Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32342d3234203d3e203238323730.roa
File:                     3138372e3131302e3230382e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          +zw3JKjliDrlwCghIAiTtTzxJMQb/X+ue1mk4UfO7Zs=
Subject key identifier:   5E:31:9C:7A:9E:BF:B9:71:BF:CE:05:EA:A8:12:32:08:4A:19:76:E3
Certificate issuer:       /CN=0ABCC24D9042D878C138BB44FE08B34367601A60
Certificate serial:       092EFB6950EB4CEE5F8D07CA82130F155D1266F6
Authority key identifier: 0A:BC:C2:4D:90:42:D8:78:C1:38:BB:44:FE:08:B3:43:67:60:1A:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0ABCC24D9042D878C138BB44FE08B34367601A60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32342d3234203d3e203238323730.roa
Signing time:             Fri 15 Mar 2024 01:44:20 +0000
ROA not before:           Fri 15 Mar 2024 01:39:20 +0000
ROA not after:            Fri 14 Mar 2025 01:44:20 +0000
asID:                     28270
IP address blocks:        187.110.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2e:fb:69:50:eb:4c:ee:5f:8d:07:ca:82:13:0f:15:5d:12:66:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ABCC24D9042D878C138BB44FE08B34367601A60
        Validity
            Not Before: Mar 15 01:39:20 2024 GMT
            Not After : Mar 14 01:44:20 2025 GMT
        Subject: CN=5E319C7A9EBFB971BFCE05EAA81232084A1976E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:ee:8a:50:f7:1b:c7:ee:e7:6c:7c:16:e2:
                    16:67:19:7a:d3:77:16:d9:89:a2:30:fb:60:1e:ec:
                    1f:97:39:a5:51:1e:fe:2f:47:3c:d5:15:d9:64:db:
                    4e:e1:94:39:24:72:f0:78:1e:ae:69:d2:3f:18:22:
                    d4:56:9c:4f:f2:54:33:50:bc:b0:a0:ad:1e:48:18:
                    67:58:55:c6:ac:33:6e:3f:bd:98:9a:6a:a1:43:cc:
                    60:a3:85:fe:01:49:a8:1a:fe:25:89:40:b9:75:98:
                    d8:68:72:6f:52:85:5d:c5:14:61:bb:75:56:a2:fb:
                    00:b9:65:5f:73:1c:48:18:0e:22:d2:f6:1e:95:01:
                    bf:67:d0:7f:d7:a6:af:fc:73:22:88:1e:a4:9a:c5:
                    0d:ac:29:80:67:ca:62:b1:1d:94:45:a7:2d:8c:0e:
                    ca:b5:f2:d6:01:c5:fc:cd:b2:66:4b:4d:d7:51:44:
                    80:d5:d1:c0:22:60:de:c1:ec:c9:17:16:27:59:94:
                    1b:75:33:94:82:f2:d7:6f:24:30:2d:ef:b2:36:da:
                    09:df:f8:c2:fa:07:4f:ce:a6:18:fa:ff:2e:9e:b2:
                    0e:08:34:5b:40:93:5d:64:24:b3:d6:a3:f3:00:74:
                    f4:f5:64:89:d2:75:af:f0:86:51:af:71:a9:01:d1:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:31:9C:7A:9E:BF:B9:71:BF:CE:05:EA:A8:12:32:08:4A:19:76:E3
            X509v3 Authority Key Identifier:
                keyid:0A:BC:C2:4D:90:42:D8:78:C1:38:BB:44:FE:08:B3:43:67:60:1A:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/0ABCC24D9042D878C138BB44FE08B34367601A60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0ABCC24D9042D878C138BB44FE08B34367601A60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e3131302e3230382e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e7:18:5d:a3:75:c4:29:a2:a5:8b:ac:50:68:8e:5b:c2:cb:
         9d:6b:01:bf:5d:d2:5d:4b:8d:6b:08:01:c1:ad:4e:ce:88:e4:
         ec:26:1e:46:87:57:8a:4b:bb:a7:92:d9:dd:cb:36:ec:24:2c:
         03:20:d2:a0:20:a5:ef:ae:35:1c:c1:87:0f:d2:24:74:47:fb:
         e1:c8:c9:67:b9:45:33:40:54:4b:72:2f:b9:48:f1:f1:84:d0:
         29:a2:44:9f:4b:72:88:b4:75:b3:b0:19:aa:0f:d2:b4:c3:a9:
         2d:45:13:52:32:70:75:17:d7:a1:b0:c5:25:ae:3d:03:89:d3:
         22:c0:b3:ee:82:60:fd:0a:e0:f7:fd:04:34:17:17:a7:21:9d:
         24:17:1c:63:42:68:53:7b:c5:21:c1:e2:93:f5:6b:d0:72:8b:
         6b:63:f8:0c:67:f3:6c:9d:8d:11:ba:38:90:de:d9:38:d0:59:
         c6:c7:5d:f0:95:90:0b:1f:00:0e:b5:23:92:f0:4f:a6:4d:00:
         1b:86:ee:b3:83:03:0d:c2:44:4f:ba:fc:c4:bb:a6:b5:89:f4:
         a7:92:cc:cd:8f:70:1e:08:27:57:b0:4d:e7:ce:ac:95:0e:25:
         5d:c2:94:b0:ab:49:e2:7e:9e:e0:0f:da:14:10:77:59:3f:64:
         a3:93:9a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org