac:28:2d:68:
         de:58:2a:d0:21:0a:15:b8:5d:2c:92:b9:4f:a3:39:0d:36:67:
         c3:5c:1c:f8:c6:7a:ed:8e:6e:f3:c5:cf:f3:09:d8:40:f0:b5:
         9d:33:39:d0:38:22:4f:54:20:a4:81:d6:fb:43:5f:3e:54:db:
         65:88:3f:7f:af:7e:0b:c7:89:30:98:ae:6e:0b:83:c8:ee:46:
         c9:09:c7:4f:75:e0:50:ed:b8:d6:10:08:23:d6:b5:88:b8:86:
         48:7c:40:08:7c:f5:f5:53:7c:22:a4:29:9a:ca:f3:35:18:0e:
         91:6d:92:40:2d:b7:05:32:1e:65:64:15:ef:b9:52:80:f9:e0:
         21:c4:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org