Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32332d3233203d3e20323632363837.roa
File:                     3138372e38372e3139322e302f32332d3233203d3e20323632363837.roa (raw, json)
Hash identifier:          qHmuLllptn+NbTbqxxAxt5677wk6YsDrhWZfUKSwfQo=
Subject key identifier:   25:9C:03:A4:27:22:E5:47:14:53:27:DD:AD:97:14:EF:D0:89:E9:37
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       17036BB8D7A4D806B93D1D96DB47D2F2339C5C1D
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32332d3233203d3e20323632363837.roa
Signing time:             Tue 27 Feb 2024 18:30:19 +0000
ROA not before:           Tue 27 Feb 2024 18:25:19 +0000
ROA not after:            Tue 25 Feb 2025 18:30:19 +0000
asID:                     262687
IP address blocks:        187.87.192.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:03:6b:b8:d7:a4:d8:06:b9:3d:1d:96:db:47:d2:f2:33:9c:5c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Feb 27 18:25:19 2024 GMT
            Not After : Feb 25 18:30:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:79:6e:05:ef:7c:87:e7:00:5d:99:db:b4:ac:
                    50:d8:7c:bf:d4:37:90:df:0c:b6:c1:0e:81:f8:42:
                    fa:6e:ef:a3:92:98:39:84:bc:cf:a6:59:c0:70:39:
                    98:d7:03:ca:8c:3c:61:28:e6:70:ab:a4:0c:93:4b:
                    b2:94:b1:73:1a:94:ca:cc:98:29:83:f6:c2:52:ef:
                    f7:17:ba:1f:47:e0:e3:00:c5:6d:40:12:da:89:ea:
                    62:23:b0:59:8f:a3:d3:3d:90:d4:2e:ae:e5:fe:03:
                    f9:94:3b:d7:2e:12:f8:f2:b1:d3:27:69:ff:43:36:
                    66:88:c7:5f:6b:2d:54:90:50:a7:5b:96:2e:47:a4:
                    f3:c7:12:e8:f5:71:32:a7:28:71:e1:d8:a4:dc:c5:
                    76:56:d0:15:c9:00:8e:2a:3d:cc:99:f8:cd:7f:3d:
                    b3:e2:da:d1:dc:81:4d:8b:3c:fd:05:fd:41:10:28:
                    ec:93:08:24:c8:54:f1:62:07:57:9d:dc:bb:40:6d:
                    a4:b2:5f:ca:d8:a0:99:ad:d0:d5:a7:7c:63:a7:81:
                    9e:8b:03:26:45:29:02:66:71:07:bd:62:5f:c0:d0:
                    2f:87:71:d6:e8:a9:83:e7:35:ce:7a:24:61:14:36:
                    fe:71:38:d3:31:49:cd:77:98:3d:3e:69:d0:41:9b:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9C:03:A4:27:22:E5:47:14:53:27:DD:AD:97:14:EF:D0:89:E9:37
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32332d3233203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:ce:ff:8d:0e:a2:c0:44:1c:a6:63:c5:53:41:c2:c3:99:e7:
         1a:17:78:b3:a5:04:15:9a:11:da:df:00:76:31:1c:0d:11:30:
         87:ff:3d:52:3c:0e:53:91:d3:a6:c8:25:0a:14:ef:96:52:67:
         49:71:d9:e4:01:14:89:21:32:8f:1e:53:5b:22:83:5a:8f:ed:
         21:e6:ed:56:68:bb:69:85:44:58:07:cc:ab:df:3d:03:eb:cb:
         0e:9e:a4:1e:97:2f:f7:cc:f9:a6:a3:e6:aa:ef:93:c0:f4:3a:
         4d:a5:3d:77:ff:91:4b:85:04:58:aa:ee:64:ca:c1:ae:21:7a:
         66:51:9c:af:0b:a0:6e:d5:fd:7d:90:97:bf:97:20:4c:32:ec:
         a5:ed:c6:44:68:ca:94:45:76:f9:1f:6f:02:45:2d:39:62:1d:
         42:41:96:09:30:b6:bf:9e:cf:24:ad:43:44:51:16:7f:bf:82:
         e6:90:12:c4:c2:c6:ad:08:44:00:a6:69:00:c2:c9:cb:53:9f:
         94:53:c1:d5:ac:21:bf:0e:b7:4e:61:2f:07:28:1a:11:fc:c2:
         5f:20:c5:93:5f:d8:ba:55:d3:27:41:d2:be:b6:60:0f:e8:c0:
         2d:4b:64:2f:62:3b:bf:fa:3f:16:7c:b3:50:12:33:9d:74:ad:
         37:5b:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org