Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/3138372e33332e34382e302f32312d3234203d3e20323633303830.roa
File:                     3138372e33332e34382e302f32312d3234203d3e20323633303830.roa (raw, json)
Hash identifier:          plAzwdPGUAYuOCgVLtPi0oFSA4XY+bwsblD9oVGQ/H0=
Subject key identifier:   12:9D:56:86:9D:0F:73:D2:A9:5A:00:D1:AC:FF:06:CC:54:E4:4E:CA
Certificate issuer:       /CN=EFC6D9641E6897F52BC48673F154FC946766AD90
Certificate serial:       1767C47CE4695A8C03091416B4568647CD72FE1A
Authority key identifier: EF:C6:D9:64:1E:68:97:F5:2B:C4:86:73:F1:54:FC:94:67:66:AD:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFC6D9641E6897F52BC48673F154FC946766AD90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/3138372e33332e34382e302f32312d3234203d3e20323633303830.roa
Signing time:             Fri 12 Apr 2024 13:27:14 +0000
ROA not before:           Fri 12 Apr 2024 13:22:14 +0000
ROA not after:            Sat 12 Apr 2025 13:27:14 +0000
asID:                     263080
IP address blocks:        187.33.48.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:67:c4:7c:e4:69:5a:8c:03:09:14:16:b4:56:86:47:cd:72:fe:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC6D9641E6897F52BC48673F154FC946766AD90
        Validity
            Not Before: Apr 12 13:22:14 2024 GMT
            Not After : Apr 12 13:27:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:d2:af:69:f8:2f:2c:f9:75:50:12:7f:41:
                    37:d5:dc:8f:88:63:40:11:33:f5:77:f8:58:61:a0:
                    34:05:dc:03:a7:c0:19:14:f9:d6:51:b2:7d:c5:12:
                    bc:3d:b3:78:2d:c3:5f:45:75:1a:fd:68:0f:e6:76:
                    91:6d:8d:40:62:86:5e:9b:12:5e:64:21:22:1e:cf:
                    6a:c2:16:80:1e:34:39:88:82:c5:9f:7e:b7:a2:87:
                    85:fa:18:ff:f8:42:b2:87:1e:e0:d2:ca:85:79:29:
                    98:88:e0:11:69:8d:b1:03:56:68:0b:56:d9:6a:3b:
                    e8:9f:ff:4b:fb:c0:d5:96:f5:79:a8:a0:24:11:28:
                    2a:cb:7c:55:c8:c9:63:64:3f:86:40:3f:04:8b:19:
                    e9:97:16:93:e6:88:01:f2:36:59:56:29:d7:39:fd:
                    15:1e:3e:3c:8d:24:d1:a0:24:d0:2f:2a:a9:92:24:
                    17:95:97:1f:9b:de:9e:ca:bf:8f:58:f3:eb:38:7e:
                    c0:78:ed:6f:23:e5:8d:39:b6:eb:b9:a7:e6:5a:cd:
                    ca:02:25:6a:29:e6:db:d1:de:90:65:9d:7d:a3:c9:
                    ad:e7:f8:b1:5e:5e:bd:88:65:da:33:ff:2b:5f:66:
                    12:15:a9:8b:22:13:87:75:cb:11:0e:96:0a:3e:4a:
                    c5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9D:56:86:9D:0F:73:D2:A9:5A:00:D1:AC:FF:06:CC:54:E4:4E:CA
            X509v3 Authority Key Identifier:
                keyid:EF:C6:D9:64:1E:68:97:F5:2B:C4:86:73:F1:54:FC:94:67:66:AD:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/EFC6D9641E6897F52BC48673F154FC946766AD90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFC6D9641E6897F52BC48673F154FC946766AD90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AB7Y3TgSBND1YfMGCJaLmG5Rdw6uzEhwmoBkNKvrQTR/1/3138372e33332e34382e302f32312d3234203d3e20323633303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:16:8a:26:98:ca:a4:c8:62:79:f2:f3:b0:52:65:52:61:d3:
         09:8e:6b:fb:12:8a:93:54:2a:e2:d5:e5:90:ee:6f:38:e3:00:
         94:a7:8e:f8:15:f8:f8:49:f9:ec:fc:10:8d:1c:8a:b6:08:80:
         c9:d6:b7:36:09:de:0f:59:eb:79:32:01:aa:8e:9a:98:e2:31:
         76:92:ce:e8:a6:48:77:c5:d1:7f:1e:65:99:5c:22:c1:78:df:
         3a:f5:ab:bd:45:c2:b7:35:71:e7:d1:0c:b2:29:c4:57:a4:4d:
         9d:59:d7:93:1b:d1:d1:68:dd:38:e1:66:00:f5:dc:cb:4b:ad:
         0c:10:71:2f:f3:12:19:44:a4:cc:5d:d6:78:c7:c1:80:f3:7e:
         24:80:25:29:6c:6a:3c:57:34:e9:f0:da:a7:4b:c9:54:08:e2:
         03:26:fd:1a:f5:81:14:dd:36:f4:4a:9e:92:d0:53:19:f0:ea:
         9b:72:5c:6f:08:fc:30:d5:e7:6e:de:d0:9e:7f:a1:a4:0b:7e:
         2f:26:0a:f4:a6:9f:ef:c1:ef:58:6b:67:e4:c0:ad:52:d1:88:
         5e:1c:46:fe:6e:80:1a:16:58:85:9a:92:4f:13:8b:4c:44:39:
         18:b5:24:0a:ab:3f:dd:5e:5b:de:3f:74:98:55:ef:a0:cb:e0:
         af:61:10:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org