Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230342e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3230342e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          MnNXLf/W19UfyJi9iCuDVfjpsjSAH+btLSjEcGSJ72E=
Subject key identifier:   D3:D3:30:8F:1E:DF:5F:7B:C7:8A:59:1F:7A:13:46:A0:35:83:7B:4D
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       2E788913E7316404152D096CAE14543598C6669C
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230342e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:19 +0000
ROA not before:           Thu 03 Aug 2023 13:04:19 +0000
ROA not after:            Thu 01 Aug 2024 13:09:19 +0000
asID:                     262617
IP address blocks:        187.62.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:78:89:13:e7:31:64:04:15:2d:09:6c:ae:14:54:35:98:c6:66:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:19 2023 GMT
            Not After : Aug  1 13:09:19 2024 GMT
        Subject: CN=D3D3308F1EDF5F7BC78A591F7A1346A035837B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0e:ed:64:38:42:54:16:ee:b8:73:96:35:f4:
                    f7:a3:a0:a4:ad:13:df:82:4d:6f:23:9a:1e:53:a7:
                    5e:13:a3:03:dd:db:7b:9f:12:bd:fd:03:2a:47:13:
                    24:b0:c4:b9:32:6f:e2:3f:a8:dd:91:27:c6:14:65:
                    97:35:a8:d6:f1:36:2d:fd:9c:1e:fd:04:60:41:f4:
                    ce:3e:c0:64:1b:10:9b:f5:a2:d4:5f:48:80:bc:e3:
                    00:ce:86:55:f8:4f:4b:51:5f:a8:ff:43:6d:fe:d2:
                    df:fb:70:8e:37:2d:72:1d:17:0c:3c:d3:60:b7:24:
                    70:49:96:c0:a7:0e:94:81:5a:da:f7:47:4a:2b:2d:
                    a4:b9:ef:05:8b:fc:df:e4:16:de:74:c5:4d:6d:8f:
                    72:20:40:08:5d:2f:bb:2d:0a:14:09:0c:5c:4c:85:
                    50:48:13:e4:25:51:7a:af:28:3c:9f:e2:83:0b:43:
                    64:f5:de:32:0c:6c:7f:ac:dc:27:70:0d:49:ac:10:
                    be:57:e9:48:2a:17:32:d7:a3:29:6b:01:ad:2c:ca:
                    28:80:0e:18:47:64:b2:93:f7:68:92:3b:63:6c:0d:
                    a1:b2:40:05:8d:a2:ec:3b:77:57:82:dd:63:5e:c5:
                    e6:17:91:10:39:ee:fc:40:eb:51:8a:2c:27:6a:0e:
                    5f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D3:30:8F:1E:DF:5F:7B:C7:8A:59:1F:7A:13:46:A0:35:83:7B:4D
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230342e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:2d:29:11:ea:62:d9:06:14:bc:d5:47:67:07:78:71:9a:66:
         36:4d:80:7d:90:aa:60:98:1c:47:a4:2c:d2:4e:c4:ea:45:c2:
         1b:fd:a9:5b:3f:0d:44:42:40:77:6e:88:f4:a4:ed:a2:26:2a:
         2b:61:43:1b:f3:b6:48:fb:5f:e9:73:4c:d0:8f:91:50:9c:f4:
         e4:f9:93:1c:a2:c9:d2:d3:3b:fb:76:ae:08:da:5b:ca:1a:da:
         2d:4e:ad:e5:63:f9:7c:ef:79:86:81:b7:4e:12:43:40:a5:d8:
         c4:8c:fd:a0:cd:99:a5:26:f9:0f:c5:ab:de:63:aa:44:65:ae:
         61:6d:69:0b:a4:5f:47:cc:49:34:7e:d8:b5:f2:fc:2b:8e:8b:
         a3:50:d1:d4:d0:ed:27:a7:af:bd:f7:9c:22:ed:38:96:e5:42:
         51:ff:d2:cd:fa:85:88:e2:e6:ab:b4:4b:30:d4:4d:44:6e:11:
         47:71:6c:ce:6f:62:89:4d:59:be:4b:23:76:54:80:4c:97:30:
         d5:21:65:7c:3f:c9:d2:6b:e5:37:b6:40:64:89:bd:e1:23:4f:
         e8:d0:6c:2c:ef:5c:98:ec:56:ba:61:09:70:b1:fe:7c:62:a6:
         a8:08:cd:7f:f2:b8:49:24:08:87:1c:04:25:ef:e1:f4:ed:52:
         aa:e5:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org