Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230302e302f32342d3234203d3e20323633313436.roa
File:                     3138372e38362e3230302e302f32342d3234203d3e20323633313436.roa (raw, json)
Hash identifier:          hLky05sj2Yzt37FRl7GIUnjnVkaMZjw9CDxy7+kRszY=
Subject key identifier:   F3:8E:28:D4:5C:EB:3F:67:13:48:CA:8E:8F:BE:03:36:48:68:06:D8
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       55756C1102445C145EC41B959AC152B19057BACC
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230302e302f32342d3234203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:44 +0000
ROA not before:           Tue 27 Feb 2024 17:25:44 +0000
ROA not after:            Tue 25 Feb 2025 17:30:44 +0000
asID:                     263146
IP address blocks:        187.86.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:75:6c:11:02:44:5c:14:5e:c4:1b:95:9a:c1:52:b1:90:57:ba:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:44 2024 GMT
            Not After : Feb 25 17:30:44 2025 GMT
        Subject: CN=F38E28D45CEB3F671348CA8E8FBE0336486806D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a1:d4:41:31:cc:93:ee:0c:56:74:71:a8:88:
                    9b:f1:30:a6:80:9d:10:26:31:f6:69:b1:45:1f:68:
                    1d:8f:d9:9e:af:5a:b1:7e:19:00:17:4e:5a:3c:4d:
                    84:18:2f:eb:26:1a:c5:e7:c1:cf:28:a4:eb:ee:bf:
                    96:f1:56:72:97:be:f1:02:28:c1:b8:fe:96:28:03:
                    ee:0d:13:17:29:d2:54:95:ff:26:48:93:da:43:3d:
                    a5:4a:2e:56:00:67:3d:0e:6a:cc:93:e4:e2:c9:38:
                    84:86:30:08:5d:dd:a5:7c:6e:ab:71:dc:14:44:51:
                    5e:d6:0f:7f:d2:b9:6e:b6:60:0a:68:b8:08:78:48:
                    d5:ec:29:0b:77:43:e1:3a:f0:ed:5d:a3:39:92:d0:
                    7b:2a:2e:69:27:88:98:fc:f6:ca:23:d9:89:0b:b6:
                    ce:ac:6e:52:23:36:1b:dd:09:0c:ac:be:49:bf:92:
                    7f:e4:dc:4f:74:3f:1b:b4:fd:c8:8b:97:91:66:ef:
                    77:19:a6:e0:23:98:e5:32:c1:74:c5:51:37:bb:c0:
                    2f:40:2a:15:73:d4:92:61:7a:90:f7:db:de:ed:5b:
                    f6:e3:b1:87:a6:db:c3:a6:69:50:14:fb:fb:87:a3:
                    53:4b:37:ff:fc:d9:ce:9a:51:13:5e:2a:6a:80:d7:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8E:28:D4:5C:EB:3F:67:13:48:CA:8E:8F:BE:03:36:48:68:06:D8
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230302e302f32342d3234203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:78:b4:fd:34:89:0b:55:bf:00:e9:5e:81:af:42:7a:33:7a:
         0d:97:bf:a4:fe:74:42:82:c1:0f:1a:64:8d:91:81:6c:4c:fd:
         9f:39:e9:36:03:89:52:59:c0:fd:ef:27:7e:3c:4e:82:ca:74:
         37:38:d4:20:52:0e:78:c7:a6:4f:36:f9:cf:c4:85:87:c7:7f:
         e4:33:cd:5b:d5:ca:6f:2a:d6:56:73:b2:a7:ca:27:49:14:e7:
         54:2c:46:51:00:25:90:5a:08:62:e9:cd:e3:c4:fe:d6:e2:64:
         b4:58:40:9b:5c:e4:be:65:0b:80:ca:b1:69:20:a8:c3:c7:6e:
         d2:2a:51:7a:3c:a6:5e:fd:a8:35:02:41:47:1c:e9:10:4b:1d:
         c3:08:d0:1b:5f:52:ee:4d:87:89:a7:8a:5a:d6:2c:f7:f0:b0:
         4b:09:b0:63:a3:88:c9:c0:24:2d:0e:c5:20:1e:15:ec:52:f9:
         56:d4:a3:0e:97:04:32:34:79:41:e7:d7:0b:d1:33:f9:de:ff:
         6f:3a:8e:35:18:f7:63:91:cb:e6:4c:c2:8c:55:1e:5c:fc:65:
         df:a2:32:65:60:09:7b:42:37:47:63:4a:5a:26:bb:18:50:b6:
         d8:4e:c3:47:90:9c:28:5e:a7:27:b6:c5:18:be:18:64:8d:56:
         e1:59:dc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org