Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230342e302f32342d3234203d3e203532353534.roa
File:                     3138372e38372e3230342e302f32342d3234203d3e203532353534.roa (raw, json)
Hash identifier:          Cx1kTRJxr/rpGXupUE0Y5M+RDtzbqqkXWSKudxC/v/o=
Subject key identifier:   15:07:0B:8C:0D:09:FB:54:C4:4A:54:87:9D:01:23:EA:27:8B:FB:03
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       0B1B2770051811C224425E1FAF97643AF5E26DB7
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230342e302f32342d3234203d3e203532353534.roa
Signing time:             Thu 14 Mar 2024 02:00:00 +0000
ROA not before:           Thu 14 Mar 2024 01:55:00 +0000
ROA not after:            Thu 13 Mar 2025 02:00:00 +0000
asID:                     52554
IP address blocks:        187.87.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1b:27:70:05:18:11:c2:24:42:5e:1f:af:97:64:3a:f5:e2:6d:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Mar 14 01:55:00 2024 GMT
            Not After : Mar 13 02:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:51:cc:f6:c1:8d:64:dd:c2:ad:99:44:db:72:
                    96:55:23:e2:c6:77:cf:a9:ca:92:d5:96:67:ff:46:
                    0c:e9:2f:5b:73:71:bd:ac:cf:a4:cb:b0:2e:dc:2a:
                    36:9f:80:73:a6:ee:99:42:8e:41:e8:55:87:80:02:
                    9c:bd:f2:2d:c0:ed:30:d6:c6:c8:c3:30:ac:43:b4:
                    77:62:42:b0:09:64:47:eb:5f:ca:42:71:ec:eb:42:
                    7b:a7:28:9e:b3:ec:2f:ac:ba:de:80:fc:18:4f:59:
                    de:8a:69:dd:25:0d:41:bf:a9:67:6a:6e:06:ea:dc:
                    ac:39:ac:2f:b2:2a:fd:70:a9:7d:78:7a:47:dd:38:
                    a8:e6:b2:d1:5b:13:79:18:f8:40:11:5e:cf:f0:25:
                    b3:96:d4:53:76:db:c9:20:3b:df:69:ff:aa:8f:c3:
                    30:d0:a0:2b:99:ed:0a:a0:b5:66:6f:5e:56:ec:96:
                    2c:5c:2b:05:a5:05:1d:6d:d2:1b:a3:b4:21:85:c0:
                    5f:6e:5d:ea:43:03:a6:ee:2e:55:28:35:87:7c:8f:
                    77:54:ea:11:a7:b7:1e:3b:60:b6:04:15:42:ae:b7:
                    8c:cb:6a:5b:41:c7:51:56:85:dc:b9:4f:9c:32:7c:
                    cf:71:22:00:27:80:16:d9:f2:08:dc:64:9f:ef:bb:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:07:0B:8C:0D:09:FB:54:C4:4A:54:87:9D:01:23:EA:27:8B:FB:03
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230342e302f32342d3234203d3e203532353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:92:ee:2b:24:e8:a3:6d:a8:69:11:2d:b7:bc:26:3b:c5:74:
         19:45:90:ab:00:f0:2b:07:27:d2:c5:c7:3c:d4:5b:37:49:4c:
         6e:66:96:cf:f1:8e:27:e3:4c:b3:6c:b7:c3:aa:9e:6d:f7:35:
         ab:d0:e6:e9:b5:ce:13:9e:4d:1c:d4:57:a7:46:31:8f:54:75:
         68:98:d8:c1:af:84:f2:2e:74:46:fc:cc:a1:db:42:90:8c:5d:
         3c:71:12:16:fc:dd:c8:cb:2f:19:84:f4:fc:96:f1:c7:dc:00:
         99:83:12:bb:fb:59:ab:b4:3f:c4:8b:a5:b5:98:5e:2b:d5:49:
         a1:f6:b8:fe:9f:5e:3e:7f:87:b2:14:37:2c:b6:b5:60:2e:28:
         45:3f:f5:90:34:6b:f7:44:40:7f:2b:95:68:30:c8:9f:22:22:
         c9:57:7f:39:81:98:f0:ed:22:b3:32:d2:ad:d1:d4:42:72:11:
         39:50:cd:c6:14:ec:10:00:00:df:00:dc:54:23:6f:04:08:eb:
         3b:cb:c0:1a:43:15:cb:d7:06:08:78:be:20:25:c0:36:72:fa:
         f5:4a:4c:42:06:89:bb:b2:be:04:86:1f:49:2c:99:35:95:b3:
         e6:39:1f:00:55:05:43:a2:1f:04:cd:57:f2:6a:64:be:b9:72:
         36:88:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org