Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139362e302f32322d3232203d3e203533303836.roa
File:                     3138372e33332e3139362e302f32322d3232203d3e203533303836.roa (raw, json)
Hash identifier:          91DMUDj509aeYA3Kp519pBWRfZJptzo6RfLd4dYN+as=
Subject key identifier:   87:E2:35:11:B9:C6:C3:E8:2A:48:A7:36:AB:1F:00:42:DC:25:FF:8E
Certificate issuer:       /CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
Certificate serial:       44154B25D2D66C0A062DEC5B8C00FC9FDC543DB5
Authority key identifier: 6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139362e302f32322d3232203d3e203533303836.roa
Signing time:             Thu 29 Jun 2023 14:13:31 +0000
ROA not before:           Thu 29 Jun 2023 14:08:31 +0000
ROA not after:            Thu 27 Jun 2024 14:13:31 +0000
asID:                     53086
IP address blocks:        187.33.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:15:4b:25:d2:d6:6c:0a:06:2d:ec:5b:8c:00:fc:9f:dc:54:3d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
        Validity
            Not Before: Jun 29 14:08:31 2023 GMT
            Not After : Jun 27 14:13:31 2024 GMT
        Subject: CN=87E23511B9C6C3E82A48A736AB1F0042DC25FF8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:7b:28:8f:c1:b9:8d:12:88:5f:8c:b1:ea:
                    b2:61:8a:8b:93:3c:1b:2b:e6:d4:cb:c1:bf:14:74:
                    93:2e:f1:c1:6a:c9:97:5f:38:cf:5c:32:01:c5:1b:
                    2a:5f:9c:73:17:08:23:60:30:cd:87:c2:45:d0:9d:
                    fe:53:d4:d8:4c:0d:b2:ff:ab:ba:23:c0:6b:29:e4:
                    77:05:f7:bd:91:60:49:3f:27:a1:0f:26:8a:d8:85:
                    58:c0:f9:0c:ae:2c:85:32:a5:be:00:13:0a:5e:68:
                    01:1c:77:9c:b3:1c:4b:5d:41:11:7b:22:32:f7:cf:
                    48:35:f5:66:67:f2:70:c5:e6:ff:38:dc:ae:89:3f:
                    c7:81:09:4f:75:5e:0e:19:f5:92:61:a3:73:75:75:
                    46:8d:cf:97:1d:61:af:a6:6e:41:3a:74:21:87:33:
                    cb:65:6b:06:7a:eb:1a:c4:07:a2:13:99:46:e2:4b:
                    49:eb:55:40:2f:a7:85:3c:7a:7b:c3:99:65:df:7b:
                    6a:6a:90:16:aa:a9:8f:e0:42:4f:94:a7:57:71:c9:
                    f4:01:cb:49:e3:82:09:46:0b:67:d0:e4:ed:08:1d:
                    e4:b3:6e:f9:76:42:8b:91:17:b9:98:5d:d6:19:da:
                    70:10:2b:d8:91:66:48:c3:99:9b:f2:79:31:98:d8:
                    2b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E2:35:11:B9:C6:C3:E8:2A:48:A7:36:AB:1F:00:42:DC:25:FF:8E
            X509v3 Authority Key Identifier:
                keyid:6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139362e302f32322d3232203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:d3:63:0e:55:4b:be:17:c3:c8:51:ec:86:f0:53:ed:ab:f7:
         f0:b7:1c:08:27:59:e1:a3:68:88:14:1d:03:42:e3:22:8e:7d:
         21:67:4a:e3:80:8e:f1:e1:30:16:63:d4:5f:99:5b:94:d7:2c:
         39:57:75:5c:f3:51:f2:1b:dc:e1:e7:df:55:a7:18:8c:53:02:
         e0:a1:44:0e:26:f4:72:c8:bc:06:79:1f:e9:9a:dc:dd:4f:71:
         8b:3a:6b:cf:26:d7:6d:e2:ad:21:a4:cd:f1:2e:29:68:8e:12:
         77:3d:bd:0d:55:45:56:9f:69:9b:a3:88:d3:35:15:7f:be:92:
         db:67:7b:6e:3e:5f:35:ff:70:7b:93:f7:f8:d3:a6:20:90:33:
         ec:f8:ff:3c:5f:1b:c0:46:26:56:c8:2f:08:4c:30:e9:3c:f2:
         43:3d:29:f2:c5:69:64:53:b9:a2:c3:ae:9b:92:74:ff:bb:4d:
         12:97:6a:10:03:8b:74:2f:29:ab:1d:53:e6:ef:2b:ab:4d:bc:
         c5:68:d4:e6:6d:c1:84:f2:3a:93:c5:d7:89:13:dd:e0:55:1a:
         37:12:ea:d1:c0:f2:35:9a:5b:7a:cf:a7:e9:15:b0:ca:e7:6d:
         40:a3:8e:1d:b4:c1:e0:d2:61:01:57:40:35:3f:ef:0c:0a:f9:
         be:79:a0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org