Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          5qYFpY8EEWToOfet4A68+ulO7TkeK/TinrQZKFy6YF4=
Subject key identifier:   BF:8C:38:90:CA:14:EB:52:D0:A4:18:65:DD:2A:0C:30:71:94:0E:D2
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       03E98DBAFF92875048B8FE4077CDFA0905CD56BA
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 05 Sep 2023 12:00:00 +0000
ROA not before:           Tue 05 Sep 2023 11:55:00 +0000
ROA not after:            Tue 03 Sep 2024 12:00:00 +0000
asID:                     262687
IP address blocks:        187.87.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e9:8d:ba:ff:92:87:50:48:b8:fe:40:77:cd:fa:09:05:cd:56:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Sep  5 11:55:00 2023 GMT
            Not After : Sep  3 12:00:00 2024 GMT
        Subject: CN=3082010A0282010100DDDED5E214A7D2334E52D1EAAB0AB0A5E2A915FFD00A6208C2907D6BD36AEDDD39AC91F196EEE86CC0E0E3FB8810C526777D34E13C666ED3B628AF79FE691722649052BE01642CFCBF21578D363E535A4E7169C49C99829D9C53ACBDA653512F11915202ABB3B36E24426DD9FE19B88513C583FC8F661CB04091CF579C087DA3B497730D4F292DB2FF4AE7B6CEA6D99EF32403792475DCC8BF70F6F62EFC7209BEF8F23B3F4E805D50E9422CFB696F6A6CAB8164DFE3B3CACF93872AF551F0464C32C3C635B53B977EA9B57D4B28AB6A3F5E7BAC84009B82B12C39297CC4EBF46EB175094AE0DDFAE37396421A54364B96AFE7A3A5BC507776B6D3123DDD60BD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:de:d5:e2:14:a7:d2:33:4e:52:d1:ea:ab:0a:
                    b0:a5:e2:a9:15:ff:d0:0a:62:08:c2:90:7d:6b:d3:
                    6a:ed:dd:39:ac:91:f1:96:ee:e8:6c:c0:e0:e3:fb:
                    88:10:c5:26:77:7d:34:e1:3c:66:6e:d3:b6:28:af:
                    79:fe:69:17:22:64:90:52:be:01:64:2c:fc:bf:21:
                    57:8d:36:3e:53:5a:4e:71:69:c4:9c:99:82:9d:9c:
                    53:ac:bd:a6:53:51:2f:11:91:52:02:ab:b3:b3:6e:
                    24:42:6d:d9:fe:19:b8:85:13:c5:83:fc:8f:66:1c:
                    b0:40:91:cf:57:9c:08:7d:a3:b4:97:73:0d:4f:29:
                    2d:b2:ff:4a:e7:b6:ce:a6:d9:9e:f3:24:03:79:24:
                    75:dc:c8:bf:70:f6:f6:2e:fc:72:09:be:f8:f2:3b:
                    3f:4e:80:5d:50:e9:42:2c:fb:69:6f:6a:6c:ab:81:
                    64:df:e3:b3:ca:cf:93:87:2a:f5:51:f0:46:4c:32:
                    c3:c6:35:b5:3b:97:7e:a9:b5:7d:4b:28:ab:6a:3f:
                    5e:7b:ac:84:00:9b:82:b1:2c:39:29:7c:c4:eb:f4:
                    6e:b1:75:09:4a:e0:dd:fa:e3:73:96:42:1a:54:36:
                    4b:96:af:e7:a3:a5:bc:50:77:76:b6:d3:12:3d:dd:
                    60:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8C:38:90:CA:14:EB:52:D0:A4:18:65:DD:2A:0C:30:71:94:0E:D2
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230352e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:a2:f7:d3:14:f8:c3:1f:2b:f3:e7:92:b3:6d:eb:2d:7d:f6:
         d5:ab:46:92:7a:d4:cc:15:9e:9a:a8:cc:89:9f:22:cb:e9:51:
         6d:66:fc:3e:a4:db:12:3d:69:67:46:7f:f2:04:a9:b5:71:a0:
         a4:81:81:9e:17:42:e2:d9:80:2f:09:c9:39:95:c4:8e:2f:b8:
         30:2f:dd:5d:97:fd:51:4c:3f:4c:db:58:f8:32:dd:7d:77:8f:
         bf:fc:c0:8d:5c:98:57:52:7f:46:52:64:76:de:45:bf:5b:2a:
         36:2c:af:69:64:96:6b:e6:fd:46:5d:01:87:c4:9a:7e:c0:ad:
         99:12:55:08:f8:d9:ff:b9:be:73:a0:3f:6c:85:d4:70:fe:fb:
         f0:21:5b:61:e8:17:3c:79:e6:f5:a5:cb:a1:13:72:f7:37:be:
         c4:c6:41:7c:e5:3c:94:63:eb:a8:0f:b0:28:b1:22:cf:fa:2e:
         04:d9:cf:87:58:78:b1:18:79:33:59:ee:9d:f5:1d:1d:85:52:
         71:df:d2:32:99:93:7d:ed:6b:37:07:bb:78:4e:29:eb:58:1b:
         00:bf:69:1d:81:09:01:03:99:71:57:39:3c:5a:c6:5b:26:a5:
         c8:9e:a5:22:90:af:64:bd:e5:cb:ef:3a:e4:f7:2a:84:51:c3:
         ea:df:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org