Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3138372e312e36342e302f32302d3234203d3e20323632363539.roa
File:                     3138372e312e36342e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          AIbYj33/iSDrGwRHaGCYIww6YO8rTe+gIKhsg25EbbY=
Subject key identifier:   35:92:3E:74:D1:AF:58:71:6B:B4:44:78:16:F9:82:66:62:8B:70:AA
Certificate issuer:       /CN=EBE97E483EBD5E5FA1C7420357D460DBF4839A50
Certificate serial:       1B34BA2017294CBA93544ABC0E8273DB2A10B4B4
Authority key identifier: EB:E9:7E:48:3E:BD:5E:5F:A1:C7:42:03:57:D4:60:DB:F4:83:9A:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3138372e312e36342e302f32302d3234203d3e20323632363539.roa
Signing time:             Fri 03 May 2024 20:00:56 +0000
ROA not before:           Fri 03 May 2024 19:55:56 +0000
ROA not after:            Fri 02 May 2025 20:00:56 +0000
asID:                     262659
IP address blocks:        187.1.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:34:ba:20:17:29:4c:ba:93:54:4a:bc:0e:82:73:db:2a:10:b4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE97E483EBD5E5FA1C7420357D460DBF4839A50
        Validity
            Not Before: May  3 19:55:56 2024 GMT
            Not After : May  2 20:00:56 2025 GMT
        Subject: CN=35923E74D1AF58716BB4447816F98266628B70AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:6b:cc:66:ef:db:f4:0d:f2:ac:6b:bc:79:
                    68:70:50:88:df:17:66:fc:25:84:78:47:58:25:3c:
                    52:cf:ec:0c:8c:69:dc:84:99:35:7d:91:56:7a:0e:
                    f9:1d:4e:9b:ca:59:56:fd:3e:01:c9:ae:77:f4:d1:
                    e4:9c:96:c0:8f:d6:3a:af:cf:79:da:e9:d1:14:7b:
                    17:8f:68:86:85:46:d1:42:e6:8d:b5:7b:2e:7c:fe:
                    3e:52:e2:d3:e5:59:93:25:78:c4:0c:9d:d3:cf:32:
                    3d:f4:35:cd:d8:c5:c9:fd:d6:56:9e:5f:1d:e2:e2:
                    90:ef:81:70:26:0d:6d:8e:13:b4:48:99:dd:23:52:
                    30:50:10:77:da:e8:9c:12:65:b9:6e:bb:2f:13:41:
                    5a:c2:ac:7d:9e:b6:4c:e4:b1:b0:f6:90:bb:48:d1:
                    f7:35:10:09:dd:0e:97:b6:4e:85:44:48:cb:2d:34:
                    56:5d:1f:dd:8f:c1:08:eb:5d:49:67:66:8a:ec:5a:
                    5e:6e:75:d7:ce:2f:73:95:37:f5:dc:6a:d2:02:81:
                    4d:42:04:a7:f9:79:48:61:e2:09:3b:83:00:a4:ba:
                    5f:59:91:04:79:a8:25:f4:69:7d:f6:6a:98:3c:50:
                    a0:6f:4c:9d:ba:89:03:72:21:28:a7:3e:e3:d1:4e:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:92:3E:74:D1:AF:58:71:6B:B4:44:78:16:F9:82:66:62:8B:70:AA
            X509v3 Authority Key Identifier:
                keyid:EB:E9:7E:48:3E:BD:5E:5F:A1:C7:42:03:57:D4:60:DB:F4:83:9A:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBE97E483EBD5E5FA1C7420357D460DBF4839A50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3138372e312e36342e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:28:18:37:4f:4d:f5:67:86:89:18:77:06:57:24:4b:7f:95:
         b0:8e:9e:33:db:74:58:8e:f9:16:ad:25:e4:fc:93:9b:4b:6a:
         a0:be:3a:a2:e9:e3:f5:ad:8f:16:c0:8e:1d:bb:31:15:28:7e:
         06:c2:4d:c6:16:9f:90:77:3f:fa:bf:20:47:74:fa:1a:79:d6:
         b8:ea:21:2e:46:79:aa:78:39:f1:c7:1f:12:a3:8b:2e:90:57:
         f7:81:84:83:9c:3c:18:35:75:20:d9:1c:aa:f4:ef:c3:cf:47:
         86:7d:c3:ef:32:cf:08:1b:a0:1e:3b:30:69:e6:eb:b3:62:d4:
         a1:8f:ed:e8:26:7e:42:5e:12:47:aa:f3:75:8b:e8:9b:7c:09:
         1c:ae:14:65:a1:f8:82:b5:17:7a:7f:96:72:d2:d0:cd:9c:a2:
         da:3e:e1:87:e9:e6:0d:38:0c:0c:83:d7:98:79:af:ad:46:d2:
         1d:98:a3:a2:c9:83:62:41:bc:3b:81:49:35:1d:bd:f9:f3:66:
         16:dc:dc:4c:04:f1:f4:2d:5f:46:2b:c2:07:df:4a:5c:65:b6:
         e7:32:d1:15:ff:16:fb:37:94:75:0e:c4:13:9a:15:1d:8d:1c:
         39:62:62:51:e0:15:bb:db:6d:7d:38:d0:cf:1c:eb:3e:7e:9f:
         f2:6a:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org