Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230372e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3230372e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          bNP2d8pvcq8enYcXcmagegvrrw0TKQiLcFFV49EAY6Q=
Subject key identifier:   B3:BC:85:F3:93:61:14:C4:E9:27:4C:63:C3:6F:C8:4E:B5:66:22:96
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       252A90D7D1FFD14FB735961B338A706A07081391
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230372e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:09 +0000
ROA not before:           Thu 03 Aug 2023 13:04:09 +0000
ROA not after:            Thu 01 Aug 2024 13:09:09 +0000
asID:                     262617
IP address blocks:        187.62.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2a:90:d7:d1:ff:d1:4f:b7:35:96:1b:33:8a:70:6a:07:08:13:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:09 2023 GMT
            Not After : Aug  1 13:09:09 2024 GMT
        Subject: CN=B3BC85F3936114C4E9274C63C36FC84EB5662296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:1c:79:a3:bb:2f:9a:03:8e:60:bf:8f:34:
                    58:65:da:44:18:b2:f9:e8:5d:37:63:e8:ba:6f:98:
                    17:eb:c5:dd:9a:a6:82:43:95:53:e5:a0:27:78:34:
                    d4:5a:0d:b1:b8:06:f2:0a:cd:a9:6f:4d:50:d5:c8:
                    6a:78:e9:ed:c3:67:c3:d8:91:5b:c6:f7:93:d7:39:
                    fb:0b:9c:20:e8:bf:82:3d:09:ab:a7:74:ad:e8:89:
                    9f:18:64:a7:ec:09:b4:4d:0e:d2:9b:1a:89:7b:23:
                    bb:99:88:bd:5d:0a:66:c2:2b:cb:7b:c2:f2:79:82:
                    9f:dd:8d:53:63:2e:d1:eb:0f:2b:f7:a3:f1:54:dc:
                    9c:f2:10:63:8a:f8:c7:46:37:ba:6c:c1:2e:b3:2a:
                    db:eb:a8:cf:86:88:9a:2b:32:33:3d:46:0d:db:28:
                    7d:7e:55:a4:13:f1:93:76:4c:7f:26:83:41:a1:88:
                    cc:06:ba:2e:5b:4d:70:55:e2:d9:16:14:1a:01:35:
                    22:85:b7:72:69:c0:08:a6:6a:f1:8d:75:e8:f2:51:
                    fb:af:a5:29:89:97:b9:3e:5e:f2:cd:9f:6e:cc:f5:
                    ee:63:75:37:79:79:ac:48:8a:f2:7d:18:d2:29:aa:
                    3e:81:1e:30:86:a2:83:0d:3e:d4:70:18:d7:ba:42:
                    6d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BC:85:F3:93:61:14:C4:E9:27:4C:63:C3:6F:C8:4E:B5:66:22:96
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230372e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:d5:f1:33:f7:6c:f5:9d:00:cc:93:2f:06:a0:99:7a:6b:e1:
         f0:40:b1:0e:b0:a3:65:2a:0c:98:b6:46:b5:51:06:a2:4c:0d:
         1c:35:5b:51:09:d7:ea:72:ff:46:40:f1:1f:06:2a:45:1f:f6:
         3c:04:86:b7:d4:71:a8:2d:9c:57:c9:a6:3d:ae:e4:cd:b6:1b:
         e2:3c:d1:2d:9d:1d:69:cd:ef:47:a4:dd:e8:07:d5:29:56:f1:
         fd:7c:48:fe:08:bc:1b:0d:89:79:ad:36:7a:46:59:d7:ed:09:
         33:19:8f:a6:97:84:1b:2a:75:cf:99:3c:e4:08:14:87:c6:a5:
         3b:72:c0:ca:27:46:d8:2e:91:a4:3a:0d:b1:1c:d8:37:7e:3d:
         51:11:c1:78:8b:61:9e:35:e2:c5:45:02:a9:9b:d1:34:f0:9d:
         ad:70:ca:83:b8:7f:07:95:39:b3:65:02:f1:da:5c:e3:04:7d:
         bd:82:89:5f:17:9b:29:d2:6d:f0:e6:7e:cc:24:8c:4a:35:7e:
         3e:fe:ad:d5:6f:68:b6:4a:c0:84:69:f4:87:ca:9e:39:0f:af:
         91:c1:60:6d:9f:c8:01:e8:8f:e1:d6:a3:3c:a9:a3:ce:d2:77:
         b9:29:4d:68:46:7a:dd:84:12:5d:ba:b0:ae:bc:b1:1d:3d:98:
         22:2b:5f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org