Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e36342e302f31392d3332203d3e203238363234.roa
File:                     3138372e3131302e36342e302f31392d3332203d3e203238363234.roa (raw, json)
Hash identifier:          KMcXEGCy+jZ4IHjwg/bSVdV93r34fxCzrTNHzJ8EAJ0=
Subject key identifier:   23:68:AB:91:6E:FA:9D:4E:75:AA:A2:C4:64:95:F2:CC:4D:88:4D:69
Certificate issuer:       /CN=DDB2DA452C22543D612ECF3051FADB7B717B7886
Certificate serial:       43FCAD109E9FB9A81E8766188843EA1D870D2EAA
Authority key identifier: DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e36342e302f31392d3332203d3e203238363234.roa
Signing time:             Tue 02 Apr 2024 13:18:48 +0000
ROA not before:           Tue 02 Apr 2024 13:13:48 +0000
ROA not after:            Tue 01 Apr 2025 13:18:48 +0000
asID:                     28624
IP address blocks:        187.110.64.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fc:ad:10:9e:9f:b9:a8:1e:87:66:18:88:43:ea:1d:87:0d:2e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDB2DA452C22543D612ECF3051FADB7B717B7886
        Validity
            Not Before: Apr  2 13:13:48 2024 GMT
            Not After : Apr  1 13:18:48 2025 GMT
        Subject: CN=2368AB916EFA9D4E75AAA2C46495F2CC4D884D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d7:89:62:7f:a0:54:00:80:dc:45:58:b5:78:
                    e8:b7:65:f7:49:da:6b:26:7b:2c:3a:9a:19:d9:ac:
                    89:40:7b:d5:7c:0b:0d:c4:da:1f:bf:80:a5:7b:cd:
                    6c:52:b4:36:cf:64:ab:3a:bd:b8:ad:37:ea:4a:59:
                    8d:09:59:1c:b1:4c:fe:33:e1:e6:be:6d:27:8c:88:
                    4d:76:1f:41:24:0d:47:03:79:d1:38:d2:bc:4c:b8:
                    73:c1:7e:e4:16:bb:fb:cf:e2:5f:0e:97:28:47:b8:
                    f8:07:8c:ba:b9:e8:e6:ce:fb:71:da:01:84:e2:51:
                    44:b5:f7:34:6a:1b:36:22:9a:d2:ad:18:6b:ce:c1:
                    bb:49:74:34:86:1e:12:b6:4e:a7:69:bb:46:1e:1f:
                    ee:c7:bb:eb:fe:94:02:49:45:16:23:84:d2:8a:17:
                    a5:d3:76:e8:bf:df:ac:f9:0e:1f:2d:89:fc:ea:93:
                    8c:a2:4b:7c:4e:16:30:50:27:92:b2:25:ef:b2:7e:
                    17:86:9a:7c:88:a8:e6:b4:c9:26:5b:aa:62:0f:35:
                    37:8c:3e:af:33:bf:b0:58:46:1b:83:63:10:37:62:
                    44:a6:44:9c:da:d9:08:30:5e:e3:24:3a:46:08:6e:
                    b9:1d:e7:4c:b0:b8:76:29:de:c2:33:6a:68:c1:3e:
                    65:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:68:AB:91:6E:FA:9D:4E:75:AA:A2:C4:64:95:F2:CC:4D:88:4D:69
            X509v3 Authority Key Identifier:
                keyid:DD:B2:DA:45:2C:22:54:3D:61:2E:CF:30:51:FA:DB:7B:71:7B:78:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDB2DA452C22543D612ECF3051FADB7B717B7886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/0/3138372e3131302e36342e302f31392d3332203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:99:47:37:51:fa:72:86:2a:b0:95:26:e3:fb:56:e1:fc:4e:
         53:3e:c6:03:63:c2:27:9e:cb:c1:77:b8:81:7d:14:83:5c:37:
         3b:2f:f6:4a:91:ab:95:34:8b:41:a7:97:ef:16:5a:6e:ab:5c:
         c1:9e:c4:03:d2:22:4f:ba:47:81:7f:b7:33:9e:34:6b:c4:11:
         0d:9c:92:85:a0:34:e2:b3:9e:8c:6d:75:f4:f1:c7:bc:07:8f:
         c2:53:8c:e1:ea:a9:29:37:8e:39:a5:92:f6:52:c6:94:34:4c:
         4d:67:1b:4c:28:24:41:b4:9c:8b:9b:ce:2c:8e:cb:2b:27:a7:
         22:b7:0b:ea:e0:2f:ba:3e:df:50:72:b6:9a:b9:4c:a1:bb:3c:
         26:94:c0:18:b2:23:b8:26:7b:68:bf:9d:e9:82:82:51:32:a7:
         a8:2c:f7:4e:49:4f:5b:e3:d0:52:be:49:bd:39:56:f0:ed:8e:
         a5:b5:dc:83:2d:c8:7c:e3:89:5e:1e:e4:5d:54:76:15:03:66:
         1f:e8:60:39:7e:ad:2f:4f:34:5f:f8:9d:c9:10:63:50:89:5a:
         15:71:ea:ad:7c:95:5d:e6:7b:96:fa:9c:4a:38:79:1b:70:15:
         f8:47:b8:e2:01:38:b2:17:60:02:80:75:91:99:43:e4:be:a8:
         cc:9d:79:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org