Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          4bM16Vh50wwtjXLyl2crGxLasep6aIsGPg/vyravcrA=
Subject key identifier:   33:58:DA:AC:4C:5D:4B:E3:C1:6D:F6:EC:B9:B8:5A:14:51:C3:11:C2
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       7068100DD900F1F5C3BA7013AF8982D8406E568E
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa
Signing time:             Wed 15 Nov 2023 14:00:00 +0000
ROA not before:           Wed 15 Nov 2023 13:55:00 +0000
ROA not after:            Wed 13 Nov 2024 14:00:00 +0000
asID:                     262687
IP address blocks:        187.87.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:68:10:0d:d9:00:f1:f5:c3:ba:70:13:af:89:82:d8:40:6e:56:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Nov 15 13:55:00 2023 GMT
            Not After : Nov 13 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ba:12:e6:e7:55:b6:a1:2d:ad:36:80:ee:98:
                    25:f9:2a:52:ad:7e:d1:b2:06:ff:49:be:1d:84:fd:
                    6c:34:4c:c0:d3:09:8d:83:6b:79:93:16:b2:9b:8c:
                    31:8d:0c:ed:f8:8d:47:0d:0d:39:c4:f3:2e:ba:49:
                    4b:8b:1c:c8:1a:ef:d8:18:e7:a2:65:9d:50:3a:a9:
                    21:f7:f0:03:22:93:f4:39:f2:cb:da:8f:11:77:db:
                    fc:45:2c:ce:a2:cf:2d:ea:72:63:4e:82:c0:4f:eb:
                    53:24:d8:1f:15:52:5a:83:45:87:4b:90:ad:ad:a0:
                    11:ac:5c:12:ea:96:92:ab:79:b2:1a:60:f5:0f:71:
                    6d:d3:15:2b:01:52:d1:1a:40:00:e4:a2:1b:18:d4:
                    08:77:d5:d0:24:cd:d7:03:ad:9a:3a:62:65:e8:97:
                    a1:bb:dd:79:5c:d4:f6:2a:02:e2:26:62:f2:3b:46:
                    5b:e3:b7:2a:13:83:d1:2b:2e:ae:e2:08:14:26:60:
                    05:b1:90:4b:af:66:aa:5e:7d:1c:60:67:d7:a0:af:
                    cb:3f:2f:0a:b9:51:7a:35:08:29:d6:4c:80:de:a0:
                    4f:f6:04:1c:16:1f:cf:c8:27:68:20:ce:c3:ad:8b:
                    67:a9:a0:85:25:d3:90:6a:16:cd:f5:20:ab:5c:17:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:58:DA:AC:4C:5D:4B:E3:C1:6D:F6:EC:B9:B8:5A:14:51:C3:11:C2
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139322e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e4:4e:a0:fc:10:ac:c4:f6:82:4a:ff:e0:5f:c8:8b:7a:90:
         91:3a:85:9d:6b:da:93:20:43:3b:d2:2c:e1:28:bf:1f:79:fc:
         06:04:90:bb:68:ad:7d:ee:cd:9e:3f:67:69:09:12:2c:63:ba:
         1f:12:2f:79:a5:9f:86:03:d8:59:ef:81:bb:05:9b:e7:f6:1f:
         5b:e4:3a:83:32:55:3f:ff:31:a6:4e:42:82:13:72:6f:f4:d6:
         3a:0d:ff:04:ef:3f:7e:53:3a:4b:fa:e4:42:8a:70:f8:df:75:
         87:29:8e:4d:92:ae:7b:7b:17:25:a3:3b:45:99:2b:05:fd:25:
         98:78:f5:49:28:1b:ba:bb:8b:43:c4:3f:82:e4:44:fd:19:98:
         ef:a5:a6:7b:96:bc:b6:66:96:03:6d:b6:3b:ad:fd:2c:7c:95:
