Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138382e302f32332d3233203d3e20323632343934.roa
File:                     3133382e3138352e3138382e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          iwoFVsyL36H/QVEn8ZubRc3JZV2OS5GptxQL3GO1R4I=
Subject key identifier:   F1:52:35:BA:55:44:69:31:0A:FE:1D:2A:89:01:7A:51:E3:2F:04:A8
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       32862FA558EEA19E5E408660E1A21AD55A9F9F1C
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138382e302f32332d3233203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:46 +0000
ROA not before:           Thu 19 Sep 2024 14:06:46 +0000
ROA not after:            Thu 18 Sep 2025 14:11:46 +0000
asID:                     262494
IP address blocks:        138.185.188.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:86:2f:a5:58:ee:a1:9e:5e:40:86:60:e1:a2:1a:d5:5a:9f:9f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:46 2024 GMT
            Not After : Sep 18 14:11:46 2025 GMT
        Subject: CN=F15235BA554469310AFE1D2A89017A51E32F04A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:4d:5a:78:bc:0c:3a:aa:0a:86:63:66:a6:
                    60:7c:12:a6:70:b5:8f:d1:7b:44:52:ea:20:91:7b:
                    bf:09:7d:4c:c9:db:08:d7:c9:97:bb:de:b5:25:63:
                    9c:cd:50:df:ce:30:51:28:bc:f8:eb:4f:db:57:9a:
                    8e:03:88:18:88:35:30:b5:24:61:0f:f1:76:2b:e2:
                    9c:7b:6b:af:83:75:aa:8b:d3:f8:42:a3:04:3f:6d:
                    72:26:a4:c0:03:88:cf:d8:1d:4b:67:e6:38:7d:99:
                    fd:79:a8:27:f5:8c:30:3e:05:01:e4:d8:17:85:33:
                    01:f2:ae:92:78:f4:17:70:03:d5:28:89:91:2c:ec:
                    22:7e:a3:70:3a:73:f9:1f:19:37:a1:f5:28:12:97:
                    fb:ad:f2:bc:e5:8d:28:00:1e:23:53:d6:18:4d:02:
                    ca:0d:46:50:e4:28:08:c0:64:95:34:c5:d1:aa:70:
                    69:a6:fe:fe:b8:76:89:1a:23:36:54:dd:30:0b:a6:
                    43:f9:3b:73:e3:df:22:71:66:cb:1d:36:e1:04:fa:
                    17:8a:33:be:3b:55:b8:16:2b:83:87:ae:6c:84:2e:
                    82:34:15:d8:6f:94:5e:91:6c:bf:27:e5:19:83:91:
                    ce:3a:d6:24:cc:12:5e:1c:82:21:8e:aa:3c:24:cf:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:52:35:BA:55:44:69:31:0A:FE:1D:2A:89:01:7A:51:E3:2F:04:A8
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138382e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:ab:54:4e:35:3a:e2:5f:81:fd:a5:de:ab:cf:69:af:ac:61:
         61:73:dc:68:26:62:b2:18:fb:5a:dc:9c:1d:d8:a3:14:5c:92:
         5f:08:91:70:98:15:a3:3a:dd:cc:63:6d:14:98:0c:6a:6e:f2:
         54:ae:61:de:80:b4:7e:3c:b2:25:32:36:27:6b:db:8e:1d:43:
         8b:cc:0c:dd:cd:eb:9a:f0:02:97:dd:22:67:ee:fd:fa:9e:d1:
         6f:ea:c2:96:e0:73:b4:89:e7:58:b8:46:66:0e:e4:55:02:87:
         e3:c0:2d:49:1b:aa:45:59:f9:c0:f5:d0:be:9a:89:d2:61:c8:
         cf:53:6e:eb:c5:1d:f8:a9:3b:ee:2d:52:50:c6:75:39:3c:a3:
         2e:33:94:b7:ed:be:07:82:46:9b:cc:27:80:8d:51:4a:43:b9:
         96:c3:61:19:88:bc:b9:5f:83:2f:5c:41:b4:72:72:8a:54:4b:
         64:53:8f:f5:d0:66:9d:a4:1d:b3:0f:e8:45:fc:50:0c:30:2a:
         b6:26:82:dd:22:18:03:0d:cf:93:69:9b:24:85:48:8d:f0:42:
         f7:72:2d:df:f8:3d:34:8a:db:0a:5a:ea:d1:2c:5d:f1:10:9f:
         fb:b4:6a:01:1d:67:e6:09:d5:bb:6e:9b:00:42:fb:bc:c0:85:
         b7:46:ac:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:35:09 2024 by rpki-client on console-ams.rpki-client.org