Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32322d3232203d3e20323632363837.roa
File:                     3138372e38372e3139322e302f32322d3232203d3e20323632363837.roa (raw, json)
Hash identifier:          VhkU77K1OOxObI/2Rx3okrz32hD7x44hGle7YMTXUXI=
Subject key identifier:   55:49:99:0A:F1:37:D1:8F:B1:49:DB:AD:EF:90:E7:9F:4B:86:FE:BE
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       1117967910808992B70CED8A4C454E6E4B23658B
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32322d3232203d3e20323632363837.roa
Signing time:             Thu 12 May 2022 02:00:00 +0000
ROA not before:           Thu 12 May 2022 01:55:00 +0000
ROA not after:            Thu 11 May 2023 02:00:00 +0000
asID:                     262687
IP address blocks:        187.87.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:17:96:79:10:80:89:92:b7:0c:ed:8a:4c:45:4e:6e:4b:23:65:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: May 12 01:55:00 2022 GMT
            Not After : May 11 02:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:cd:17:fe:1d:c0:7b:75:7d:ee:0f:c1:c2:
                    78:ce:f6:0f:72:80:14:e3:30:10:92:f5:b1:de:f7:
                    58:dd:a1:9d:00:9f:7f:a9:72:eb:3d:27:da:c7:f4:
                    b9:fb:f8:fc:f1:9d:13:ee:e7:81:89:80:27:9d:36:
                    72:42:66:da:bd:26:40:d3:e3:27:1d:08:4b:4e:af:
                    ea:af:34:2b:1b:a9:87:c0:79:00:31:79:51:66:28:
                    ee:e7:73:8f:f8:e8:14:36:5f:83:a1:72:05:5b:14:
                    ff:86:62:7f:bf:bb:b2:7c:e3:2c:97:35:f2:a0:f1:
                    dc:0f:40:cf:a5:ac:16:24:22:91:b6:7b:a3:75:21:
                    30:8d:50:fd:52:32:e4:1c:8d:57:4e:00:6a:09:63:
                    2f:e2:61:07:45:ea:0b:2c:3c:57:ed:e0:bf:56:35:
                    ae:e5:69:54:30:9b:7a:09:8a:74:7e:a8:a4:d3:0e:
                    87:4d:b2:65:50:d3:52:c7:61:90:65:9d:0d:78:a8:
                    77:f3:8b:f1:16:87:7f:06:28:4b:69:e9:c0:d7:8d:
                    60:c2:c0:e8:a1:41:87:01:48:4d:fa:0b:3e:13:6b:
                    49:10:20:44:80:ed:e2:13:c2:b8:ab:db:8a:14:53:
                    4f:ce:51:b9:5d:90:31:0e:ea:7f:c4:f9:19:34:cf:
                    b7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:49:99:0A:F1:37:D1:8F:B1:49:DB:AD:EF:90:E7:9F:4B:86:FE:BE
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32322d3232203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:3a:49:20:bf:91:94:44:a0:01:31:9a:11:f1:67:8c:f7:97:
         b4:32:86:29:5d:cb:3d:35:ef:f3:6c:91:80:18:63:39:b7:bb:
         d9:0c:a8:eb:7a:e5:f0:b4:01:3d:b8:6e:05:99:1e:d2:be:6b:
         ee:2a:c9:cc:22:59:09:94:c7:dc:3c:bb:ac:fd:00:d3:f0:f4:
         34:96:32:ff:88:51:2f:01:c8:29:ea:c3:6e:2a:60:29:f5:34:
         2f:cb:20:1f:e3:67:43:18:40:7a:b2:46:b2:f4:82:c3:d4:84:
         cf:b0:a6:82:4f:25:ca:e4:58:c6:49:1b:d3:85:20:92:79:fd:
         fe:ea:ad:6b:80:af:f5:86:d5:2a:29:b7:44:a1:d5:05:3e:a9:
         0c:95:32:0d:f7:f7:ca:07:35:c5:fe:50:53:d8:31:ab:f6:2f:
         bd:15:58:57:62:06:4b:bd:3a:f8:89:54:cf:c1:27:21:20:b1:
         d8:73:d5:35:f6:ce:e4:64:f1:17:a8:59:15:a1:1b:7b:29:6f:
         c6:49:1b:e9:78:8a:9d:4e:ea:12:26:08:ec:c1:4b:71:14:c5:
         f4:67:24:2c:aa:72:50:86:f5:cb:4a:3b:56:a9:d7:8c:cb:74:
         5c:24:5e:9c:4b:ee:6f:9a:57:9e:0a:22:cf:3e:16:45:fe:3c:
         8c:11:ca:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org