Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138372e3130382e3131322e302f32302d3230203d3e203533313235.roa
File:                     3138372e3130382e3131322e302f32302d3230203d3e203533313235.roa (raw, json)
Hash identifier:          3DE3+IhRuYTqDZiLvDTWv+1+Xdo/eZzmakjoZO/xV6s=
Subject key identifier:   7A:61:FB:DD:EC:39:54:CE:8F:0E:87:7E:28:78:7B:93:A1:FB:B3:5F
Certificate issuer:       /CN=4AE4E57F7E0DB3A20F920599A286A672EE761AF3
Certificate serial:       78DCFA9901888C9DD5F89589DBF78B4CF6DF655A
Authority key identifier: 4A:E4:E5:7F:7E:0D:B3:A2:0F:92:05:99:A2:86:A6:72:EE:76:1A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138372e3130382e3131322e302f32302d3230203d3e203533313235.roa
Signing time:             Thu 29 Feb 2024 19:00:00 +0000
ROA not before:           Thu 29 Feb 2024 18:55:00 +0000
ROA not after:            Thu 27 Feb 2025 19:00:00 +0000
asID:                     53125
IP address blocks:        187.108.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:dc:fa:99:01:88:8c:9d:d5:f8:95:89:db:f7:8b:4c:f6:df:65:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AE4E57F7E0DB3A20F920599A286A672EE761AF3
        Validity
            Not Before: Feb 29 18:55:00 2024 GMT
            Not After : Feb 27 19:00:00 2025 GMT
        Subject: CN=7A61FBDDEC3954CE8F0E877E28787B93A1FBB35F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:cc:a6:45:19:e9:c3:78:cd:8a:06:ea:4a:
                    53:24:df:ec:91:df:a6:61:be:1a:58:87:87:67:be:
                    36:63:78:69:31:42:53:32:fe:bf:a4:d0:8b:c9:ef:
                    1e:21:17:a2:40:c4:d8:2e:4e:66:7f:9b:fc:1f:89:
                    a2:a8:ef:8e:d4:d7:1a:b8:46:a7:2b:d4:61:7a:28:
                    e8:e8:82:93:29:77:d1:af:be:17:2a:b8:3c:4f:da:
                    1a:f5:d6:c7:43:3f:65:de:0e:05:14:92:88:f6:8b:
                    0e:37:8a:7c:4f:ea:e9:16:b1:ae:51:18:e2:7e:a3:
                    fd:5f:ad:7c:f4:6b:79:46:04:a1:3c:d9:4a:a7:cd:
                    fa:63:85:f9:5b:6e:ce:5c:d0:d1:6a:5f:18:74:7b:
                    f5:ca:fe:ca:c3:b7:07:1d:45:86:be:75:5e:30:33:
                    e3:f1:07:70:08:54:3c:e7:69:9a:1b:e7:f5:fb:05:
                    d6:70:d2:be:35:52:8f:87:41:a0:b6:4e:a1:32:38:
                    06:3e:3e:64:7a:ed:e4:19:23:9c:88:ab:17:24:7e:
                    98:36:ac:ca:7c:a5:e1:19:8c:4e:0a:9a:a9:ea:04:
                    86:93:9f:b1:67:2a:e0:de:05:3b:65:d2:10:9c:c5:
                    b4:8c:71:bf:bc:f4:4c:8d:a0:cf:fa:ab:61:8c:b1:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:61:FB:DD:EC:39:54:CE:8F:0E:87:7E:28:78:7B:93:A1:FB:B3:5F
            X509v3 Authority Key Identifier:
                keyid:4A:E4:E5:7F:7E:0D:B3:A2:0F:92:05:99:A2:86:A6:72:EE:76:1A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138372e3130382e3131322e302f32302d3230203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:41:52:d7:32:78:ee:38:c3:95:2f:35:d7:55:a7:e5:a3:
         20:40:66:3c:c0:05:98:a7:7e:80:3a:2b:2e:22:09:48:78:80:
         86:9d:68:48:88:ba:40:84:5a:0b:83:03:b7:e8:94:65:76:b4:
         c5:bf:0d:45:d8:42:53:e7:bd:92:f4:a7:ca:ba:16:de:45:60:
         56:59:ef:5d:cd:81:c9:09:44:79:71:45:52:44:d1:51:9a:fb:
         f5:f1:e2:aa:5c:1a:91:80:5c:c1:05:50:b1:c8:18:35:2e:ea:
         45:61:d1:59:46:1a:5a:72:0c:46:72:f7:99:01:31:28:04:f0:
         29:5b:54:38:96:cd:27:87:c2:9b:75:19:25:da:60:31:fa:74:
         a3:66:9c:37:5f:23:08:22:26:e6:b6:41:a9:5d:2f:fc:25:50:
         b8:ea:e7:37:8f:32:05:6c:bb:53:36:a3:e1:a9:54:0f:80:5c:
         67:6f:f5:b8:26:75:1e:5a:18:56:25:f6:3e:1b:be:69:58:a8:
         df:e6:15:cf:68:ad:5c:ea:93:ad:05:d6:21:f7:a1:9d:7c:7f:
         c3:83:59:5d:22:cd:41:b6:de:55:b4:7c:c3:84:c8:b2:c7:30:
         8f:18:99:78:65:3c:8a:0f:73:b4:6f:21:a8:63:9f:c4:c5:74:
         04:5f:27:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org