Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138372e38342e302e302f32302d3234203d3e203238353830.roa
File:                     3138372e38342e302e302f32302d3234203d3e203238353830.roa (raw, json)
Hash identifier:          m92Hk/WtS9ztuWrz9kxFKboRRSRjw3+ARIcY4WWbYJ8=
Subject key identifier:   B4:F6:49:DC:B3:AB:B0:61:68:80:E3:32:0C:2D:54:B6:17:D7:9F:E7
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       04DC8B41FE6014221219B8E27E2EF47DBC88AD23
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138372e38342e302e302f32302d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:07 +0000
ROA not before:           Thu 19 Oct 2023 19:10:07 +0000
ROA not after:            Thu 17 Oct 2024 19:15:07 +0000
asID:                     28580
IP address blocks:        187.84.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:dc:8b:41:fe:60:14:22:12:19:b8:e2:7e:2e:f4:7d:bc:88:ad:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:07 2023 GMT
            Not After : Oct 17 19:15:07 2024 GMT
        Subject: CN=B4F649DCB3ABB0616880E3320C2D54B617D79FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:42:db:d7:91:37:85:27:d8:15:fb:96:db:7c:
                    5d:3b:05:f4:f1:07:7d:43:89:db:a9:7b:3c:e5:3a:
                    aa:2e:63:6b:6a:9b:dc:57:c5:10:2b:22:99:70:95:
                    60:a4:da:4f:3f:3b:a2:b8:ba:71:0e:10:74:10:a8:
                    a7:a5:53:0c:54:f7:d1:9d:a7:5c:ab:a2:e1:3d:4e:
                    c2:e7:a6:08:8e:70:81:4b:c2:3e:39:62:a6:f8:f3:
                    e8:45:c1:26:e7:8b:d1:fc:eb:53:fc:42:d7:96:44:
                    01:8c:cf:e2:b1:33:54:47:08:31:d0:14:b4:70:d6:
                    bb:dc:8d:28:2f:00:02:1a:0e:44:e1:c6:ef:ac:34:
                    1c:be:d4:fe:5d:70:2f:ea:7a:70:6e:60:9c:2b:b3:
                    29:84:44:f7:35:ee:9d:90:53:c7:b1:75:b2:a7:a9:
                    9c:8f:4c:4b:ce:fa:d1:eb:a8:45:1e:7b:1d:8b:c4:
                    94:ca:0f:f2:43:fb:49:01:69:32:c8:79:a1:5d:8c:
                    f5:31:b2:e6:14:c1:91:04:af:57:d9:78:c4:83:95:
                    07:75:57:6d:31:ff:72:81:34:6f:3f:9c:07:8e:a1:
                    23:4e:5c:c4:dc:6d:cb:e5:e3:6d:e3:8b:8f:c3:b9:
                    a0:5e:f8:b3:6b:f0:43:56:de:b0:da:e3:82:a4:68:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F6:49:DC:B3:AB:B0:61:68:80:E3:32:0C:2D:54:B6:17:D7:9F:E7
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138372e38342e302e302f32302d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:51:b6:f7:5d:33:3a:85:69:cc:eb:dc:d6:f9:5e:d0:dd:be:
         cd:3e:58:8e:2f:f9:65:6c:ed:ab:4e:f5:63:af:b6:cd:51:f3:
         73:16:34:65:74:dc:b1:45:f7:a0:43:2c:fe:60:e1:c0:07:aa:
         9d:2a:2b:a6:39:2a:c8:db:c5:77:62:e1:25:ed:64:5a:f8:d3:
         44:77:79:6f:13:7b:8d:61:5a:9a:26:50:84:d3:38:9e:c3:82:
         b6:33:70:2b:69:8e:75:71:7e:a4:bd:37:5b:1e:94:94:5a:37:
         4a:5b:bf:a2:c2:d2:45:d3:63:1c:ad:65:12:5a:88:4e:67:99:
         31:eb:86:aa:59:00:42:87:a3:1f:fd:2a:af:24:62:65:73:7a:
         49:9a:73:c4:34:d5:e4:d2:69:62:97:2d:99:81:fc:ea:4f:4c:
         e3:aa:28:3b:32:f9:a2:d2:2c:a5:8b:c4:c6:e8:6b:8d:f6:9b:
         ff:ed:2b:7a:7b:2c:8e:50:24:d8:7c:45:bc:09:40:4b:5c:70:
         34:ce:dc:34:93:ed:3c:fe:a0:0d:b3:f0:56:cd:2a:e3:1c:bb:
         c2:de:b1:7c:a5:51:af:e4:37:54:38:f0:57:49:64:42:e5:5f:
         9d:f2:6f:ff:90:fd:23:f0:c2:d5:92:fa:1b:10:ef:5f:fa:07:
         14:60:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org