Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137372e3132352e3235302e302f32332d3233203d3e203532383538.roa
File:                     3137372e3132352e3235302e302f32332d3233203d3e203532383538.roa (raw, json)
Hash identifier:          PwzgoLeUzpo3o2TbjPJB5jwBOsTRvS1mYtzdCjDuxIc=
Subject key identifier:   7A:62:92:17:D4:3B:8C:00:4C:3F:25:80:76:CF:63:B2:8A:FB:F6:A6
Certificate issuer:       /CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
Certificate serial:       093672408F1216196CA1F050CB37AFF4C5CEA7B4
Authority key identifier: 3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137372e3132352e3235302e302f32332d3233203d3e203532383538.roa
Signing time:             Fri 08 Mar 2024 19:09:17 +0000
ROA not before:           Fri 08 Mar 2024 19:04:17 +0000
ROA not after:            Fri 07 Mar 2025 19:09:17 +0000
asID:                     52858
IP address blocks:        177.125.250.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:36:72:40:8f:12:16:19:6c:a1:f0:50:cb:37:af:f4:c5:ce:a7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757
        Validity
            Not Before: Mar  8 19:04:17 2024 GMT
            Not After : Mar  7 19:09:17 2025 GMT
        Subject: CN=7A629217D43B8C004C3F258076CF63B28AFBF6A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:c0:f9:21:fb:12:1d:21:fc:5a:2c:e1:bc:
                    09:3e:49:8b:31:05:f9:19:96:ec:d6:bf:41:8d:a5:
                    29:e1:bb:88:35:0f:43:31:44:eb:fa:3d:b9:e3:52:
                    fd:8e:80:2a:ae:50:76:81:50:a2:b7:14:7c:82:6d:
                    e2:ed:e4:03:73:06:4a:56:f6:a1:58:f0:02:e7:c1:
                    e2:3b:8f:8e:05:bf:6a:a6:4d:ca:74:2f:47:79:d4:
                    56:73:16:1d:91:1f:c3:01:2f:74:a2:f1:0b:a1:3b:
                    ab:47:fe:70:2c:7a:ff:09:fa:c2:ed:bf:4a:a1:b0:
                    a7:be:ca:d6:b9:ef:2e:2e:d2:91:f3:9a:e6:a2:16:
                    a6:f5:ff:81:76:cd:01:35:c4:65:d4:4b:9c:b1:0e:
                    5a:fc:db:fa:ae:e2:ae:88:1d:e0:35:5c:56:57:23:
                    fb:03:0a:7b:8c:52:e3:db:29:bb:ad:1b:d6:53:7b:
                    75:7d:ee:c5:df:e2:97:88:6f:14:fc:78:a8:82:67:
                    49:68:17:fd:07:a1:c9:47:94:52:b6:52:c5:2a:c5:
                    e0:b8:21:d3:39:4c:07:79:dc:39:55:5c:74:15:01:
                    40:b0:95:2a:34:96:58:37:31:da:07:d3:b1:c4:fa:
                    f9:f7:98:d1:e9:96:bc:07:90:55:91:c9:7c:22:d0:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:62:92:17:D4:3B:8C:00:4C:3F:25:80:76:CF:63:B2:8A:FB:F6:A6
            X509v3 Authority Key Identifier:
                keyid:3F:89:ED:2D:E6:A8:CF:76:4F:D3:D0:48:DA:5C:4C:6A:C4:83:D7:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F89ED2DE6A8CF764FD3D048DA5C4C6AC483D757.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/0/3137372e3132352e3235302e302f32332d3233203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:51:ac:6a:3c:8b:0f:c1:63:e8:e7:05:6a:6e:d7:fa:1c:25:
         cd:9f:ae:c4:c7:4c:3c:d1:4c:e4:ef:08:4a:15:db:d2:d9:d1:
         99:04:93:aa:41:7e:20:09:52:28:1d:b3:e0:3f:8a:3a:1a:58:
         a9:32:fa:72:fe:85:d6:3a:71:55:b9:6d:9b:73:5f:a9:e7:85:
         e0:af:33:f0:24:4a:f8:c9:61:a4:fb:4c:c6:ad:02:6d:98:b3:
         aa:dc:46:91:5d:17:7c:fa:95:bd:11:15:81:3d:1e:e7:b0:d2:
         bf:64:8b:75:b5:fd:7c:29:48:32:55:db:70:97:1c:d5:be:44:
         70:50:bc:ca:6f:05:04:5d:a9:f6:ef:c8:6b:21:2f:47:62:a1:
         70:91:8f:64:02:7b:0f:7b:fa:db:83:8e:ed:63:b0:2a:c1:45:
         5f:20:3b:fb:e4:3b:ac:d3:2b:b1:cd:03:0d:90:69:37:bc:1d:
         78:42:d8:28:6d:07:9b:65:98:5d:5f:96:09:d3:f7:50:9b:4c:
         32:2c:9f:87:3d:d6:df:7c:1a:3d:7c:ef:71:32:55:79:db:4d:
         b5:4f:d8:bd:91:9f:f0:75:bf:7a:0e:5e:e1:6c:14:10:6d:c9:
         08:2e:35:66:aa:8f:60:4c:bf:d7:30:40:a7:1e:92:28:53:d2:
         da:4c:b0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:00 2024 by rpki-client on console.sobornost.net