Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139342e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          DyMMVW6KtjtuOos/l/z3oMg3FhgV9pwPpR1tbYn4/cE=
Subject key identifier:   B6:7E:BA:88:11:3E:76:92:58:54:AD:1F:D1:6A:B3:11:14:AB:B2:4C
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       4E26975F404D2356FBCF6D6652514B5D4D5DDECE
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 05 Sep 2023 12:00:00 +0000
ROA not before:           Tue 05 Sep 2023 11:55:00 +0000
ROA not after:            Tue 03 Sep 2024 12:00:00 +0000
asID:                     262687
IP address blocks:        187.87.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:26:97:5f:40:4d:23:56:fb:cf:6d:66:52:51:4b:5d:4d:5d:de:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Sep  5 11:55:00 2023 GMT
            Not After : Sep  3 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:24:ea:a4:a1:06:4c:16:6d:df:65:66:2d:
                    c7:c5:13:b8:ed:07:74:e2:13:8b:ac:f9:80:99:b9:
                    3d:72:8e:e5:9b:17:dc:09:55:c7:b1:56:92:70:16:
                    e4:4c:3f:5d:e7:f5:13:2d:ca:25:53:78:a8:c0:bb:
                    80:74:ca:03:3c:30:03:36:a1:cf:18:b8:bf:e7:ce:
                    25:36:6c:04:92:33:40:3d:5c:91:6b:f4:dc:ea:61:
                    63:b4:df:19:ca:6a:5d:fe:36:e2:5b:1d:72:43:79:
                    94:88:cd:df:0c:3a:2e:a3:e9:84:79:38:e3:81:a4:
                    12:8d:76:aa:df:b4:2a:86:a2:83:66:6d:df:4e:a6:
                    09:82:c7:21:95:f1:98:72:25:c3:00:66:78:60:94:
                    e8:f5:a7:2f:1d:16:de:41:be:f2:d4:04:b6:e2:a8:
                    42:d1:e6:ae:27:e2:ed:1c:3b:49:4b:75:4c:c9:ec:
                    26:be:e4:3e:d7:20:09:7c:66:2f:15:6f:55:8d:e9:
                    8a:97:66:62:3a:97:b9:17:62:e1:e1:95:dc:50:c8:
                    b3:f3:33:68:b5:a3:6b:70:88:18:46:18:30:db:df:
                    02:de:80:93:2d:98:9c:68:15:c5:2b:d8:0b:8f:5c:
                    cc:bb:1a:8b:e1:91:d9:3b:da:18:89:b2:30:cd:54:
                    8a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7E:BA:88:11:3E:76:92:58:54:AD:1F:D1:6A:B3:11:14:AB:B2:4C
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:b2:9f:d0:35:b7:bc:87:0a:d3:72:26:5b:e0:f7:ad:56:99:
         ba:e8:d1:55:b4:8f:3c:e2:0a:3f:aa:b1:06:5a:6d:d2:27:4a:
         7a:9d:b9:19:d9:a1:51:94:a6:79:af:b6:3e:c6:a2:12:70:0a:
         70:0e:8f:b1:82:bc:0f:ff:81:ee:3c:03:4a:cd:b6:2b:79:1f:
         8e:b3:78:b1:92:b5:1e:49:68:5f:24:20:02:52:85:1c:6f:c6:
         07:41:38:9f:ec:c1:b7:7e:21:92:30:e5:69:30:cb:b3:4a:16:
         68:86:a2:bd:4a:ea:e7:a3:cf:7f:86:98:a1:c0:bd:58:e6:d8:
         f5:60:2d:9f:33:8d:6c:5a:de:0d:4a:d2:9d:9c:57:43:83:1f:
         0e:8f:65:a4:15:26:97:53:c3:b4:fe:32:b0:a2:9c:f4:84:53:
         a5:6d:fa:23:68:6a:ef:e2:31:d2:3e:fb:14:12:ef:9e:1e:5a:
         82:42:40:fb:b7:09:da:58:08:75:61:5c:8c:b0:af:0b:15:5a:
         f2:9a:84:3d:a6:c2:95:14:c5:1c:80:9c:a9:49:87:57:f5:46:
         e4:55:96:92:fb:b9:11:30:87:1f:ba:93:7e:07:c8:76:5f:93:
         cb:96:7b:8b:f2:06:7e:15:5b:f2:10:cc:f5:df:21:4d:a1:c9:
         b9:4b:1b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org