Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230352e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3230352e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          pYLhv9EqDOhMW6XVKIKabWMjlAJk655F5N+XfB7Pc7k=
Subject key identifier:   0C:EA:86:4E:F6:02:73:AF:9D:B4:13:0F:31:0B:84:70:9E:26:D4:EB
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       6360A78CD3DB259AEFD500EA3866BF66A369858E
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230352e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:07 +0000
ROA not before:           Thu 03 Aug 2023 13:04:07 +0000
ROA not after:            Thu 01 Aug 2024 13:09:07 +0000
asID:                     262617
IP address blocks:        187.62.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:60:a7:8c:d3:db:25:9a:ef:d5:00:ea:38:66:bf:66:a3:69:85:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:07 2023 GMT
            Not After : Aug  1 13:09:07 2024 GMT
        Subject: CN=0CEA864EF60273AF9DB4130F310B84709E26D4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:07:f3:f4:b2:ab:41:33:bb:09:21:e1:e7:97:
                    60:18:7c:6f:05:29:d4:d4:b8:8c:42:1b:c2:80:ba:
                    da:b9:7f:ab:e8:cf:f4:e2:9c:f6:39:a2:fa:83:64:
                    cf:c3:fc:da:2d:0d:e5:99:0b:ba:22:1d:e4:56:04:
                    b5:43:a0:75:12:2b:b4:5c:0b:fc:ce:95:d6:1c:7c:
                    91:ad:cb:0a:1e:26:01:2b:f2:d4:5a:ef:e8:ca:d0:
                    4f:5d:93:e3:90:77:35:3e:8f:f5:74:95:95:80:a1:
                    9a:e7:f7:42:da:d9:71:0a:3f:1d:ad:0f:e3:35:28:
                    5c:e0:d3:4a:7a:a3:04:f7:3b:29:e9:de:a0:f8:0f:
                    57:3f:e1:7f:a0:47:0d:92:c5:97:36:c4:58:80:bc:
                    28:87:8a:26:ad:16:b7:89:e2:71:36:6a:26:ca:81:
                    82:6f:85:cc:1b:ab:98:fa:48:f7:de:75:4a:c1:57:
                    9f:83:8b:9c:1e:03:48:24:5a:6f:e1:e6:00:15:51:
                    7f:46:3b:a1:97:db:66:03:80:c9:53:d5:67:1d:b0:
                    f9:44:96:e7:34:b2:0f:05:09:73:c1:e8:d2:2f:e2:
                    13:c1:33:ec:92:f4:05:ca:75:f7:cd:f0:97:6e:09:
                    19:77:c9:b3:01:27:f7:a0:5b:d4:5e:30:d8:48:c7:
                    62:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EA:86:4E:F6:02:73:AF:9D:B4:13:0F:31:0B:84:70:9E:26:D4:EB
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230352e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:08:87:fa:57:f7:10:49:d5:e1:5c:76:d5:c0:42:ec:10:85:
         90:dd:5a:1e:39:5c:eb:59:90:00:c5:d1:2d:82:7e:42:f8:d1:
         b5:2f:f9:8e:35:e9:29:29:b2:11:ad:9e:f9:c1:6f:d9:ea:2d:
         3d:6f:44:fd:86:fd:57:0f:23:8e:77:fb:53:5c:9c:ec:40:29:
         e4:2c:d6:9d:46:0f:31:58:c9:e7:6d:88:2b:8d:61:db:5b:29:
         f5:25:9c:3b:28:70:af:dd:21:1c:fb:2b:c3:de:31:7d:c8:c8:
         a0:a4:00:30:d1:d9:c9:f3:7d:4d:50:0d:e8:d3:64:fa:13:2f:
         e4:d9:73:16:45:d6:25:38:d7:bf:73:80:cd:05:25:de:eb:60:
         52:5f:34:92:74:92:c3:47:f0:80:ef:81:a9:3a:67:a6:d5:63:
         24:4b:87:26:31:e6:1f:16:62:54:e8:d3:85:3c:85:0f:d5:06:
         ff:c6:80:d0:70:6f:51:22:4d:b8:8b:32:74:4c:1c:02:b3:ff:
         75:bd:51:33:7a:a3:42:98:98:27:d8:38:a1:21:2f:34:66:4f:
         bc:91:d9:c5:fc:fa:40:5f:70:ca:d6:cf:12:3d:b1:4b:a4:c2:
         b6:8c:07:1a:75:da:18:d6:4e:62:d6:40:c0:29:ce:98:66:99:
         ff:d1:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org