Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa
File:                     3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          OFD1ZscujuSs2NuxfAA0BtdZvNOgjPE4mGFjzx3qcTk=
Subject key identifier:   6F:0B:99:EF:56:D0:5D:A2:C2:38:61:48:E5:60:B5:83:29:FD:75:92
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       4A56BF3312E879E6A38974227CE2E4F1BB338C06
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa
Signing time:             Thu 07 Nov 2024 20:40:14 +0000
ROA not before:           Thu 07 Nov 2024 20:35:14 +0000
ROA not after:            Thu 06 Nov 2025 20:40:14 +0000
asID:                     271724
IP address blocks:        187.110.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:56:bf:33:12:e8:79:e6:a3:89:74:22:7c:e2:e4:f1:bb:33:8c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:14 2024 GMT
            Not After : Nov  6 20:40:14 2025 GMT
        Subject: CN=6F0B99EF56D05DA2C2386148E560B58329FD7592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cf:1a:58:12:80:08:71:de:7b:bd:d4:c5:b5:
                    b8:aa:9f:b0:e3:9a:a4:bc:de:a3:98:42:79:95:8b:
                    a4:af:57:90:79:fa:9c:64:4b:ec:cc:0b:68:87:f7:
                    2c:87:d4:52:d6:cc:a2:59:07:ea:0d:56:93:39:d6:
                    3e:fa:58:9f:94:eb:d0:54:12:59:fd:a7:3c:76:93:
                    68:9d:3a:cb:f1:50:71:1f:e1:84:a0:ee:4c:e6:dd:
                    8a:5d:25:56:58:8c:e4:8e:47:4e:d2:44:b4:ad:82:
                    f5:f1:f0:c4:2c:94:53:10:22:86:fe:48:49:55:b9:
                    47:f9:4d:85:27:e0:0c:89:67:7d:a8:2a:e3:9e:dd:
                    ce:55:bf:96:bc:b0:30:5a:1b:ee:6d:09:b2:b6:80:
                    dd:0e:e7:c6:e1:82:14:d0:da:e1:98:dc:e3:3b:eb:
                    6a:b9:18:bd:0e:75:7c:24:19:4b:91:7b:95:3f:f4:
                    c4:99:72:6b:df:dd:2f:41:23:73:8d:bf:9e:f2:51:
                    63:5f:02:2b:f5:58:b5:59:1c:1d:46:d2:6b:f1:62:
                    df:5b:fd:21:0b:cc:c6:9a:84:ce:71:32:76:f6:5a:
                    7a:ab:e1:0d:9d:2e:30:c9:a1:8e:70:de:ba:82:7d:
                    92:a0:bc:37:e2:4d:46:63:e0:c7:63:ce:63:2a:d2:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0B:99:EF:56:D0:5D:A2:C2:38:61:48:E5:60:B5:83:29:FD:75:92
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:29:3b:5c:89:06:a3:5f:c3:dd:6f:d3:5d:67:96:b3:c5:4d:
         83:bf:ed:0c:82:b9:c8:6d:9f:02:3a:8f:53:98:e9:c0:4f:bf:
         7c:16:a0:3a:58:00:99:e0:5d:80:bb:8f:ed:1e:94:52:4d:b1:
         89:5e:59:99:7d:61:3f:f3:73:54:d8:10:9d:e9:9c:3e:58:0d:
         3f:4e:c5:88:bf:94:29:13:f1:83:22:95:9c:6c:81:f5:67:07:
         18:70:13:5d:25:6a:8d:61:89:d6:2b:28:10:89:4d:e0:4a:30:
         fe:8d:4f:05:20:58:d3:07:21:97:88:8e:50:d3:f0:a7:b3:27:
         16:4f:57:ba:d1:09:8d:fd:09:a7:a1:7f:e7:b9:16:d6:9f:22:
         27:80:f6:4d:14:48:88:34:b0:35:c5:b9:5c:d7:dc:69:b6:01:
         b4:f6:c4:96:cb:c4:3f:a4:f6:dd:c4:e2:0f:18:06:f0:f8:f2:
         0e:9b:b7:82:68:6e:48:99:40:c7:9e:7f:08:ae:15:5b:63:91:
         77:ab:a9:29:d4:2c:ef:70:a6:90:88:04:cd:5f:44:47:61:21:
         25:9d:6c:27:d0:4c:37:16:e3:00:3b:93:a1:69:d7:a1:f9:79:
         08:a6:2c:c5:68:ee:13:46:c8:f4:e3:04:16:e3:81:6b:c8:8f:
         fa:81:be:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org