Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230302e302f32332d3233203d3e20323632363837.roa
File:                     3138372e38372e3230302e302f32332d3233203d3e20323632363837.roa (raw, json)
Hash identifier:          gbfxTnsGmmT8sb3weQNpfGKVQ5vu6/aC19s9sxtyU3o=
Subject key identifier:   36:68:69:1F:25:89:F6:FC:CB:DC:05:63:EC:D2:52:D2:6B:E0:31:DC
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       08A78C0056C4D606745EB1E2C6D78CF5992D61FA
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230302e302f32332d3233203d3e20323632363837.roa
Signing time:             Sun 18 Feb 2024 20:00:00 +0000
ROA not before:           Sun 18 Feb 2024 19:55:00 +0000
ROA not after:            Sun 16 Feb 2025 20:00:00 +0000
asID:                     262687
IP address blocks:        187.87.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a7:8c:00:56:c4:d6:06:74:5e:b1:e2:c6:d7:8c:f5:99:2d:61:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Feb 18 19:55:00 2024 GMT
            Not After : Feb 16 20:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:b2:0c:41:86:a1:d6:c7:3e:23:45:19:08:
                    be:4a:f6:a5:41:9c:0b:b7:1e:34:0e:ea:dd:af:1a:
                    52:41:9d:79:18:61:68:48:68:c2:56:3f:73:1b:5d:
                    ff:bc:b3:6f:77:7e:c5:e5:40:a7:fd:d9:21:80:95:
                    f3:00:77:8c:59:20:93:19:f4:46:6e:56:14:b3:dc:
                    03:8f:e7:2a:06:17:4a:7c:b8:56:db:dc:f1:3e:b3:
                    b7:ff:0d:bf:ba:fb:fd:8f:5a:0a:f1:51:bd:66:be:
                    52:e7:89:42:cd:4a:34:d3:97:f8:4f:fd:82:7c:61:
                    02:29:27:e8:c5:09:4c:65:3e:52:af:3d:4e:c2:10:
                    4a:55:45:8b:aa:98:d9:2b:1f:40:c1:d9:f6:a9:42:
                    18:f9:c0:c8:04:4e:f9:b3:6a:45:dc:b1:f9:35:e6:
                    1b:e1:bb:25:b6:f5:f1:de:41:e0:7a:30:df:07:f8:
                    45:8c:6c:71:70:75:99:b4:b5:a3:90:2e:a8:d1:ca:
                    cf:9f:d8:a2:5b:64:b5:33:ed:a2:2a:34:5a:d7:9d:
                    69:9f:b8:c5:08:3b:16:0b:54:46:fd:28:22:c3:b5:
                    08:da:bc:38:ed:eb:8b:c5:5e:c4:d3:bc:67:fd:f8:
                    48:2c:10:c6:74:f2:62:36:6b:cd:85:09:5e:4c:61:
                    5f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:68:69:1F:25:89:F6:FC:CB:DC:05:63:EC:D2:52:D2:6B:E0:31:DC
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230302e302f32332d3233203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:21:6e:b4:9b:85:a0:7b:66:cf:72:a9:b4:26:7b:c3:ce:10:
         71:d4:01:d9:cd:94:3b:96:a5:9c:d3:b9:1a:63:fa:7f:74:f3:
         44:f3:6a:3a:77:d5:f9:6a:60:7c:ad:48:a6:10:47:02:ca:7d:
         22:6b:eb:99:3b:4d:d8:03:36:08:29:8a:c3:f8:48:17:71:b5:
         21:10:5e:32:2f:11:05:5e:41:7f:1f:7f:ba:17:e0:fe:c6:cd:
         46:6b:c2:00:4f:1f:16:03:55:92:55:67:c5:46:e2:28:2f:3f:
         89:0e:7c:72:ed:2e:02:a8:81:7a:9b:a9:d2:a9:38:66:5c:73:
         ed:4d:6e:e4:e0:17:77:15:b1:73:c7:73:94:93:5e:47:36:60:
         30:5c:0f:be:b7:90:b2:ef:af:e5:dd:e0:a6:ac:02:53:22:35:
         21:70:6e:b6:d9:7c:e3:26:3f:7f:5f:04:3b:39:a5:b8:0e:a6:
         1a:6a:d0:f0:3b:53:2e:aa:91:f1:83:2e:4d:6c:13:ff:f2:d4:
         10:13:f9:91:b1:81:c2:cf:76:1d:97:c6:ee:86:1b:84:b3:5f:
         80:da:57:85:e5:3c:be:44:70:09:e6:a1:c1:c8:cc:51:b3:2d:
         15:cb:51:1b:66:35:e3:dd:4e:ed:14:3f:42:04:34:40:8a:06:
         37:15:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org