Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139382e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139382e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          sRILZUPdRg18Pfu0GASVGWY/Pa0xQploArffPtMFO1I=
Subject key identifier:   3E:46:F7:DE:C7:FE:8F:DF:44:F7:9F:E3:09:1B:3D:BA:59:D9:6F:E3
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       5A38D1153C54F39E09080BF48011387EDF61787A
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139382e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 27 Feb 2024 18:29:12 +0000
ROA not before:           Tue 27 Feb 2024 18:24:12 +0000
ROA not after:            Tue 25 Feb 2025 18:29:12 +0000
asID:                     262687
IP address blocks:        187.87.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:38:d1:15:3c:54:f3:9e:09:08:0b:f4:80:11:38:7e:df:61:78:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Feb 27 18:24:12 2024 GMT
            Not After : Feb 25 18:29:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:02:c9:f6:66:87:05:fe:51:6d:e8:d1:57:
                    af:bf:fc:15:e4:4b:4d:10:9b:54:8a:17:65:4a:32:
                    05:50:b9:46:39:10:b1:97:14:a8:1b:bc:7e:39:4a:
                    46:40:45:d7:d7:22:6e:b8:46:3d:58:7a:31:84:d4:
                    1b:08:e1:34:3c:95:68:e9:42:ab:c0:f0:8e:8e:cd:
                    99:cc:5f:fb:5f:15:71:1b:64:4c:08:37:3e:ed:19:
                    7a:2b:04:2c:f0:ad:8b:78:64:59:4d:be:fe:74:59:
                    69:7d:8a:b5:06:e5:92:8d:9b:ba:f0:b2:8a:4a:1b:
                    4d:2f:5d:e6:dd:7b:12:72:45:98:7c:a7:36:37:fc:
                    d4:b5:5b:1b:95:79:9a:a7:6b:3e:02:63:e5:36:99:
                    48:6a:83:f6:e8:f0:96:7f:dd:b5:38:93:df:23:ca:
                    a4:57:d9:6c:c4:a5:10:2d:fc:c5:c9:f3:50:41:8a:
                    9e:11:b3:9d:33:44:f6:20:50:25:fc:81:4f:b4:96:
                    85:8c:53:da:4e:10:fe:54:dd:9e:0d:7e:22:e8:3c:
                    92:89:f1:16:bb:17:22:53:90:18:fe:af:1f:09:ae:
                    9d:ac:7c:1e:fd:d7:79:b0:c5:24:24:79:90:cd:fc:
                    ef:16:63:9a:3e:e2:56:38:ce:b0:17:ad:63:10:2c:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:46:F7:DE:C7:FE:8F:DF:44:F7:9F:E3:09:1B:3D:BA:59:D9:6F:E3
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139382e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:65:c6:c5:e7:f6:5d:dd:a8:98:28:31:3f:fa:b4:9f:db:23:
         a2:7f:54:d3:72:06:05:e0:85:89:ae:e2:cf:45:04:03:42:05:
         e7:39:0b:85:a6:f5:31:04:9d:3b:6e:3f:3a:ab:38:3b:95:2e:
         7e:74:d2:66:40:8e:3d:bb:00:0b:d7:1a:71:5e:17:9b:56:f3:
         21:05:93:c6:67:bc:2e:13:42:cc:a1:b5:1b:8b:1d:5a:e8:cb:
         43:b4:a3:d5:5e:ef:0e:95:f6:56:30:09:b5:94:9b:94:46:9b:
         be:2c:f3:db:24:e1:63:d0:64:a4:40:d9:73:d1:2a:ce:b9:e0:
         e6:37:01:80:3a:1d:09:21:64:a0:74:6d:8b:e8:14:c5:80:6b:
         d7:84:7d:c9:1a:ed:f7:b0:11:83:2f:fe:ac:2a:cd:55:8c:85:
         60:bb:1b:8f:84:cc:78:58:fd:01:1a:28:df:8d:13:bb:ab:0b:
         6c:30:d1:58:30:f1:c5:6c:3e:de:49:3c:25:ce:bc:6a:2d:45:
         60:cf:87:91:a0:ad:90:a7:ab:26:66:a0:d3:a0:66:53:40:ac:
         b0:75:bd:51:6e:60:db:96:21:99:01:1b:83:16:0e:93:e0:4b:
         4e:14:19:f6:df:f2:3f:df:b9:d7:4a:e2:ef:ce:78:df:07:ed:
         9e:78:50:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org