Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139362e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139362e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          pOGiIWG6AraudKD83if2qDmfMFN+jW6zwVcTIzmev6k=
Subject key identifier:   DC:F1:6E:B0:45:79:06:AE:29:FD:44:02:F8:8A:4C:84:88:E6:9D:BA
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       5CDDE7E140DED41C9967EE5EC4915FE266128CFA
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139362e302f32342d3234203d3e20323632363837.roa
Signing time:             Wed 12 Jan 2022 12:33:29 +0000
ROA not before:           Wed 12 Jan 2022 12:28:29 +0000
ROA not after:            Wed 11 Jan 2023 12:33:29 +0000
asID:                     262687
IP address blocks:        187.87.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:dd:e7:e1:40:de:d4:1c:99:67:ee:5e:c4:91:5f:e2:66:12:8c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Jan 12 12:28:29 2022 GMT
            Not After : Jan 11 12:33:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d6:3e:bc:6c:70:48:e0:f3:a4:f5:a4:0f:09:
                    0b:ef:e6:eb:13:46:27:9c:07:46:dc:82:8c:a2:66:
                    0f:47:a7:f9:1f:40:60:1d:c1:aa:87:62:3b:8b:0f:
                    34:9e:98:c2:8c:91:12:dd:ff:f3:a3:f3:d6:a3:fd:
                    8e:18:2c:39:eb:96:b1:dd:4e:5a:57:c5:b6:4b:76:
                    d1:42:14:73:78:63:92:0b:11:ed:22:26:21:f4:a0:
                    e6:de:a0:1e:ae:6c:7f:e1:d3:59:98:c8:df:f4:77:
                    99:23:15:01:7a:e1:10:c8:5e:df:72:16:a0:88:b9:
                    90:47:82:f3:a4:4f:f9:35:84:6e:bf:e1:d7:08:12:
                    b3:0e:c8:3e:05:53:c4:23:ba:67:2f:d9:0c:fb:ea:
                    7c:fa:5d:99:8a:80:1b:5b:c4:ed:1a:0b:81:a1:ab:
                    31:6c:7f:6d:05:92:5c:b3:df:da:d5:b0:52:1d:41:
                    b4:4c:d9:f3:bc:b6:4a:b8:5b:c3:11:20:a2:2d:f0:
                    ba:2c:43:18:eb:b0:46:67:13:cc:84:d9:a9:2b:fd:
                    60:5f:27:3f:44:01:57:54:b3:44:ff:32:87:f1:59:
                    ba:5b:36:e4:d3:81:65:9e:34:68:64:6e:a2:c6:f2:
                    d6:b2:00:6a:44:36:c8:06:01:84:c8:a8:7a:06:a4:
                    f8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F1:6E:B0:45:79:06:AE:29:FD:44:02:F8:8A:4C:84:88:E6:9D:BA
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139362e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:63:9a:4a:75:35:4b:95:e0:0b:8f:94:df:5d:4d:94:d2:56:
         80:71:35:bf:55:a6:16:b0:50:3b:39:2d:bc:43:4a:af:d8:8d:
         c7:2e:8e:8b:0d:90:51:0b:a0:79:e5:1b:80:63:c2:f1:ce:7d:
         1f:63:33:c0:26:de:32:09:fe:af:ef:83:f1:3b:f1:2f:77:27:
         14:97:3a:62:2a:67:d7:d4:dd:93:6f:47:07:19:fe:8b:f0:6d:
         a3:58:36:d4:4f:30:f2:f7:f3:8c:79:df:c8:06:47:38:35:2b:
         58:9b:90:77:c5:a4:1f:7d:7b:df:c6:0e:e8:f2:1a:49:a8:51:
         5d:48:44:ff:cd:d6:ae:cb:b3:0d:30:56:2f:ee:c6:b4:45:ef:
         dd:53:60:d3:cf:5a:f3:56:4c:0d:31:1f:8f:0a:ca:a6:61:3e:
         2d:b8:d4:58:80:67:a7:50:af:2a:a6:66:0d:c2:c4:9f:df:17:
         f9:0f:8b:f5:93:0d:26:5d:51:61:c4:f4:ca:0c:95:1c:5e:75:
         27:b5:b8:3e:e7:92:70:02:11:ae:85:41:6f:d7:10:38:13:c6:
         42:ea:c6:5f:98:2e:50:18:3b:e4:c9:b2:04:39:75:a0:24:4c:
         cd:48:c9:2e:da:a0:2b:a2:dc:28:5a:fa:0e:c9:6b:aa:5a:79:
         52:78:ec:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org