Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3138372e31382e36342e302f31382d3234203d3e203232363839.roa
File:                     3138372e31382e36342e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          qOzvVCydBGMTUak85dUNfmfefqxQWc+jUZAb+2B/hXs=
Subject key identifier:   BE:DC:D6:12:51:31:50:D3:74:DC:D1:11:97:BA:6E:EC:CB:E0:0E:AB
Certificate issuer:       /CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
Certificate serial:       06B9C5E02AA207A87D4835DEC1EE76CD61F0A820
Authority key identifier: FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3138372e31382e36342e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 27 Aug 2021 14:16:01 +0000
ROA not before:           Fri 27 Aug 2021 14:11:01 +0000
ROA not after:            Fri 26 Aug 2022 14:16:01 +0000
asID:                     22689
IP address blocks:        187.18.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b9:c5:e0:2a:a2:07:a8:7d:48:35:de:c1:ee:76:cd:61:f0:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
        Validity
            Not Before: Aug 27 14:11:01 2021 GMT
            Not After : Aug 26 14:16:01 2022 GMT
        Subject: CN=3082010A02820101009DF0174C552AA0752FD44E16A95F425FC15D533B573D816CA3F4022709E32E4BBFEAD888FB50590E4F0558F2A6ADF17B3A6BE9F4AF929A00ED52794ADAD87B4A0ABA26064D5469BDE842C69D65326D52521D3B595CD6D3F3E396DB57903CBF5197143967AFDFE8E6FC300CEE5D4B6361A7F0BE902D61D4EBD5BD5931E2CF0217D5114DFA56DC69625A811B57E4053B9785AA7FBFDBECDDB18CC39D84C8ABDC2F83AB409A7C7ABC50B1CB3A4A7E57960D5CBDD29526BA689806A05D3A86F0402F3799A1ED8C3EFA7AEADDA3391ABE5F7BF14673CEB6ADE64C915A2997B8FD11246C1A4BB6AC001771FE90FC66656723D058BBB26F369B4BD02104B9B45F463C490203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:17:4c:55:2a:a0:75:2f:d4:4e:16:a9:5f:
                    42:5f:c1:5d:53:3b:57:3d:81:6c:a3:f4:02:27:09:
                    e3:2e:4b:bf:ea:d8:88:fb:50:59:0e:4f:05:58:f2:
                    a6:ad:f1:7b:3a:6b:e9:f4:af:92:9a:00:ed:52:79:
                    4a:da:d8:7b:4a:0a:ba:26:06:4d:54:69:bd:e8:42:
                    c6:9d:65:32:6d:52:52:1d:3b:59:5c:d6:d3:f3:e3:
                    96:db:57:90:3c:bf:51:97:14:39:67:af:df:e8:e6:
                    fc:30:0c:ee:5d:4b:63:61:a7:f0:be:90:2d:61:d4:
                    eb:d5:bd:59:31:e2:cf:02:17:d5:11:4d:fa:56:dc:
                    69:62:5a:81:1b:57:e4:05:3b:97:85:aa:7f:bf:db:
                    ec:dd:b1:8c:c3:9d:84:c8:ab:dc:2f:83:ab:40:9a:
                    7c:7a:bc:50:b1:cb:3a:4a:7e:57:96:0d:5c:bd:d2:
                    95:26:ba:68:98:06:a0:5d:3a:86:f0:40:2f:37:99:
                    a1:ed:8c:3e:fa:7a:ea:dd:a3:39:1a:be:5f:7b:f1:
                    46:73:ce:b6:ad:e6:4c:91:5a:29:97:b8:fd:11:24:
                    6c:1a:4b:b6:ac:00:17:71:fe:90:fc:66:65:67:23:
                    d0:58:bb:b2:6f:36:9b:4b:d0:21:04:b9:b4:5f:46:
                    3c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DC:D6:12:51:31:50:D3:74:DC:D1:11:97:BA:6E:EC:CB:E0:0E:AB
            X509v3 Authority Key Identifier:
                keyid:FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3138372e31382e36342e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.18.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         93:b6:f9:34:5a:76:e5:bc:56:23:66:65:f9:25:66:ae:4a:e7:
         c9:26:c8:90:63:2b:84:e3:4f:78:1d:be:b8:31:34:62:53:e7:
         c6:b9:9a:5d:80:5f:84:44:b4:fa:ab:aa:34:1e:1a:58:fc:b8:
         d6:31:f0:46:a6:a7:1a:b2:2a:07:66:b7:6a:99:5b:ee:16:1a:
         21:b2:2a:0e:4f:7b:68:c0:63:44:6e:cf:15:9b:85:49:bc:9a:
         7e:33:e5:9a:2e:73:a9:58:88:a7:16:36:3c:f9:e2:0c:1b:3b:
         9c:f8:1b:8d:fe:37:42:5e:ed:7b:be:d7:e3:94:33:3f:28:86:
         9d:70:dc:04:01:d4:41:21:5d:92:be:ae:74:d7:4f:d2:a1:b6:
         5e:75:cd:33:b6:4d:dd:e6:31:66:f2:85:bf:90:ee:58:65:e9:
         dc:cf:e2:ac:98:07:6c:44:fb:6a:26:1b:88:37:f3:30:39:64:
         cd:d9:43:c8:4d:32:36:cb:96:e8:bd:18:71:04:99:1b:6c:3d:
         8e:b0:96:a7:9e:1b:9c:16:ef:42:aa:bf:d3:44:d3:12:ac:12:
         41:9d:55:53:57:7c:6b:dd:5d:ff:e6:95:8e:15:50:73:65:b9:
         e5:98:6a:34:2e:a2:20:42:79:0c:2b:53:51:a6:15:2f:ab:96:
         9d:a6:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org