Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e302e302f32302d3234203d3e203238323637.roa
File:                     3138372e3130382e302e302f32302d3234203d3e203238323637.roa (raw, json)
Hash identifier:          QAg/oEZnxScd51ZoTLWmvgbJEaGlx+gpGZ4l3AKAqJw=
Subject key identifier:   23:80:B1:CB:F7:A2:7F:F2:D9:EF:BD:1E:8F:C0:2E:5F:37:53:A0:53
Certificate issuer:       /CN=817FDD720A91C442D681C927F5AB6D6E78081250
Certificate serial:       15A5F77EBFFA2ADF053AC7FF417B6280DE5546C4
Authority key identifier: 81:7F:DD:72:0A:91:C4:42:D6:81:C9:27:F5:AB:6D:6E:78:08:12:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/817FDD720A91C442D681C927F5AB6D6E78081250.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e302e302f32302d3234203d3e203238323637.roa
Signing time:             Fri 04 Aug 2023 13:14:07 +0000
ROA not before:           Fri 04 Aug 2023 13:09:07 +0000
ROA not after:            Fri 02 Aug 2024 13:14:07 +0000
asID:                     28267
IP address blocks:        187.108.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a5:f7:7e:bf:fa:2a:df:05:3a:c7:ff:41:7b:62:80:de:55:46:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817FDD720A91C442D681C927F5AB6D6E78081250
        Validity
            Not Before: Aug  4 13:09:07 2023 GMT
            Not After : Aug  2 13:14:07 2024 GMT
        Subject: CN=2380B1CBF7A27FF2D9EFBD1E8FC02E5F3753A053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:e8:d8:68:9a:a9:77:09:76:50:f2:17:68:
                    53:93:b4:c3:4e:de:c1:7a:9f:d1:30:ad:c5:64:db:
                    41:e7:4e:cf:c2:d9:64:9f:85:02:8e:81:33:53:5d:
                    6c:ab:2e:70:9e:be:03:03:5d:55:ce:3a:02:9b:a3:
                    58:8d:04:27:60:7c:86:47:ba:3b:29:8b:61:27:40:
                    2f:d4:2d:1f:7d:19:f2:13:2f:2a:2d:b6:96:fd:c6:
                    d4:01:dd:8d:ab:1d:36:01:b3:9f:f8:ab:ad:ca:d2:
                    57:08:d7:40:1d:0c:ac:81:72:df:a2:97:ec:57:05:
                    e5:a3:7f:54:01:e6:47:49:75:a2:31:bb:ee:49:9e:
                    68:ff:3d:10:4f:e6:4c:53:81:13:a9:31:54:01:35:
                    c7:55:5f:e6:02:1f:fe:3a:80:e5:ff:65:d9:57:36:
                    eb:1c:05:4e:7e:1d:6d:37:67:97:86:9b:d4:b2:9e:
                    6b:55:c9:60:9e:ac:27:8d:28:9c:fc:ca:db:95:35:
                    5c:c2:1d:c9:5b:7d:dc:8b:1d:c7:0d:59:3a:9e:ad:
                    a5:9e:e6:7e:9b:1a:d7:6c:10:80:e6:d0:8a:20:77:
                    e4:a2:d1:32:7a:f2:5b:8f:35:16:f8:62:5c:e7:8c:
                    b2:df:9e:74:36:23:78:18:0c:95:f6:08:2f:f4:7d:
                    13:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:80:B1:CB:F7:A2:7F:F2:D9:EF:BD:1E:8F:C0:2E:5F:37:53:A0:53
            X509v3 Authority Key Identifier:
                keyid:81:7F:DD:72:0A:91:C4:42:D6:81:C9:27:F5:AB:6D:6E:78:08:12:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/817FDD720A91C442D681C927F5AB6D6E78081250.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/817FDD720A91C442D681C927F5AB6D6E78081250.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/3138372e3130382e302e302f32302d3234203d3e203238323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:ae:a2:79:cf:82:07:bd:81:e5:10:de:59:46:69:a2:92:d5:
         75:04:82:89:8f:2f:df:34:ca:4d:2e:c7:9c:7c:de:50:bf:f1:
         37:0f:9b:23:11:88:d5:bf:10:a5:e4:66:1e:f7:36:a9:13:89:
         4a:2e:82:88:c8:a5:61:c9:4f:7f:51:9f:93:c5:b9:40:a2:7d:
         ea:9a:13:03:7c:bb:14:cf:bb:b4:67:12:df:5e:73:f8:4a:a7:
         fd:b4:89:4d:82:a2:d3:47:58:8d:4d:c3:1f:09:cf:14:37:8f:
         f2:90:e3:b9:31:3b:e7:1f:b6:8b:95:8d:dc:ba:43:f0:8f:e7:
         43:03:3e:60:c9:ca:ca:7f:15:8c:a2:88:44:16:43:fa:b6:36:
         96:f6:36:ba:6f:4a:2c:e0:56:76:32:03:ec:0e:1c:3b:98:b8:
         8b:86:80:ff:08:b8:67:55:98:d4:b7:05:e2:23:3c:fc:78:bc:
         12:c3:0b:33:6f:e6:80:ae:f0:4c:bc:1f:87:85:67:83:57:10:
         2b:41:a5:49:5f:24:a7:c4:0b:2a:22:bd:7b:35:74:f0:e5:a1:
         2a:7c:1a:53:93:97:7d:08:e5:0d:52:a2:d5:cf:63:f0:6d:19:
         83:6b:12:41:c6:8a:d1:63:22:79:03:dc:2b:29:8d:c7:8b:13:
         4a:6e:45:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org