Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32302d3234203d3e2033333536.roa
File:                     3138372e36312e39362e302f32302d3234203d3e2033333536.roa (raw, json)
Hash identifier:          FooHm/qzeocjjKcQRv5Nlu5+XLwJ3iHHbR+QnrJcACA=
Subject key identifier:   F1:46:23:A0:E0:23:1C:9E:B4:0F:FF:C8:32:F6:D3:03:FA:EF:06:A6
Certificate issuer:       /CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Certificate serial:       16BEEC12BA093E63D722EE41EA5B85A77A2727B1
Authority key identifier: F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32302d3234203d3e2033333536.roa
Signing time:             Thu 23 Feb 2023 16:51:23 +0000
ROA not before:           Thu 23 Feb 2023 16:46:23 +0000
ROA not after:            Thu 22 Feb 2024 16:51:23 +0000
asID:                     3356
IP address blocks:        187.61.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:be:ec:12:ba:09:3e:63:d7:22:ee:41:ea:5b:85:a7:7a:27:27:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
        Validity
            Not Before: Feb 23 16:46:23 2023 GMT
            Not After : Feb 22 16:51:23 2024 GMT
        Subject: CN=F14623A0E0231C9EB40FFFC832F6D303FAEF06A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:2b:28:0f:5d:7a:78:ad:b9:81:93:8a:1b:
                    ad:7a:37:3c:59:22:cb:5c:5c:38:e7:31:8f:1c:1f:
                    05:84:53:49:c1:3f:58:5b:c8:b1:d4:a7:25:b5:b3:
                    4e:3c:7c:2d:82:a0:ab:20:97:ca:0d:e9:ab:e1:c3:
                    94:9a:4d:e8:ec:f1:dc:bf:b9:ee:ae:8e:75:87:8b:
                    04:3c:e6:d0:fd:8e:d5:28:ad:d6:99:f8:1d:cb:8f:
                    10:55:34:8e:fa:0a:ea:2a:bd:33:77:c8:d8:73:bf:
                    bb:fe:92:5c:0f:c1:b8:ae:9a:1f:0f:69:91:8f:66:
                    26:3a:d3:12:32:c9:10:02:c3:92:ec:38:b6:91:a9:
                    1a:44:af:4a:18:65:84:92:8b:92:ec:bd:95:60:d4:
                    40:85:a6:e2:9a:c0:ed:32:10:57:96:eb:61:f9:11:
                    a2:29:6e:71:7e:85:1f:5c:b4:59:fc:03:51:b4:13:
                    9e:af:7c:ad:85:09:0b:27:25:98:dd:21:f7:f8:04:
                    c3:55:b1:2e:00:65:4d:43:1e:31:bc:a5:3f:ea:9f:
                    13:c4:af:aa:42:a4:b6:5b:ad:f8:21:0f:59:3a:95:
                    98:39:1f:c9:7c:97:90:37:fa:96:0c:dd:cb:0d:c6:
                    67:0a:ec:cd:b9:eb:4c:a2:35:8f:6f:9a:94:ad:23:
                    c1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:46:23:A0:E0:23:1C:9E:B4:0F:FF:C8:32:F6:D3:03:FA:EF:06:A6
            X509v3 Authority Key Identifier:
                keyid:F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32302d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:54:76:6c:30:d7:8c:19:be:cc:20:72:f7:6e:eb:96:24:c6:
         b1:b1:25:48:33:fd:da:a7:92:a9:50:b0:62:58:78:cc:f0:07:
         65:6b:68:46:bc:9b:1e:4c:2b:e5:b8:a3:df:f3:91:fb:f7:0b:
         84:a4:fd:5e:b7:dd:13:0f:b1:17:57:fc:d2:7c:91:77:ac:b5:
         0b:34:d5:d0:b0:98:d8:83:ca:05:15:a1:25:2d:a2:97:f5:a2:
         9d:59:e6:c7:3c:fa:68:db:c6:42:da:28:0c:fa:af:33:59:cb:
         2f:98:ea:a8:18:d8:9b:ae:05:a6:2c:cb:06:dd:3c:0b:68:a8:
         a0:9f:0e:c3:7c:0d:08:80:7e:5e:d8:6f:91:89:5a:55:d2:fe:
         78:cb:fd:83:9b:0e:f9:e6:05:be:ea:6a:93:97:86:85:be:dc:
         9d:a8:c5:62:ef:08:33:64:53:28:10:0b:a7:6b:62:30:d5:a8:
         7d:fa:df:02:90:db:e7:ef:de:96:59:da:e2:8c:e9:3b:04:c8:
         6c:ff:49:12:ea:10:c7:09:39:93:60:29:f6:67:5b:70:98:98:
         05:16:b7:ac:0c:87:cd:a2:9b:0d:76:69:4b:6f:fb:5c:f8:8a:
         a8:d0:28:60:f5:19:be:fe:18:56:0a:81:d6:9e:89:78:65:de:
         76:72:0d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org