Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa
File:                     3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa (raw, json)
Hash identifier:          GaKoT/RS6vwxnyXKn5FJQNR1OXntwg9SyTev0xPOe4s=
Subject key identifier:   14:18:B5:B1:88:64:45:57:DB:8B:F6:27:C8:09:E2:60:D9:6A:91:64
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       643121DE0ADAE5D328C3C3B86ED2B6E07F66E4EC
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa
Signing time:             Tue 27 Feb 2024 18:30:24 +0000
ROA not before:           Tue 27 Feb 2024 18:25:24 +0000
ROA not after:            Tue 25 Feb 2025 18:30:24 +0000
asID:                     262687
IP address blocks:        187.87.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:31:21:de:0a:da:e5:d3:28:c3:c3:b8:6e:d2:b6:e0:7f:66:e4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Feb 27 18:25:24 2024 GMT
            Not After : Feb 25 18:30:24 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:1a:5a:6e:89:cb:72:22:ee:22:2d:d9:62:
                    bd:1c:ab:f5:9d:dd:3b:15:8d:f0:50:91:b2:ee:0a:
                    16:9b:e3:0c:00:57:ec:b3:11:0b:fa:b2:69:4d:c6:
                    59:fe:59:12:f3:74:19:c1:98:d0:fb:de:ae:07:b3:
                    41:50:77:ad:f7:6d:1e:01:8c:6f:10:a7:b4:48:22:
                    72:03:47:ce:31:e7:a2:97:54:88:dd:04:86:75:6a:
                    35:e0:c0:56:ca:f6:81:91:0b:7f:3e:b8:9d:e8:66:
                    90:4d:c6:0b:88:38:16:e9:f1:77:ad:89:84:99:cb:
                    d5:c5:cd:70:f5:ce:5f:9c:8c:e6:f5:e7:81:4a:89:
                    a5:32:40:86:1f:4f:76:b4:ef:d6:02:0d:8c:10:f5:
                    d8:22:f6:dd:e1:62:a2:03:27:9f:ae:13:cb:53:ad:
                    b7:ad:a6:08:52:95:aa:fb:a5:4b:99:e6:a0:78:88:
                    e9:d7:b0:8d:66:2d:6f:0e:7c:4c:f2:92:6c:ca:5e:
                    90:74:d6:90:b5:07:da:b8:16:a9:a1:ed:89:f3:43:
                    a0:06:16:cb:32:ed:60:67:33:e6:63:23:78:03:0d:
                    72:d2:0e:3c:c4:f1:80:c1:63:96:4e:56:a6:84:93:
                    53:05:0f:fb:4c:b3:49:5a:67:77:7c:52:d8:08:32:
                    34:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:18:B5:B1:88:64:45:57:DB:8B:F6:27:C8:09:E2:60:D9:6A:91:64
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32332d3233203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:e5:39:32:f3:21:de:91:03:e7:45:ef:9b:fe:09:85:0c:89:
         a5:4c:de:83:a0:07:e9:03:f5:b6:a0:d8:f1:30:6b:b6:ac:2c:
         9a:e7:ca:26:be:0a:22:ac:dc:cc:88:e7:8e:82:3c:5e:b3:53:
         b6:f2:30:b6:2a:bf:48:2c:3d:ad:24:f5:41:13:27:e0:ee:45:
         06:fc:eb:ca:6b:bd:0c:45:82:dc:50:3f:18:58:db:f0:b2:9f:
         0b:9c:c7:f3:1e:6c:6d:0a:1a:51:98:55:f0:ca:da:69:3d:0c:
         fd:9d:a7:46:2c:f2:fc:08:eb:a9:94:85:ea:76:0e:eb:0e:68:
         ee:65:89:c0:41:bf:f2:7e:e7:34:b9:54:67:82:71:bc:ef:41:
         4b:c1:f7:0b:25:b4:9b:f2:ee:b3:d2:f8:ec:f4:20:c5:5b:bc:
         64:c8:2e:1b:24:40:bd:3a:41:cb:eb:0a:bb:6d:88:89:5d:1b:
         72:09:db:fb:d0:ed:a6:a0:59:36:0a:ce:89:ff:70:b1:4f:af:
         69:d0:fa:01:2b:2f:79:89:66:98:03:ee:2c:bd:a9:a0:ad:f4:
         72:b3:0b:ad:87:d6:c5:3e:bb:c5:40:9f:d1:b4:f8:af:36:50:
         ac:4d:3b:2a:54:2e:4e:27:89:ed:64:db:35:5e:a4:7a:0a:d7:
         6c:11:7e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org