Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230302e302f32332d3233203d3e20323633313436.roa
File:                     3138372e38362e3230302e302f32332d3233203d3e20323633313436.roa (raw, json)
Hash identifier:          YreHt843ZWGfwcHySJX4jQU6Hr1I0dpETJ1BM/P2r3A=
Subject key identifier:   59:62:DF:4C:27:F5:14:92:2E:6A:4C:A9:32:C6:D7:AD:31:1B:66:4F
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       5331A5B0331A4AD4A682183FC610BF80BDBAA51A
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230302e302f32332d3233203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:42 +0000
ROA not before:           Tue 27 Feb 2024 17:25:42 +0000
ROA not after:            Tue 25 Feb 2025 17:30:42 +0000
asID:                     263146
IP address blocks:        187.86.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:31:a5:b0:33:1a:4a:d4:a6:82:18:3f:c6:10:bf:80:bd:ba:a5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:42 2024 GMT
            Not After : Feb 25 17:30:42 2025 GMT
        Subject: CN=5962DF4C27F514922E6A4CA932C6D7AD311B664F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:58:9e:a0:06:25:e4:33:40:74:94:12:04:01:
                    aa:ab:31:b3:42:bb:cf:01:89:8a:ea:fc:15:70:ea:
                    82:46:c1:ba:5c:17:ef:de:b0:e2:42:28:8a:0c:69:
                    13:35:48:e6:59:74:a1:f7:55:34:a7:1a:b0:44:6e:
                    92:95:00:1f:45:1b:ea:37:09:6c:ab:91:9f:be:08:
                    dd:12:af:0f:1e:48:22:35:9d:02:76:11:e4:15:99:
                    7f:3e:e4:84:e8:f3:b0:67:56:0a:52:49:6f:0a:28:
                    e7:18:cb:de:1c:43:52:de:77:7e:b2:bd:7a:13:87:
                    cb:e5:35:06:04:6a:d3:51:29:32:9e:2e:fd:9b:0d:
                    a1:c0:c6:cb:c2:af:05:cc:e2:eb:83:eb:d0:69:c9:
                    18:5a:71:cf:41:45:fc:5d:dd:d2:67:e9:b8:1f:05:
                    51:f2:e2:5d:ad:0f:2d:68:bc:28:72:e4:f2:43:4d:
                    5b:64:81:0f:b2:9e:a7:53:c3:be:1f:c2:d9:86:1f:
                    b2:50:5d:b2:36:36:20:b7:01:fc:9d:b4:81:e8:4a:
                    50:9d:18:4c:e3:4f:a1:10:a9:c6:46:23:8c:1d:ee:
                    39:91:1d:b2:de:fe:1d:6a:94:58:2a:dd:40:40:34:
                    d4:8c:b4:d8:4b:de:de:81:4b:73:6b:5b:cf:53:a2:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:62:DF:4C:27:F5:14:92:2E:6A:4C:A9:32:C6:D7:AD:31:1B:66:4F
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230302e302f32332d3233203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:f0:ce:6b:92:7c:6d:67:3a:6c:1b:aa:56:70:ef:1f:72:b5:
         2e:d0:7a:06:6c:22:34:99:c7:56:d6:14:0d:73:7c:10:9a:91:
         b0:7c:f0:ff:9b:59:39:a9:1d:2e:25:18:fc:ed:41:ca:cc:60:
         f8:cc:9e:9f:88:1e:70:5c:ea:87:72:a3:34:93:3c:15:38:33:
         d0:da:55:b8:6f:c2:5b:f2:89:bf:ab:89:5a:64:cb:45:82:6b:
         ad:80:71:1e:2b:95:b6:52:5d:a9:57:9a:11:ec:3e:37:9d:3d:
         27:8b:1e:6b:d4:c6:32:91:7b:4b:01:06:b4:0f:96:43:88:30:
         38:48:87:2e:37:9b:00:48:ae:1b:67:6a:21:ca:e4:1b:ff:9e:
         15:94:34:77:cf:fb:54:53:dd:0c:de:cb:4c:2c:73:af:8d:2c:
         be:5c:75:d5:47:a5:8f:b0:ad:d0:18:6d:99:dd:15:c3:0d:98:
         10:4c:01:d9:9d:e5:9c:46:88:e1:f1:04:60:c7:be:d0:d8:06:
         ea:3b:0a:be:87:9b:e1:5f:13:2b:cc:d9:19:a0:43:2b:97:9b:
         37:29:51:ea:14:0c:76:11:a3:5f:36:66:15:18:76:cd:46:91:
         c1:5e:aa:25:10:a6:bc:e1:cc:24:40:36:e9:70:f9:fe:67:ec:
         21:e1:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org