Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3230322e302f32332d3233203d3e203533303836.roa
File:                     3138372e33332e3230322e302f32332d3233203d3e203533303836.roa (raw, json)
Hash identifier:          mJmXwp2XfOP0tqHVUCB/JN4guJwW47voXIBsyxMHPFw=
Subject key identifier:   DE:E8:FF:14:56:7F:E2:CC:C2:BA:7B:B5:7E:DC:D2:D7:77:1E:EC:FF
Certificate issuer:       /CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
Certificate serial:       3F039B4D704FE55800522139829315A318CD790D
Authority key identifier: 6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3230322e302f32332d3233203d3e203533303836.roa
Signing time:             Thu 29 Jun 2023 14:13:31 +0000
ROA not before:           Thu 29 Jun 2023 14:08:31 +0000
ROA not after:            Thu 27 Jun 2024 14:13:31 +0000
asID:                     53086
IP address blocks:        187.33.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:03:9b:4d:70:4f:e5:58:00:52:21:39:82:93:15:a3:18:cd:79:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
        Validity
            Not Before: Jun 29 14:08:31 2023 GMT
            Not After : Jun 27 14:13:31 2024 GMT
        Subject: CN=DEE8FF14567FE2CCC2BA7BB57EDCD2D7771EECFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:24:8a:bb:d1:97:68:be:a8:17:48:50:c2:
                    e6:e7:80:e9:45:1b:86:75:07:c6:38:6c:23:b1:5c:
                    02:08:54:f9:d8:fa:15:0e:e0:ba:06:91:13:a3:7a:
                    4f:3e:e6:fe:21:e5:73:65:b3:90:8e:23:35:2f:b6:
                    19:e7:e1:8e:14:44:26:25:55:dc:20:91:f2:da:36:
                    02:c3:e6:34:2b:66:19:24:e9:14:a6:b4:de:26:cf:
                    05:67:71:31:c7:df:4d:43:b0:04:e0:4e:df:80:14:
                    94:e1:a7:4d:85:cd:7c:b7:19:b7:d5:ae:36:48:79:
                    c5:8a:a8:36:4d:de:81:fc:1e:0a:87:2f:f0:7c:0b:
                    99:ed:2b:e9:87:64:32:99:72:49:60:af:a7:25:f6:
                    d3:fa:ed:6b:2a:a2:7b:4a:11:fb:69:a3:2a:2e:ae:
                    d4:1e:9d:a2:eb:3d:b3:8d:dc:5d:b2:f9:60:2c:7a:
                    b2:77:43:58:80:4f:a0:5e:8a:55:29:3d:e4:a0:9d:
                    7c:34:b1:ff:dd:42:f3:18:45:d9:b5:83:9d:17:86:
                    b6:9d:1f:e8:06:8a:89:32:5b:f7:7f:27:c6:f2:37:
                    ea:91:b4:c2:4e:bc:e3:eb:3f:80:68:7a:43:48:32:
                    57:b5:83:40:58:49:ab:f0:c7:34:18:f6:1b:7e:6b:
                    6e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E8:FF:14:56:7F:E2:CC:C2:BA:7B:B5:7E:DC:D2:D7:77:1E:EC:FF
            X509v3 Authority Key Identifier:
                keyid:6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3230322e302f32332d3233203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:27:80:e5:21:2d:01:bf:d6:a8:e4:2d:4b:5a:15:db:81:74:
         c2:71:08:43:cf:46:de:d9:18:07:c3:f0:e1:bd:9e:82:53:89:
         42:be:f7:10:49:e6:49:3d:09:cd:d0:47:48:eb:bd:d6:4c:5e:
         59:13:fa:4c:fb:49:7f:76:27:72:34:59:92:71:fb:28:51:21:
         45:3b:3e:cc:ca:ed:b3:c9:af:00:ed:92:cf:28:ae:d8:fe:e0:
         95:63:41:45:2a:e1:71:0a:09:90:1c:d7:64:76:c7:80:34:1c:
         48:9b:c1:6e:eb:0b:86:b0:4f:38:a0:fa:d1:db:38:46:c4:5d:
         07:95:ac:21:1f:a7:39:32:e0:ae:54:40:11:4b:d4:4a:48:df:
         00:ec:43:41:fe:9f:f7:e1:3b:03:52:bd:7f:52:bd:6f:b8:db:
         b5:07:86:66:c3:c8:1a:0f:23:17:b5:cc:4e:fe:28:78:1a:9e:
         7e:1f:04:8b:2f:ac:b9:97:c1:78:19:c8:68:41:2e:fb:7e:19:
         e8:86:63:dc:54:d6:ff:f2:3a:96:e1:49:f4:51:cb:8d:d4:0e:
         55:c9:3e:f5:88:a5:82:e8:d5:79:dc:b7:cf:72:f4:f2:a8:5c:
         8f:eb:6a:2f:52:90:6e:8d:e2:08:2b:66:90:74:23:d5:0f:9e:
         a0:7d:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:24 2024 by rpki-client on console-ams.rpki-client.org