Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230312e302f32342d3234203d3e20323633313436.roa
File:                     3138372e38362e3230312e302f32342d3234203d3e20323633313436.roa (raw, json)
Hash identifier:          70ZhxWnpBS9/urznxse8eAa3qXz+lXPksVvqJ7DrNeg=
Subject key identifier:   0F:F9:E4:A6:4F:61:09:AC:FB:D2:1B:60:7D:33:08:75:51:B5:B2:25
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       668483788C2D920DFE23F473196639B6F35E4642
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230312e302f32342d3234203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:40 +0000
ROA not before:           Tue 27 Feb 2024 17:25:40 +0000
ROA not after:            Tue 25 Feb 2025 17:30:40 +0000
asID:                     263146
IP address blocks:        187.86.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:84:83:78:8c:2d:92:0d:fe:23:f4:73:19:66:39:b6:f3:5e:46:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:40 2024 GMT
            Not After : Feb 25 17:30:40 2025 GMT
        Subject: CN=0FF9E4A64F6109ACFBD21B607D33087551B5B225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:e3:56:6e:2f:5e:25:01:a3:aa:4f:d6:f4:
                    94:00:14:bc:2e:e3:53:6f:32:b6:e8:7d:a0:b1:9b:
                    b1:3b:91:16:86:8d:7a:6f:0e:ab:7f:15:2d:5f:22:
                    a5:a6:e0:85:ac:2b:05:57:60:b6:4b:4b:b6:d7:3a:
                    05:e9:5a:9f:65:15:22:89:4a:27:97:1d:c8:39:39:
                    b3:96:66:c6:fa:43:19:cb:5d:bf:41:d7:b6:25:04:
                    4e:fb:ad:a3:13:d4:c4:95:77:20:b7:4d:16:7a:a4:
                    b3:72:86:4f:3b:69:2b:fe:86:55:8e:ce:15:28:a2:
                    4c:d4:b5:45:c4:2f:3c:e4:64:51:e3:b8:fa:a4:da:
                    84:c6:3a:b1:5e:e9:70:e1:8a:ee:f5:23:6e:9c:92:
                    04:8a:6f:df:e9:23:8f:9c:72:9d:0a:ab:95:75:fd:
                    3a:26:57:31:99:ec:a3:2d:f0:ed:c5:44:59:29:9d:
                    6f:47:f1:0f:bb:69:bd:85:e6:54:ad:6d:77:57:73:
                    ef:93:33:fc:93:c8:7f:cf:3f:b5:fa:95:fc:19:54:
                    1b:de:4a:04:f7:d6:1e:20:25:bb:b1:03:04:c4:d2:
                    aa:df:f2:b9:ad:43:df:d7:06:40:c6:3d:51:1f:09:
                    1a:27:72:47:49:6c:a6:b5:4a:fe:be:27:f8:95:e8:
                    f2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F9:E4:A6:4F:61:09:AC:FB:D2:1B:60:7D:33:08:75:51:B5:B2:25
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230312e302f32342d3234203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:2a:cb:ac:16:17:da:04:43:62:df:0d:50:bb:0b:1f:6d:4d:
         9a:af:93:21:63:3f:07:e0:39:3e:84:be:60:2a:cb:cc:5a:43:
         db:90:a2:2e:c5:5f:c5:2e:59:62:0b:80:f1:e6:d7:7b:58:e4:
         f2:a4:db:b4:7b:dd:fc:4a:ee:33:2b:ce:79:6e:49:37:3b:fa:
         af:b7:95:0b:32:28:ee:23:ca:fb:c8:ec:00:02:93:00:a5:ad:
         58:3b:dc:ca:77:8d:f8:f2:43:ff:e2:e5:e9:f7:07:f0:28:d0:
         f5:25:f0:78:07:54:dc:c2:68:70:d3:62:b0:a9:70:b5:99:38:
         42:32:5d:c2:95:aa:43:5a:9d:64:f6:01:4c:60:b3:b2:60:49:
         24:98:f9:c7:57:3b:7b:40:ed:45:c9:57:ca:81:7c:9e:19:c2:
         ec:cc:85:a5:63:ed:69:33:77:99:49:21:5f:b8:61:b4:48:61:
         96:74:7c:b5:8b:e8:87:86:09:93:d1:73:99:28:76:d0:28:78:
         ed:10:c3:93:e2:2e:6d:12:c2:3c:3c:b7:ec:44:2e:b5:d6:51:
         77:af:78:18:d3:d7:61:70:db:f7:4c:2f:1b:71:da:4f:9b:62:
         f8:99:61:03:b1:ba:e3:bd:23:4d:20:9c:43:30:46:3b:e8:51:
         80:0f:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:06 2024 by rpki-client on console-ams.rpki-client.org