Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139352e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139352e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          xvAfh9HBqYNsWjfPRx5ODpxmQwD/1YLrl85g/9osFqE=
Subject key identifier:   8D:09:2C:99:E7:80:B8:57:9B:E4:36:31:8F:54:EF:F1:90:43:DD:5F
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       097C8773FE9DA398563E816E53BC7AD97D6CFB15
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139352e302f32342d3234203d3e20323632363837.roa
Signing time:             Thu 14 Mar 2024 02:00:00 +0000
ROA not before:           Thu 14 Mar 2024 01:55:00 +0000
ROA not after:            Thu 13 Mar 2025 02:00:00 +0000
asID:                     262687
IP address blocks:        187.87.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7c:87:73:fe:9d:a3:98:56:3e:81:6e:53:bc:7a:d9:7d:6c:fb:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Mar 14 01:55:00 2024 GMT
            Not After : Mar 13 02:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:48:69:b2:71:dd:0f:32:a6:0a:45:0d:3d:2d:
                    98:91:6e:53:e1:2f:91:11:21:07:1b:94:e9:16:0b:
                    ba:69:6e:9e:a0:7d:0b:a4:20:77:7a:b1:85:ca:19:
                    64:16:d0:17:5b:08:1c:2d:56:31:66:38:b2:8d:25:
                    8e:af:48:6d:32:f7:72:b2:61:26:35:71:db:f3:a8:
                    5c:f1:dd:d5:73:81:5c:42:8d:fc:5f:89:f1:85:ca:
                    ad:bc:8d:0a:75:d8:17:a9:4d:be:34:99:61:76:99:
                    26:8a:e6:5c:fa:a6:a0:fe:e0:bc:3c:ab:3e:58:fe:
                    ab:c8:43:8b:2b:3c:b7:80:a8:b2:87:98:ba:ac:c7:
                    a7:5d:39:f2:d9:8d:cb:65:df:96:fe:80:bc:f6:33:
                    89:7a:80:78:e1:63:5c:20:ad:1d:39:89:0a:3d:77:
                    02:9e:51:e7:70:6b:5a:9a:9b:28:7c:65:7a:4d:f8:
                    e9:db:b2:2d:60:7a:84:a1:0d:e2:4f:04:c1:5c:bc:
                    75:89:72:66:eb:93:2c:37:4e:a7:bc:94:18:86:54:
                    4f:72:9d:03:73:58:7b:66:57:1a:58:9a:7b:81:a0:
                    56:82:38:00:28:ba:a0:8b:7b:3a:3f:17:61:01:9c:
                    72:69:4b:2e:08:81:18:27:de:a5:8d:ff:6b:5d:e8:
                    b3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:09:2C:99:E7:80:B8:57:9B:E4:36:31:8F:54:EF:F1:90:43:DD:5F
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139352e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:18:8d:f2:6f:8b:c0:3d:3a:45:56:3d:59:4a:ac:55:cf:26:
         b6:87:9e:ba:45:f1:76:9a:6f:0b:ad:c1:93:ba:76:1a:54:ce:
         21:32:e2:7a:19:18:52:2c:3b:bc:e1:d2:07:d1:0e:22:4f:ce:
         db:de:60:21:ac:53:bf:4c:fd:ab:40:8c:b6:c8:b7:ac:91:aa:
         51:f5:d2:8f:11:58:08:11:19:86:1d:65:23:39:d4:a5:3e:11:
         6a:60:c0:91:3e:b0:3a:e3:64:6d:f6:a9:cf:56:e4:d5:d3:92:
         b8:66:4d:b8:36:b3:a7:3c:5f:a8:9c:ce:8e:56:c2:4c:92:0b:
         4a:28:1d:47:ed:4e:fe:48:a0:92:d1:1a:c5:a4:bb:96:b8:5c:
         d6:ce:95:8e:08:59:da:e9:7d:16:dc:e6:e0:c2:f9:9c:8a:92:
         12:e2:05:8e:00:84:6f:b6:8f:b1:c2:db:bc:6c:66:a1:36:e0:
         eb:4a:b1:b1:e2:33:27:17:1b:8f:d1:8c:70:08:2c:6c:c5:07:
         56:2a:2c:ac:1a:71:a9:6d:da:15:89:d7:93:c3:bc:d1:15:f2:
         17:06:8c:8a:6a:0a:aa:fe:a8:c8:88:4b:fb:c5:ae:d4:fd:52:
         e1:53:46:42:22:de:bb:a1:e0:c9:86:ca:1b:3d:d3:f2:be:90:
         7d:61:de:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org