Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          OFttEwK59YVNKfZs9Py9uBLP0PKxQ+KZIYtm9iCANpE=
Subject key identifier:   01:91:35:7D:E9:A0:5E:04:06:83:FB:88:27:27:03:2B:BB:04:0D:40
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       569B515C1E48C43F15CBD282C555F5148705B75E
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 27 Feb 2024 18:28:47 +0000
ROA not before:           Tue 27 Feb 2024 18:23:47 +0000
ROA not after:            Tue 25 Feb 2025 18:28:47 +0000
asID:                     262687
IP address blocks:        187.87.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9b:51:5c:1e:48:c4:3f:15:cb:d2:82:c5:55:f5:14:87:05:b7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Feb 27 18:23:47 2024 GMT
            Not After : Feb 25 18:28:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:49:2b:ca:9f:98:80:e5:76:a3:b2:0b:4f:d4:
                    df:e1:42:1d:01:48:d2:48:87:94:02:13:74:c3:88:
                    d7:4c:fd:f9:70:e3:4a:23:59:41:02:d3:2f:ca:bd:
                    a0:2c:b8:27:08:08:22:87:7f:0e:f1:db:72:d5:42:
                    1e:5a:d7:07:d3:e7:8e:b3:b9:02:48:69:62:f3:f0:
                    76:eb:de:a0:e4:cf:28:2a:18:ec:5c:7f:c9:4a:df:
                    30:46:e7:7d:92:67:37:f3:43:12:32:96:a4:a0:b2:
                    94:e7:4c:57:06:17:66:7b:22:ea:db:e9:3e:c1:d0:
                    4a:e0:e7:29:17:8b:01:d0:73:0e:ab:8b:c5:7e:32:
                    1c:e9:d2:eb:af:b3:24:91:51:2b:84:74:1d:aa:48:
                    71:27:3f:f8:5b:19:e1:e9:e7:fd:11:99:10:73:5c:
                    34:1a:76:a5:32:2b:7c:73:72:04:d3:78:87:01:29:
                    a0:cc:e4:38:3c:60:c2:7c:d7:53:b9:c0:de:01:e5:
                    6a:67:ce:a0:98:d6:dd:0d:0b:37:77:32:9a:c5:5a:
                    34:9b:01:ed:1e:bb:58:55:78:e0:99:8e:f1:54:72:
                    2d:53:65:17:dc:71:e5:00:12:db:6a:16:f6:e0:21:
                    a4:08:cf:1b:72:4c:f0:8d:7b:9e:93:d8:c4:9d:0e:
                    01:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:91:35:7D:E9:A0:5E:04:06:83:FB:88:27:27:03:2B:BB:04:0D:40
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230302e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:62:b1:f3:28:46:0e:94:3f:55:16:41:5b:eb:6a:ab:dc:76:
         da:6e:cc:ce:c3:f3:61:eb:1a:b3:6b:29:62:7b:23:b4:c9:78:
         bf:0c:9d:4b:b6:96:cc:27:83:fd:10:a8:3a:8a:42:13:c0:7e:
         c6:5b:f4:f1:05:88:ca:5c:75:3d:65:65:cb:b8:c1:e0:f5:aa:
         5d:b2:78:b1:2f:e3:d7:a9:f1:1d:69:39:25:e0:80:1f:ec:bf:
         d9:5e:89:ad:c8:7c:d6:8f:5c:38:bc:14:2f:09:04:4d:5d:af:
         a5:3b:18:0f:5c:f7:93:bb:15:ee:6e:8f:7c:73:ef:a1:25:6d:
         77:e6:98:10:1e:83:93:f1:d3:c6:ab:76:86:f6:16:d0:4f:66:
         11:b0:8a:e6:f1:a8:ca:f4:d6:4f:67:19:51:c1:d0:4d:a6:40:
         de:4a:03:54:e3:55:f2:2d:92:0e:e7:f3:74:94:77:9f:cf:7e:
         61:c0:c2:85:60:29:a7:47:ba:ea:90:58:47:50:74:15:ff:a7:
         02:79:c4:45:28:04:57:e9:35:0a:1d:fb:97:ff:fe:b7:65:91:
         a6:67:9e:38:5b:f5:30:ff:8e:08:c4:a4:8e:e8:c1:1e:44:ec:
         df:07:08:dd:00:b6:f0:ff:9a:a7:a4:37:57:89:c4:c3:dd:9a:
         0c:e4:f3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org