         b1:8c:9b:5e:b3:56:9e:eb:5f:08:66:4e:ae:d9:ff:99:d2:91:
         3f:f5:5f:9a:d3:b8:91:d2:dd:f2:59:de:97:ec:53:af:3f:37:
         b9:32:28:02:17:0c:c5:0f:fc:15:80:5c:0f:19:0b:0e:7a:ad:
         e7:82:e6:c2:e0:f6:a5:9e:d9:44:6d:6e:79:b8:5f:ff:9c:74:
         5f:71:b6:85:7a:2e:91:4b:ce:00:34:49:d9:39:4b:f7:b1:a9:
         ef:1b:78:03
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUcGgQDdkA8fXDunATr4mC2EBuVo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQwNDNGRjM2MUU5RjNGODYyNkU4NjZDRDUyRDFEOTUy
OTMwQjE3MDAeFw0yMzExMTUxMzU1MDBaFw0yNDExMTMxNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUJCQTEyRTZFNzU1QjZBMTJE
QUQzNjgwRUU5ODI1RjkyQTUyQUQ3RUQxQjIwNkZGNDlCRTFEODRGRDZDMzQ0Q0Mw
RDMwOThEODM2Qjc5OTMxNkIyOUI4QzMxOEQwQ0VERjg4RDQ3MEQwRDM5QzRGMzJF
QkE0OTRCOEIxQ0M4MUFFRkQ4MThFN0EyNjU5RDUwM0FBOTIxRjdGMDAzMjI5M0Y0
MzlGMkNCREE4RjExNzdEQkZDNDUyQ0NFQTJDRjJERUE3MjYzNEU4MkMwNEZFQjUz
MjREODFGMTU1MjVBODM0NTg3NEI5MEFEQURBMDExQUM1QzEyRUE5NjkyQUI3OUIy
MUE2MEY1MEY3MTZERDMxNTJCMDE1MkQxMUE0MDAwRTRBMjFCMThENDA4NzdENUQw
MjRDREQ3MDNBRDlBM0E2MjY1RTg5N0ExQkJERDc5NUNENEY2MkEwMkUyMjY2MkYy
M0I0NjVCRTNCNzJBMTM4M0QxMkIyRUFFRTIwODE0MjY2MDA1QjE5MDRCQUY2NkFB
NUU3RDFDNjA2N0Q3QTBBRkNCM0YyRjBBQjk1MTdBMzUwODI5RDY0QzgwREVBMDRG
RjYwNDFDMTYxRkNGQzgyNzY4MjBDRUMzQUQ4QjY3QTlBMDg1MjVEMzkwNkExNkNE
RjUyMEFCNUMxNzIzNjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA67oS5udVtqEtrTaA7pgl+SpSrX7Rsgb/Sb4dhP1sNEzA0wmNg2t5
kxaym4wxjQzt+I1HDQ05xPMuuklLixzIGu/YGOeiZZ1QOqkh9/ADIpP0OfLL2o8R
d9v8RSzOos8t6nJjToLAT+tTJNgfFVJag0WHS5CtraARrFwS6paSq3myGmD1D3Ft
0xUrAVLRGkAA5KIbGNQId9XQJM3XA62aOmJl6Jehu915XNT2KgLiJmLyO0Zb47cq
E4PRKy6u4ggUJmAFsZBLr2aqXn0cYGfXoK/LPy8KuVF6NQgp1kyA3qBP9gQcFh/P
yCdoIM7DrYtnqaCFJdOQahbN9SCrXBcjYQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDNY2qxMXUvjwW327Lm4WhRRwxHCMB8GA1UdIwQYMBaAFNQEP/Nh6fP4Ym6GbNUt
HZUpMLFwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E5ZkJ2dnV2NDVQMTFi
eDJWbmpWM29ndDlqV0Jjck4zMlYxWlNmeUhvcjVvLzAvRDQwNDNGRjM2MUU5RjNG
ODYyNkU4NjZDRDUyRDFEOTUyOTMwQjE3MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ENDA0M0ZGMzYxRTlGM0Y4NjI2RTg2NkNENTJEMUQ5NTI5MzBC
MTcwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BOWZCdnZ1djQ1UDExYngyVm5q
VjNvZ3Q5aldCY3JOMzJWMVpTZnlIb3I1by8wLzMxMzgzNzJlMzgzNzJlMzEzOTMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzYzODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
u1fAMA0GCSqGSIb3DQEBCwUAA4IBAQAY5E6g/BCsxPaCSv/gX8iLepCROoWda9qT
IEM70izhKL8fefwGBJC7aK197s2eP2dpCRIsY7ofEi95pZ+GA9hZ74G7BZvn9h9b
5DqDMlU//zGmTkKCE3Jv9NY6Df8E7z9+UzpL+uRCinD433WHKY5Nkq57excloztF
mSsF/SWYePVJKBu6u4tDxD+C5ET9GZjvpaZ7lry2ZpYDbbY7rf0sfJWxjJtes1ae
618IZk6u2f+Z0pE/9V+a07iR0t3yWd6X7FOvPze5MigCFwzFD/wVgFwPGQsOeq3n
gubC4PalntlEbW55uF//nHRfcbaFei6RS84ANEnZOUv3sanvG3gD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org