Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          aw/2NPPQSvEEBu+8+rZAizBVXXqUlT+424O2Brz9V4k=
Subject key identifier:   4B:C7:F9:6A:CF:5E:C0:24:59:E6:94:45:EF:55:11:9F:EC:FA:29:CC
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       76960D9FE3BEBF62843488C824DD324118F4F606
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa
Signing time:             Thu 13 Apr 2023 02:00:00 +0000
ROA not before:           Thu 13 Apr 2023 01:55:00 +0000
ROA not after:            Thu 11 Apr 2024 02:00:00 +0000
asID:                     262687
IP address blocks:        187.87.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:96:0d:9f:e3:be:bf:62:84:34:88:c8:24:dd:32:41:18:f4:f6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Apr 13 01:55:00 2023 GMT
            Not After : Apr 11 02:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:97:32:d9:38:2a:52:d8:9b:b4:97:2a:18:
                    e9:02:15:59:92:54:a1:ee:74:f9:4f:dd:3d:e5:58:
                    79:b7:3c:12:e9:50:14:59:76:d7:6a:5c:7d:fd:ab:
                    7d:0e:48:b9:57:0f:43:31:89:1e:57:a4:ce:6b:5b:
                    d6:b2:09:76:44:ae:e8:71:1b:95:fd:b1:66:68:3f:
                    7e:4d:a8:0f:13:fe:7b:43:ad:70:ca:ac:42:fe:56:
                    4e:f0:56:8f:80:52:ed:1b:f6:bc:cf:1e:d4:22:0e:
                    9c:e1:1b:c8:d0:5a:60:3d:c7:b2:1a:ab:ad:a5:00:
                    29:07:01:3c:f0:89:8a:55:6e:15:98:7c:b0:cf:25:
                    0b:37:29:c2:e4:bd:ac:cf:f1:df:3f:96:d3:17:f1:
                    67:33:99:ad:70:a1:16:57:42:9f:83:aa:1b:d5:b5:
                    0c:1a:29:25:ac:74:89:d6:66:6e:f1:cb:fb:ec:c2:
                    40:d8:0c:12:58:71:8f:85:d7:9c:c5:fa:c1:7b:f1:
                    4e:eb:c5:8c:a5:47:3d:68:50:02:2c:1f:4e:09:24:
                    91:08:42:30:dc:c4:c5:df:c6:d3:c2:3e:49:6b:cd:
                    82:a3:87:e9:b7:c4:5a:42:53:0c:a0:2e:88:82:1b:
                    4c:b0:5a:b4:ed:37:38:a7:87:e7:d5:0a:6a:f0:10:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C7:F9:6A:CF:5E:C0:24:59:E6:94:45:EF:55:11:9F:EC:FA:29:CC
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230332e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:16:74:2c:47:5b:b0:f9:58:b2:4c:c9:96:9f:25:2c:72:8f:
         54:35:d3:38:48:c3:fd:bf:f0:14:ed:d0:61:cc:a1:00:b0:0b:
         30:7c:b3:34:7a:d4:75:9a:26:6c:5b:3b:14:b3:20:09:0c:c6:
         3f:dc:08:9b:a4:46:f2:3e:b0:1c:80:33:31:fc:59:95:42:ec:
         6b:52:00:cc:c3:c2:05:07:16:ae:76:ee:ac:19:df:cc:81:7d:
         6f:04:19:b9:96:f0:ab:5f:3a:58:7e:ff:4f:8a:e1:7c:57:15:
         16:84:7c:fd:42:6a:cf:bf:41:e8:3c:4f:d0:4d:cf:5c:3c:19:
         a4:05:bf:27:ac:c0:32:d0:13:7c:f9:56:31:ea:82:82:d4:95:
         39:af:14:18:9d:b1:82:1e:8d:70:f7:12:4b:3f:20:4c:ac:e1:
         2f:2b:fc:82:3e:fa:b5:8e:74:57:a2:3d:34:9d:96:ee:c3:bc:
         83:14:f9:5c:15:83:7c:c2:1a:71:b9:d7:f2:2a:2d:5e:cd:bc:
         d0:7b:5a:8d:97:37:30:72:7f:b2:06:3f:f3:50:de:e0:64:ae:
         d6:52:71:42:c5:ee:93:74:9f:51:26:c4:35:d7:c1:5d:de:e7:
         c7:5c:24:83:d6:a0:81:f5:bf:be:d7:39:93:d2:a8:57:dd:16:
         16:49:c4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org