Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230342e302f32322d3232203d3e20323632363137.roa
File:                     3138372e36322e3230342e302f32322d3232203d3e20323632363137.roa (raw, json)
Hash identifier:          Z+0HWYl0F3ubIHAzw8MqFOzYpAk7o1ZRPCu4m7Ic49o=
Subject key identifier:   7C:88:11:C0:53:DC:9D:FF:8A:58:71:67:E2:9F:7E:EB:88:62:19:EB
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       639AD1C5CDD76CC0E2BEC09F0F1587A1723F9C93
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230342e302f32322d3232203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:19 +0000
ROA not before:           Thu 03 Aug 2023 13:04:19 +0000
ROA not after:            Thu 01 Aug 2024 13:09:19 +0000
asID:                     262617
IP address blocks:        187.62.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9a:d1:c5:cd:d7:6c:c0:e2:be:c0:9f:0f:15:87:a1:72:3f:9c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:19 2023 GMT
            Not After : Aug  1 13:09:19 2024 GMT
        Subject: CN=7C8811C053DC9DFF8A587167E29F7EEB886219EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:1e:44:e9:a1:bd:93:eb:d9:5c:fc:a3:c5:
                    3d:7b:33:b2:a2:18:42:33:31:16:39:f0:cf:e4:a1:
                    0e:1b:1c:38:5e:7b:06:23:1f:cb:03:9b:ec:c0:5a:
                    1b:5f:05:91:17:da:d0:80:cb:76:e9:ee:89:9e:9e:
                    63:07:fe:ab:06:b3:6c:08:50:ec:86:eb:f7:bc:f4:
                    18:6b:8e:62:f0:67:b9:44:b6:e3:b5:ff:0f:78:95:
                    ee:59:e9:55:e8:4e:11:1d:fe:dd:86:d8:f9:8c:97:
                    10:f7:f3:9f:c2:5d:1d:4e:54:b6:ac:3e:7b:e6:82:
                    3d:8c:e8:34:55:d9:35:17:48:e4:eb:a0:f3:d4:9c:
                    1a:8f:ff:e5:51:6b:e6:7c:f0:73:4b:47:30:27:de:
                    bb:27:1a:ed:96:f0:fc:7b:14:da:05:43:8f:97:16:
                    f9:2d:ec:68:12:5d:c6:fc:4d:09:49:f6:6b:a3:7b:
                    d6:52:33:54:c7:d4:18:33:87:23:98:d6:84:39:ef:
                    03:a7:7a:96:cc:4c:61:94:d6:da:26:34:a5:72:8f:
                    37:32:74:e1:b5:43:38:f5:4f:4e:94:12:68:cc:ba:
                    cf:e4:73:b0:32:b9:a9:88:3e:f7:d3:d0:45:b9:80:
                    fc:61:e5:5a:a9:8b:db:6d:57:d9:f6:4a:84:56:e1:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:88:11:C0:53:DC:9D:FF:8A:58:71:67:E2:9F:7E:EB:88:62:19:EB
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230342e302f32322d3232203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:1f:8e:32:15:7a:9a:0d:02:01:58:97:2f:13:b3:bf:1e:7f:
         26:de:63:0c:cb:b3:6b:cb:05:72:fd:d9:f6:cb:ff:a0:8c:18:
         47:08:52:2a:f5:ca:8e:d3:60:7e:54:29:f9:e2:85:78:fb:94:
         09:d6:6b:ee:f7:0d:07:21:50:bc:98:6a:5d:f0:80:f6:3d:cb:
         01:ad:fa:02:59:7a:ee:80:6c:98:bb:72:9f:0f:88:53:7d:a1:
         70:6c:bc:bc:bd:39:b5:af:a5:23:9c:33:f6:0c:44:11:ed:ee:
         eb:35:0f:cc:15:4f:b0:65:e8:1c:50:89:9d:7d:79:31:b1:5e:
         e4:a5:f7:4d:cf:ba:f4:1f:58:8e:2b:2d:6c:1b:e0:2a:5d:d8:
         c9:c7:b7:73:78:60:ca:80:65:1d:44:51:d4:66:32:a7:a5:5b:
         e3:8d:d1:f2:01:30:5d:9d:f4:76:ad:0b:9b:c0:43:8a:d3:9b:
         39:91:f2:a2:45:93:ca:f0:56:6a:1f:d2:25:40:51:73:c9:28:
         80:27:fe:f0:00:86:4b:5d:c1:5c:72:5c:48:d7:80:20:24:0d:
         0f:e2:d7:ee:65:49:af:0a:58:83:70:2c:92:63:9b:e6:ff:4a:
         08:94:67:7f:90:02:d3:a4:aa:8a:24:df:ae:db:4e:43:bc:ca:
         c1:3f:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org