Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa
File:                     3138372e31382e3132382e302f31372d3137203d3e203238323730.roa (raw, json)
Hash identifier:          VR4+vGCmWE/hG08PgOvgtnNu4NC6CYLLd8CzE6haIBk=
Subject key identifier:   B9:4B:1E:54:B1:5D:F4:57:1E:FB:76:95:9D:F7:D6:37:9E:50:77:BF
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       45828A28FAB74F57DB389793BF855EC1ADF1B91E
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa
Signing time:             Thu 07 Nov 2024 20:40:12 +0000
ROA not before:           Thu 07 Nov 2024 20:35:12 +0000
ROA not after:            Thu 06 Nov 2025 20:40:12 +0000
asID:                     28270
IP address blocks:        187.18.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:82:8a:28:fa:b7:4f:57:db:38:97:93:bf:85:5e:c1:ad:f1:b9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:12 2024 GMT
            Not After : Nov  6 20:40:12 2025 GMT
        Subject: CN=B94B1E54B15DF4571EFB76959DF7D6379E5077BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:27:9a:99:2e:1f:2f:32:5f:a4:4c:0e:8f:52:
                    0b:46:a2:5c:0b:64:6f:a1:d4:28:5b:ff:ba:e2:d4:
                    db:54:4a:21:11:aa:ff:0d:d7:c4:aa:78:a5:6a:bf:
                    8d:d8:20:94:45:42:eb:d7:ef:da:ec:f9:17:4d:6c:
                    21:7e:77:ea:64:ba:d5:10:c4:4a:6f:b9:c0:e2:7d:
                    39:be:b5:c0:2e:a8:a3:b1:06:e3:38:d0:8f:ad:43:
                    1b:5a:99:23:7f:b6:88:59:58:05:34:4d:79:f6:91:
                    86:d9:64:af:55:8a:61:a8:ea:64:a5:24:03:11:ee:
                    d7:35:e3:4f:e5:3d:50:92:5d:37:60:c8:b3:1b:b8:
                    cc:97:01:d0:ea:69:4f:3c:31:a0:77:d6:29:77:0e:
                    24:fd:c6:9c:00:ad:20:04:33:96:45:0f:e0:22:27:
                    5b:5e:cc:65:62:4f:34:24:4a:80:66:f9:de:b9:a5:
                    5b:67:02:49:d4:7e:e0:11:cb:a5:e2:af:d2:aa:8a:
                    cc:a4:c1:58:ee:be:0e:b2:70:a7:6e:81:8b:28:c7:
                    e1:5b:94:36:2c:5c:10:eb:89:32:b4:33:d1:70:f6:
                    e5:47:e9:23:ec:61:fa:24:23:8a:44:72:fd:ba:f1:
                    db:9a:13:57:79:8d:56:90:a0:0f:b4:e0:51:70:67:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4B:1E:54:B1:5D:F4:57:1E:FB:76:95:9D:F7:D6:37:9E:50:77:BF
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.18.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6e:c4:68:e8:7f:10:02:80:4e:b8:93:cf:0a:be:fd:dd:2d:59:
         0e:8c:b2:9d:42:e1:7e:70:ac:e3:9f:98:6c:d5:81:0e:78:5b:
         d0:f5:bf:41:ec:25:c5:ed:aa:49:ad:82:2b:74:7b:02:f6:8f:
         ea:e4:a7:c5:59:20:4a:a7:fd:e8:46:49:bc:f0:26:9f:4c:c1:
         e7:19:ec:f3:3b:27:f9:69:c2:b6:03:86:27:3c:f1:00:20:79:
         35:2d:8e:2b:2f:59:71:4d:cb:83:97:de:e1:91:f8:e8:86:a1:
         12:d3:da:4f:3f:4b:01:b8:1f:80:30:ba:ab:51:c2:b4:47:82:
         84:1f:45:6b:c9:a5:74:25:ec:30:b3:3d:90:f1:95:ff:8b:d6:
         6c:c3:04:eb:eb:18:8d:79:12:20:8e:be:38:31:85:2d:e7:ca:
         46:62:91:68:5c:e8:43:c5:83:8a:14:14:0d:96:37:54:31:cb:
         4e:bd:82:27:1c:95:92:2d:77:34:7e:ef:86:55:33:d6:71:db:
         83:4f:e1:95:35:27:8d:0c:77:e5:83:fd:cc:18:9f:ec:e8:3e:
         7d:12:52:cf:87:03:6a:08:98:18:72:33:74:a4:52:f2:5d:1e:
         3d:72:f9:b6:e1:4e:46:ae:f2:12:5b:7e:d8:72:10:60:c1:c3:
         58:f2:26:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org