Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/3138372e312e36342e302f32302d3234203d3e20323632363539.roa
File:                     3138372e312e36342e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          ztAv4HPkWyFWJr0nAkOPbUztQoLtO53lUyiswpNn824=
Subject key identifier:   8C:2E:52:40:3A:91:6B:9F:AE:58:03:2F:9E:94:EC:EC:F5:7D:83:70
Certificate issuer:       /CN=A4AC7525A2D94581DF22D6B154FB0E8F05452901
Certificate serial:       1A0E4977B22C097836562199A0261F8DFE1C51B6
Authority key identifier: A4:AC:75:25:A2:D9:45:81:DF:22:D6:B1:54:FB:0E:8F:05:45:29:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4AC7525A2D94581DF22D6B154FB0E8F05452901.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/3138372e312e36342e302f32302d3234203d3e20323632363539.roa
Signing time:             Wed 24 Jul 2024 14:31:44 +0000
ROA not before:           Wed 24 Jul 2024 14:26:44 +0000
ROA not after:            Wed 23 Jul 2025 14:31:44 +0000
asID:                     262659
IP address blocks:        187.1.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0e:49:77:b2:2c:09:78:36:56:21:99:a0:26:1f:8d:fe:1c:51:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4AC7525A2D94581DF22D6B154FB0E8F05452901
        Validity
            Not Before: Jul 24 14:26:44 2024 GMT
            Not After : Jul 23 14:31:44 2025 GMT
        Subject: CN=8C2E52403A916B9FAE58032F9E94ECECF57D8370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:8d:79:51:2c:bd:a8:6a:44:b5:b2:cc:9f:
                    5e:12:0c:d8:dd:5a:2c:91:43:c8:d5:07:7a:85:b3:
                    50:75:ed:02:ca:42:50:73:44:f8:80:29:4d:a3:84:
                    4d:4a:b2:36:6c:b1:5b:5c:0f:48:03:a0:f9:27:69:
                    ba:21:59:92:40:30:29:ec:50:43:3b:39:06:b5:7c:
                    6a:6b:29:ea:d3:6e:e7:59:af:15:f1:46:a1:eb:89:
                    f6:8a:40:32:6d:b4:58:e5:55:a6:4e:5b:b1:d6:73:
                    3b:5f:fe:cb:1f:c1:c6:05:f4:f8:d7:54:41:47:27:
                    2d:dc:2b:db:2a:d9:c1:f2:1f:cb:33:b0:ad:b1:44:
                    da:69:8a:e5:1f:67:b8:87:09:4f:04:f6:28:bd:d0:
                    54:59:fb:5e:32:19:08:28:98:6f:6d:ca:30:a1:92:
                    b7:26:12:a3:5d:bb:df:64:73:94:2b:2c:c4:8d:94:
                    97:94:0b:9e:7b:79:3e:01:d9:1b:65:7c:9f:34:c1:
                    3d:ba:01:ea:b0:81:5a:c6:2e:75:a6:a8:c6:42:96:
                    c3:73:d8:99:b7:91:55:9f:9e:66:68:43:9d:b8:87:
                    3b:dc:2a:b9:01:78:14:2b:f4:39:72:d5:17:a4:05:
                    d9:16:cd:b3:0f:39:39:93:74:2a:2f:6f:e9:3c:d3:
                    b6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2E:52:40:3A:91:6B:9F:AE:58:03:2F:9E:94:EC:EC:F5:7D:83:70
            X509v3 Authority Key Identifier:
                keyid:A4:AC:75:25:A2:D9:45:81:DF:22:D6:B1:54:FB:0E:8F:05:45:29:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/A4AC7525A2D94581DF22D6B154FB0E8F05452901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4AC7525A2D94581DF22D6B154FB0E8F05452901.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/4/3138372e312e36342e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:e4:38:58:c7:d8:e1:99:21:86:34:d6:af:b7:e9:51:7d:c7:
         0b:8f:e5:a6:f2:e7:0c:72:8b:cf:1f:15:d2:9e:3f:2b:40:bc:
         b1:87:7f:71:c7:d1:b2:84:da:c2:83:43:8f:26:fb:3d:ef:30:
         c5:47:94:69:64:33:25:93:97:8a:ff:5c:a3:52:e0:08:65:87:
         bf:7d:4f:88:10:d0:57:fd:b4:d2:d7:6d:11:1c:9c:8f:8e:17:
         0c:d8:7e:8d:44:1b:44:32:fd:2f:6e:f9:89:83:ce:ce:16:fb:
         3a:b3:76:4e:85:af:7d:70:51:30:c8:08:c2:4e:77:de:b0:25:
         2c:43:03:af:a7:28:86:92:03:73:2f:4e:f9:d7:11:86:9d:fb:
         d6:46:2f:9c:18:3e:e7:5d:09:d0:77:45:01:1e:24:40:a2:53:
         87:fa:bf:c8:0a:ff:fd:58:82:fb:87:d1:b8:79:00:d1:c7:88:
         06:7f:70:2d:b1:0d:b3:e3:67:7f:7f:fe:61:50:76:67:30:97:
         43:6c:9f:4f:e8:e1:94:a6:34:f3:d2:d3:b4:68:bb:4a:89:a7:
         72:b9:75:b5:2d:22:4b:8d:df:0b:15:f7:08:17:03:bb:93:71:
         c8:64:5d:34:a7:ba:ec:9c:d1:af:56:c4:c6:8b:e2:9d:09:17:
         9c:20:b3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:31 2024 by rpki-client on console-ams.rpki-client.org