Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/0/3138372e3130392e34382e302f32302d3234203d3e203533313133.roa
File:                     3138372e3130392e34382e302f32302d3234203d3e203533313133.roa (raw, json)
Hash identifier:          DBdrEmceuTPDO0jmUugmXruTo/I3/X/XeKLfpPwLVtk=
Subject key identifier:   3C:3C:F7:80:EC:3C:A0:88:A0:C7:2B:13:97:DF:49:F6:5C:2B:A0:2B
Certificate issuer:       /CN=18DBFEB9288C06AFF59C078A60FA4C1BAEC2CDD9
Certificate serial:       4719AF9CCD5933BEB75BC12B37A352F102AF02CA
Authority key identifier: 18:DB:FE:B9:28:8C:06:AF:F5:9C:07:8A:60:FA:4C:1B:AE:C2:CD:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18DBFEB9288C06AFF59C078A60FA4C1BAEC2CDD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/0/3138372e3130392e34382e302f32302d3234203d3e203533313133.roa
Signing time:             Wed 14 Feb 2024 19:36:56 +0000
ROA not before:           Wed 14 Feb 2024 19:31:56 +0000
ROA not after:            Wed 12 Feb 2025 19:36:56 +0000
asID:                     53113
IP address blocks:        187.109.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:19:af:9c:cd:59:33:be:b7:5b:c1:2b:37:a3:52:f1:02:af:02:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18DBFEB9288C06AFF59C078A60FA4C1BAEC2CDD9
        Validity
            Not Before: Feb 14 19:31:56 2024 GMT
            Not After : Feb 12 19:36:56 2025 GMT
        Subject: CN=3C3CF780EC3CA088A0C72B1397DF49F65C2BA02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:32:0c:9c:f8:ad:30:be:19:c9:9f:85:3b:
                    0d:5d:25:3e:94:25:31:0a:56:3c:a6:0d:f1:e0:e7:
                    b6:1e:3a:ff:94:56:6f:c0:a0:3e:94:64:67:6c:b4:
                    e1:ab:8c:9a:71:b3:02:5c:dc:1a:1c:e0:62:28:77:
                    11:7d:da:01:35:d7:cd:ce:31:7b:08:bd:8d:44:80:
                    06:8c:46:89:91:52:a7:71:d7:45:55:46:e1:a7:07:
                    12:ab:66:0f:9f:e6:42:e7:ff:6a:a6:ee:06:c4:18:
                    89:7f:0f:28:f5:4b:ac:a3:e7:75:3d:6c:93:ed:16:
                    4c:a8:8f:fa:25:54:83:89:fc:a8:70:6a:63:22:2a:
                    3a:46:93:11:54:2c:64:c0:ef:ec:9a:c6:31:e4:bc:
                    bf:e5:7b:99:ec:73:e2:92:34:75:22:d8:8a:6f:d3:
                    6e:42:9b:7d:3e:2f:d1:ac:c4:8a:c0:86:77:49:5b:
                    de:45:98:eb:32:f8:e6:49:44:a5:ab:18:fc:3d:54:
                    85:bb:12:d1:9e:7e:8a:e7:69:dd:57:ac:e4:ca:bd:
                    cf:b4:5c:32:a0:96:90:80:6f:82:f5:ca:58:9b:a5:
                    90:71:f7:64:99:ee:54:cf:0c:92:4f:44:8d:a6:0b:
                    a7:b2:3f:cb:26:75:18:e0:41:5d:63:d8:3c:b1:61:
                    01:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3C:F7:80:EC:3C:A0:88:A0:C7:2B:13:97:DF:49:F6:5C:2B:A0:2B
            X509v3 Authority Key Identifier:
                keyid:18:DB:FE:B9:28:8C:06:AF:F5:9C:07:8A:60:FA:4C:1B:AE:C2:CD:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/0/18DBFEB9288C06AFF59C078A60FA4C1BAEC2CDD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18DBFEB9288C06AFF59C078A60FA4C1BAEC2CDD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3kggq34DVJQ7pYFeQAUXU5cYmEBzJYZhKc8gfYfc24zV/0/3138372e3130392e34382e302f32302d3234203d3e203533313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:41:86:83:4c:90:1f:e0:70:50:0a:81:8b:7c:85:4c:a9:3a:
         b8:27:b7:4e:04:0a:a6:04:34:90:51:51:14:ec:db:5a:ce:f4:
         54:98:63:90:25:7c:39:45:20:65:a2:e6:8a:f0:11:3d:5c:e0:
         8c:6a:99:64:41:8b:37:3d:6e:cf:bb:84:a9:81:17:a6:95:93:
         f8:e5:88:19:dd:ee:83:6b:ae:16:7d:e2:43:6f:6b:b7:3f:84:
         ed:34:57:4c:64:d6:9f:4a:73:73:01:94:10:03:a7:75:64:f3:
         e1:b5:ad:4e:d4:2e:06:7e:ec:83:fd:b5:6e:8c:a7:21:9d:fa:
         15:e1:49:d8:76:a2:f5:f7:a9:e1:16:6c:f7:48:ca:ee:19:31:
         ea:ab:ff:06:18:58:27:7b:1d:23:fa:c0:c8:34:16:22:c2:e3:
         ad:ce:42:fa:0b:6f:d0:67:cc:cc:af:d4:3e:e1:d0:46:4f:58:
         b8:da:b1:74:21:5d:9e:a7:23:01:0b:7e:cc:e8:dd:26:75:38:
         5b:3f:a1:69:be:f7:fb:98:3b:bd:f1:48:e1:49:74:7f:96:0d:
         23:93:88:7f:b3:de:26:e9:8a:9e:ac:f1:fc:0e:79:ac:aa:85:
         e5:a1:6e:55:fa:89:d0:35:2a:7c:9c:c4:23:1d:ba:16:a3:1f:
         cf:04:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org