Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230322e302f32342d3234203d3e203532353534.roa
File:                     3138372e38372e3230322e302f32342d3234203d3e203532353534.roa (raw, json)
Hash identifier:          QsZKB2bFD+xKbailZd0WMmOH+i1J+/qKVSfD+Fo2Ri8=
Subject key identifier:   95:E3:B8:89:6E:BE:14:C3:CC:F4:25:84:41:1C:0F:29:22:55:6F:85
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       685F4DD4626631709FCB10C9483AE6BB5AF25A11
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230322e302f32342d3234203d3e203532353534.roa
Signing time:             Thu 14 Mar 2024 02:00:00 +0000
ROA not before:           Thu 14 Mar 2024 01:55:00 +0000
ROA not after:            Thu 13 Mar 2025 02:00:00 +0000
asID:                     52554
IP address blocks:        187.87.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5f:4d:d4:62:66:31:70:9f:cb:10:c9:48:3a:e6:bb:5a:f2:5a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Mar 14 01:55:00 2024 GMT
            Not After : Mar 13 02:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1b:b9:6a:ea:92:01:1c:8d:27:9e:02:db:43:
                    c2:ab:c4:d3:12:19:d4:ac:19:87:e1:c7:de:ac:63:
                    c2:5a:b5:2b:ab:1a:0c:7b:11:47:da:b7:04:f7:7b:
                    d6:bd:f0:61:2c:60:d8:ab:f8:42:d6:65:2b:a4:b4:
                    45:29:20:8a:c3:12:a8:f6:de:c5:da:5c:f8:d8:9a:
                    59:0b:d7:9a:1e:7e:98:5a:8c:d0:46:ed:dd:95:38:
                    f4:63:8b:c5:73:ae:f1:2c:1a:a5:dd:46:13:49:24:
                    31:16:68:f2:01:51:cf:c1:dc:c9:5f:98:e8:90:af:
                    10:de:11:1c:89:f8:dd:69:87:74:21:97:3d:e4:e5:
                    20:5f:8c:5a:78:fd:36:11:50:df:a2:14:8f:7b:24:
                    63:30:c1:68:fb:54:9c:87:f0:6c:51:0d:04:33:79:
                    8d:b5:21:2f:95:c4:b4:5c:00:69:f1:13:2d:72:a7:
                    36:f5:64:47:da:9e:b4:31:d3:42:e3:42:56:af:be:
                    10:d8:5a:83:9e:ce:e1:8a:02:ce:99:4f:05:0d:68:
                    6c:bf:b4:5f:a4:83:1d:7a:e3:13:1f:85:b3:79:2e:
                    7c:2a:e2:64:b4:ec:45:47:bf:db:1c:c2:8e:31:e7:
                    ec:b4:53:40:8d:0c:d2:45:39:ab:41:15:0e:b8:2c:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E3:B8:89:6E:BE:14:C3:CC:F4:25:84:41:1C:0F:29:22:55:6F:85
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230322e302f32342d3234203d3e203532353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:16:d7:fd:fb:f7:f5:ef:70:50:03:98:c4:ca:87:18:5c:cb:
         4a:fd:30:51:7e:99:e2:2a:5c:8c:00:d5:17:14:c7:67:26:b0:
         2c:92:86:be:3d:3f:d7:e9:5d:2c:03:20:5a:ec:bc:77:a4:9a:
         da:84:b4:36:4c:78:a2:80:50:e2:31:34:9b:17:81:87:71:01:
         68:e3:8c:2c:fa:97:c0:bd:a2:9d:21:a2:fd:26:c7:be:0a:a0:
         76:25:17:c2:ca:a9:83:fd:95:02:1f:02:07:79:bd:3f:11:4e:
         3e:21:94:2e:8e:46:39:2f:4f:90:ee:44:75:8c:ab:3d:62:ac:
         3c:c5:1e:1b:e9:89:0d:a3:22:65:fb:01:1b:b5:ae:1d:ec:77:
         7a:76:76:ea:a4:b5:e0:40:00:f7:0c:95:e3:2b:0c:69:3c:09:
         a3:c4:bb:9f:f7:ae:56:9f:bc:76:da:e3:40:07:d1:4c:c4:dc:
         f3:b3:12:c0:ba:67:86:5f:83:d9:e7:1d:50:25:a7:d1:71:a4:
         8d:67:e9:52:1e:7d:fd:4b:6d:9a:37:18:8c:5a:e5:16:6c:01:
         52:a3:29:cb:1f:d7:3d:31:e1:b2:9f:84:07:78:e3:5c:85:70:
         88:cb:2d:b3:09:5c:9e:05:f9:f3:bf:d3:65:8d:45:79:ff:b7:
         32:d8:c5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org