Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/1/3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa
File:                     3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (raw, json)
Hash identifier:          pd+u+gEkbkVEJ5AVd9bKwQfd/arzKJVLRN8eTBujTbo=
Subject key identifier:   9B:72:23:C2:4D:CE:0E:06:30:8E:87:55:3A:66:92:4C:24:3A:FA:A8
Certificate issuer:       /CN=96D1069FDBEE07B6866CEBEC271699B222A0C206
Certificate serial:       7CF937E181137D2F0E9D6BA04DB10B5C21291B55
Authority key identifier: 96:D1:06:9F:DB:EE:07:B6:86:6C:EB:EC:27:16:99:B2:22:A0:C2:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96D1069FDBEE07B6866CEBEC271699B222A0C206.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/1/3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa
Signing time:             Thu 04 Apr 2024 04:18:09 +0000
ROA not before:           Thu 04 Apr 2024 04:13:09 +0000
ROA not after:            Thu 03 Apr 2025 04:18:09 +0000
asID:                     265264
IP address blocks:        187.95.128.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f9:37:e1:81:13:7d:2f:0e:9d:6b:a0:4d:b1:0b:5c:21:29:1b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D1069FDBEE07B6866CEBEC271699B222A0C206
        Validity
            Not Before: Apr  4 04:13:09 2024 GMT
            Not After : Apr  3 04:18:09 2025 GMT
        Subject: CN=9B7223C24DCE0E06308E87553A66924C243AFAA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:66:9d:77:61:0e:ee:c1:7b:35:c7:ad:cc:
                    92:55:55:9e:2c:8c:a4:6e:a3:06:e4:5b:cb:ea:8b:
                    b9:41:be:58:34:d5:07:46:8f:88:19:e7:dd:2c:de:
                    b8:16:aa:5c:aa:6a:29:79:7d:bb:24:e4:70:90:40:
                    d3:5a:3a:70:a8:ae:45:23:dc:1c:ca:f8:05:a8:3f:
                    f5:fa:e6:12:c2:27:00:04:c2:7a:ce:02:e4:5b:0e:
                    ad:54:36:2f:bb:3f:23:46:c0:a9:19:3e:1c:c7:37:
                    88:95:53:07:12:52:f2:c9:51:86:fb:19:66:fc:b8:
                    43:12:43:06:e6:8f:dd:87:c5:82:74:b6:25:d3:78:
                    e6:ad:44:51:76:d1:87:87:62:7c:7c:8a:b9:97:1b:
                    18:2f:53:72:fe:72:47:32:2a:23:2d:39:72:b6:27:
                    57:99:3d:34:3b:e1:05:bf:a4:7f:b2:86:6f:a4:b1:
                    be:84:6c:9d:00:b6:c4:c6:e9:fa:cd:0c:db:66:42:
                    9a:70:9f:6f:bb:9f:ce:df:87:8c:ae:c9:89:68:8c:
                    d3:82:db:4e:cb:32:cc:fa:f2:22:c4:8f:e3:dc:e7:
                    f1:8e:b0:72:92:04:06:64:c8:85:f6:74:dc:ca:78:
                    56:29:da:25:b9:ba:a4:66:30:8a:6e:8e:19:c1:ea:
                    42:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:72:23:C2:4D:CE:0E:06:30:8E:87:55:3A:66:92:4C:24:3A:FA:A8
            X509v3 Authority Key Identifier:
                keyid:96:D1:06:9F:DB:EE:07:B6:86:6C:EB:EC:27:16:99:B2:22:A0:C2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/1/96D1069FDBEE07B6866CEBEC271699B222A0C206.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96D1069FDBEE07B6866CEBEC271699B222A0C206.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/1/3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:b4:74:37:7f:e8:63:78:28:8f:74:f2:5a:89:1d:2f:f6:
         84:65:67:fb:fd:c6:69:ba:a9:00:df:b5:6f:3a:a4:35:78:f2:
         78:b4:20:3d:b7:c3:ef:76:f4:09:39:d7:de:6c:3e:04:2a:1a:
         0e:6b:05:e4:9d:dd:88:bd:a0:e3:8c:5e:72:76:50:6e:b9:42:
         3f:4f:47:54:44:61:21:22:92:68:3a:90:0e:0f:37:fa:91:b7:
         aa:a8:91:72:22:20:68:ee:7a:51:d8:76:75:1e:36:d8:7f:10:
         49:16:f4:a5:7a:a9:93:89:38:75:e1:7f:a4:b4:e3:60:ce:36:
         0d:52:b3:c9:bf:55:a3:f3:dc:3f:a9:20:e3:08:89:d9:da:8f:
         10:02:56:15:22:dc:8a:29:13:1c:2c:5e:b1:26:f2:b7:26:11:
         1e:24:00:d6:78:c1:dd:4e:a7:86:30:72:be:07:36:98:a3:63:
         72:ea:03:30:a6:98:68:dc:c5:75:14:ce:d3:38:b5:5b:ea:c7:
         75:e9:6a:1f:74:cd:37:72:9b:96:ea:4d:f1:a2:22:a8:27:24:
         02:ea:74:fa:3c:ea:d3:c0:8e:c2:f3:7b:8b:8b:df:42:b7:e4:
         97:71:a6:db:c8:fb:5b:66:fa:aa:26:54:4a:2c:e7:9c:ae:26:
         72:06:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org