Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32332d3234203d3e20323632353935.roa
File:                     3138372e36312e39382e302f32332d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          ndjJOZ0w2oe+ccmZ0m4mkHSmftfegfVi/OAn6kVp/u4=
Subject key identifier:   E0:8F:E9:5D:AE:BE:5E:61:64:03:D9:7C:34:35:1D:CF:CE:F4:DA:F5
Certificate issuer:       /CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Certificate serial:       23A003ACDE3FC34CF7DC3F445CF8CDE7445F6ABC
Authority key identifier: F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32332d3234203d3e20323632353935.roa
Signing time:             Sat 04 Feb 2023 13:32:14 +0000
ROA not before:           Sat 04 Feb 2023 13:27:14 +0000
ROA not after:            Sat 03 Feb 2024 13:32:14 +0000
asID:                     262595
IP address blocks:        187.61.98.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a0:03:ac:de:3f:c3:4c:f7:dc:3f:44:5c:f8:cd:e7:44:5f:6a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
        Validity
            Not Before: Feb  4 13:27:14 2023 GMT
            Not After : Feb  3 13:32:14 2024 GMT
        Subject: CN=E08FE95DAEBE5E616403D97C34351DCFCEF4DAF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:f5:92:e9:e9:57:b1:da:d4:42:77:6f:42:
                    58:66:26:48:7f:4b:9b:3f:0b:c3:a3:9d:ff:2a:52:
                    a0:2a:db:94:8f:e1:22:34:5a:04:e7:55:df:1b:91:
                    0a:f2:26:12:73:b4:c8:6c:95:f4:c2:c5:e8:f6:87:
                    11:2a:16:71:8c:d5:1d:31:01:86:97:e6:0a:be:10:
                    9e:28:f8:15:e0:64:30:53:9c:7d:94:28:9d:08:cc:
                    f5:51:0a:4a:06:6a:1c:3d:aa:46:49:71:fd:81:9f:
                    b8:ca:00:a1:31:f6:8d:87:84:9b:02:59:f4:63:b0:
                    d1:c4:4d:b0:5d:22:27:df:22:87:16:f9:fd:ea:03:
                    8a:bd:0c:3a:07:dd:c9:88:cb:cf:30:88:60:5d:7e:
                    c7:b0:c6:90:65:53:64:69:f3:b9:bf:a3:e7:12:c6:
                    40:e4:10:e2:1c:25:48:77:82:55:c9:e2:a5:92:4d:
                    ba:b2:2e:41:ec:33:d5:e7:74:e5:01:da:80:6c:b5:
                    38:68:e3:c0:8d:fd:d9:b2:07:f1:c9:13:f2:fb:2b:
                    bd:60:77:07:54:9c:c4:0d:3b:b1:e4:a0:31:a2:07:
                    6c:84:dc:b6:b4:8e:5d:7f:71:23:40:87:63:ac:7c:
                    4a:dd:3a:5a:36:be:6b:67:db:08:10:7d:92:ba:e1:
                    41:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8F:E9:5D:AE:BE:5E:61:64:03:D9:7C:34:35:1D:CF:CE:F4:DA:F5
            X509v3 Authority Key Identifier:
                keyid:F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32332d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:e7:6e:7a:d3:28:7d:82:d0:c6:3d:01:2a:39:f5:c6:cb:d6:
         2a:10:ce:5c:f4:5c:81:5a:f7:47:36:60:e0:34:66:c9:5b:f2:
         c9:00:5a:83:21:72:23:ce:22:73:0e:35:a3:73:6f:af:92:1a:
         5e:c7:ef:f1:0d:68:80:3d:d1:ae:4a:f7:06:1e:12:cb:68:e5:
         8f:78:ad:f2:d0:a2:70:07:ab:7f:5c:d4:a1:55:f9:d2:ae:8e:
         b3:65:07:84:1e:e0:24:f3:af:85:49:89:a1:e7:43:36:9d:61:
         49:ae:69:06:f0:7b:1b:ca:8f:25:8c:0d:e8:6c:53:52:eb:de:
         c6:90:60:02:e4:40:95:c9:94:6a:86:54:ec:90:cb:5c:81:ff:
         bb:0f:2f:53:37:4f:b3:b8:06:10:52:29:bd:8d:65:2a:d2:4c:
         67:1f:e0:68:52:bf:d7:e7:00:c7:92:e7:d4:05:0b:4e:57:d6:
         f1:6a:a9:37:d7:1e:c2:49:01:ca:70:10:4c:95:22:d6:27:8b:
         11:9a:36:74:05:86:46:06:49:91:c3:bb:87:8a:c7:e9:42:cc:
         b9:94:9f:d3:0f:bd:4f:a6:e2:94:46:fa:05:a3:80:b1:e3:db:
         21:11:21:42:8d:97:e6:9a:cc:65:17:53:da:92:c7:fa:57:81:
         43:5e:a1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org