Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/3138372e3130332e3232342e302f31392d3234203d3e203238323833.roa
File:                     3138372e3130332e3232342e302f31392d3234203d3e203238323833.roa (raw, json)
Hash identifier:          Rz0vwz50LzFNYh21xk6G9/cgNoEc/Bmlaefxz/jhhiQ=
Subject key identifier:   E4:EC:74:9A:D2:56:21:C4:CB:FB:87:3F:51:D8:05:67:D5:76:85:6B
Certificate issuer:       /CN=40E7288637FB8A96FBBB9308B21C9F98E254F8F4
Certificate serial:       13621E49205B13072EF32AFD931981681D3838DF
Authority key identifier: 40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/3138372e3130332e3232342e302f31392d3234203d3e203238323833.roa
Signing time:             Wed 04 Oct 2023 14:00:00 +0000
ROA not before:           Wed 04 Oct 2023 13:55:00 +0000
ROA not after:            Fri 04 Oct 2024 14:00:00 +0000
asID:                     28283
IP address blocks:        187.103.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:62:1e:49:20:5b:13:07:2e:f3:2a:fd:93:19:81:68:1d:38:38:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E7288637FB8A96FBBB9308B21C9F98E254F8F4
        Validity
            Not Before: Oct  4 13:55:00 2023 GMT
            Not After : Oct  4 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:65:a1:18:5a:0a:4a:c5:3d:56:7a:5d:00:
                    73:4c:42:23:20:71:4f:44:d2:f2:a0:9d:87:83:ff:
                    17:cc:37:48:cd:fc:fe:84:a0:85:d0:28:82:50:87:
                    58:cd:f6:32:87:b5:27:6a:7c:43:ad:5f:fb:de:6f:
                    3e:8d:30:0d:e9:44:09:ff:a8:0f:8d:9b:50:79:a0:
                    66:a0:fc:80:17:30:71:d8:d2:1c:aa:73:c9:11:34:
                    c9:4c:b0:46:40:f7:66:8e:60:57:ef:6c:b4:7a:ba:
                    5a:fd:d9:aa:48:f1:4a:3e:3a:72:93:cb:1a:da:7f:
                    fe:80:13:cb:7e:c6:d3:25:5a:38:4d:00:74:f2:6b:
                    c0:08:25:a8:62:f9:83:78:2f:89:7a:0a:b3:5d:b4:
                    cd:cb:1b:f1:16:3a:2f:04:96:41:96:1c:bd:2a:82:
                    e6:12:00:1b:9e:5e:6f:a4:a6:f3:2c:1f:6b:ae:37:
                    ef:fd:7c:2b:88:59:ea:4d:df:c3:9d:34:69:af:86:
                    be:2a:40:8b:3a:ea:9e:de:9f:e5:ed:09:65:5d:e0:
                    02:f6:25:3f:be:64:b1:61:ac:0b:2e:7d:0d:1f:73:
                    24:2e:87:a9:4f:28:b7:e2:90:85:cf:f8:bb:38:b1:
                    85:13:8f:ae:21:45:47:ea:78:56:35:1b:10:37:98:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EC:74:9A:D2:56:21:C4:CB:FB:87:3F:51:D8:05:67:D5:76:85:6B
            X509v3 Authority Key Identifier:
                keyid:40:E7:28:86:37:FB:8A:96:FB:BB:93:08:B2:1C:9F:98:E2:54:F8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40E7288637FB8A96FBBB9308B21C9F98E254F8F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/0/3138372e3130332e3232342e302f31392d3234203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:f5:ca:8e:37:7d:74:04:23:73:1a:52:36:74:3e:5b:cd:05:
         93:4b:8c:96:db:ed:ef:c8:15:b7:80:bf:b1:ea:95:06:2e:db:
         8b:1c:76:cf:3a:81:4f:b9:43:0b:69:4a:63:44:ea:43:95:f5:
         83:ef:df:b3:31:06:f6:f9:8d:f2:63:54:5f:7a:5b:58:ec:7f:
         82:92:5e:61:31:49:95:79:34:7b:38:d6:c5:94:50:66:d2:15:
         e1:fe:e8:5e:6a:80:33:0d:cb:26:a7:f7:eb:ef:f8:cc:32:06:
         4d:e3:ba:ee:81:0e:7f:d7:1c:bd:0b:4d:7d:cf:e5:8b:40:f1:
         71:5e:bd:fd:bb:89:ed:46:8a:d7:18:4d:9a:81:d8:15:a2:82:
         3f:e6:12:7b:9a:33:84:28:43:0b:b9:44:77:c6:b1:df:de:d2:
         4d:bd:aa:29:b1:ed:6d:b3:aa:6c:76:8d:de:4c:b6:b4:d3:b1:
         d1:51:84:6b:5c:0e:fb:bf:da:19:05:85:4f:05:0e:e5:fb:60:
         17:5a:df:de:c4:e4:d7:d5:a4:d5:bb:18:e7:e1:1c:94:7b:e0:
         ac:0b:e0:58:8a:d8:ef:8d:73:ae:2f:9f:2f:c6:d6:24:be:a7:
         ff:6e:c6:07:35:6f:f7:a8:ca:c0:7e:47:1f:5c:3b:e8:22:c5:
         81:5e:2e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org