Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230342e302f32342d3234203d3e20323633313436.roa
File:                     3138372e38362e3230342e302f32342d3234203d3e20323633313436.roa (raw, json)
Hash identifier:          944GB7oZSPWdRXAJCv6awaN1RFfX2azcXikJE9MvJ/0=
Subject key identifier:   63:59:0D:F0:B4:46:3A:76:71:7E:E7:8E:C2:6D:0F:F0:3E:FE:08:26
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       59DA588907B8E7DAD1CA267076E06886F9444928
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230342e302f32342d3234203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:45 +0000
ROA not before:           Tue 27 Feb 2024 17:25:45 +0000
ROA not after:            Tue 25 Feb 2025 17:30:45 +0000
asID:                     263146
IP address blocks:        187.86.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:da:58:89:07:b8:e7:da:d1:ca:26:70:76:e0:68:86:f9:44:49:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:45 2024 GMT
            Not After : Feb 25 17:30:45 2025 GMT
        Subject: CN=63590DF0B4463A76717EE78EC26D0FF03EFE0826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:a9:19:6c:7b:6a:3e:30:57:f4:50:58:7d:
                    c3:2b:a7:34:7d:88:6d:0d:da:d9:45:65:ba:bc:73:
                    e1:9f:44:f8:5a:2f:aa:44:6d:88:d4:cd:76:a2:7b:
                    07:0c:53:59:a0:a9:ef:ea:99:0a:e1:89:45:e1:ce:
                    cd:10:5f:ad:36:20:1b:15:c8:09:50:9e:66:3c:3e:
                    9f:09:01:9c:86:37:03:2a:d1:c4:87:d1:03:ec:89:
                    fd:0c:a3:9b:81:86:9d:f7:d5:77:6a:a1:3f:6c:f8:
                    46:01:bd:33:b5:86:a4:24:72:7d:0c:a9:04:0f:73:
                    5c:59:6c:c0:3a:f4:dd:b4:cb:8c:3f:07:dd:64:d3:
                    4e:6c:e4:4e:f2:7e:12:5d:81:52:7f:90:9a:fd:f8:
                    f2:fb:13:59:50:be:22:2e:65:90:b5:a0:0c:04:1c:
                    2f:84:2f:0e:7d:ef:f5:3a:74:95:b4:2b:a8:a8:49:
                    d0:c2:74:45:7f:fc:9c:37:02:da:e9:d6:b9:31:ec:
                    cc:0c:7c:02:36:dd:a2:37:82:2f:0e:38:9e:f9:cf:
                    4c:5e:2d:c6:6e:93:07:60:11:98:9e:09:86:8b:5f:
                    6d:bc:77:79:96:5d:e1:80:fe:50:45:be:1e:c8:81:
                    af:b8:0e:c8:cc:40:61:15:97:58:34:ec:df:d8:56:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:59:0D:F0:B4:46:3A:76:71:7E:E7:8E:C2:6D:0F:F0:3E:FE:08:26
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230342e302f32342d3234203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b7:ee:42:31:c6:8a:99:4e:f2:25:c4:f2:2c:b8:1c:12:ff:
         6a:62:f9:6c:a8:10:bd:05:1b:ed:72:c1:aa:59:e3:42:43:04:
         52:a7:68:6a:07:9e:04:41:b3:5c:bb:83:8e:8b:1e:fd:49:5a:
         d3:05:19:d2:57:68:96:0f:11:7a:a8:fa:ef:34:5d:45:2b:a2:
         d6:9f:7c:29:c0:bd:90:f9:1a:1e:06:8f:32:dc:44:3a:03:c0:
         aa:e2:f9:a9:e2:ac:e8:a3:84:74:52:c3:c8:ae:3c:4f:c7:83:
         72:f5:12:b4:24:b5:05:4a:f2:6f:a2:ad:d4:fb:0a:1a:fc:23:
         97:ac:6e:60:19:ec:41:61:c7:bd:ae:dc:71:ee:c7:65:73:86:
         34:36:9d:81:75:02:37:72:7e:a3:13:70:33:1e:66:b5:00:92:
         9f:c2:b2:f5:da:a5:ff:ac:3c:57:46:3e:9f:90:30:00:96:4a:
         ec:64:0a:cd:32:dc:54:69:4c:48:fc:e7:16:3b:e7:34:53:1f:
         e1:9f:02:37:ee:ff:1e:69:e8:09:67:53:34:91:f6:fa:f6:ba:
         2f:65:3a:d4:28:35:30:2c:24:32:2f:2e:e4:67:58:25:62:d9:
         fe:dd:38:b4:f7:d3:30:b1:7f:21:9a:23:79:76:b4:58:6d:80:
         9c:4b:8c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:06 2024 by rpki-client on console-ams.rpki-client.org