Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138372e3130382e3132342e302f32322d3232203d3e203533313235.roa
File:                     3138372e3130382e3132342e302f32322d3232203d3e203533313235.roa (raw, json)
Hash identifier:          5AoYeejebhYT6QmSKoRjHAGkHZ6zim5vXDizi/uEJxQ=
Subject key identifier:   AE:9F:45:A0:94:8B:12:EB:77:C0:82:E3:8B:20:71:D7:C5:9E:4F:2C
Certificate issuer:       /CN=4AE4E57F7E0DB3A20F920599A286A672EE761AF3
Certificate serial:       2268A87BC8F907CE274A6B88793B8D11DA669BA7
Authority key identifier: 4A:E4:E5:7F:7E:0D:B3:A2:0F:92:05:99:A2:86:A6:72:EE:76:1A:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138372e3130382e3132342e302f32322d3232203d3e203533313235.roa
Signing time:             Tue 31 Oct 2023 21:00:00 +0000
ROA not before:           Tue 31 Oct 2023 20:55:00 +0000
ROA not after:            Tue 29 Oct 2024 21:00:00 +0000
asID:                     53125
IP address blocks:        187.108.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:68:a8:7b:c8:f9:07:ce:27:4a:6b:88:79:3b:8d:11:da:66:9b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AE4E57F7E0DB3A20F920599A286A672EE761AF3
        Validity
            Not Before: Oct 31 20:55:00 2023 GMT
            Not After : Oct 29 21:00:00 2024 GMT
        Subject: CN=AE9F45A0948B12EB77C082E38B2071D7C59E4F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:fc:09:5e:8d:77:b9:6e:ba:54:29:45:4d:
                    f4:dd:a5:1d:6f:30:48:bf:7b:ea:37:5f:53:e2:62:
                    c2:b7:d4:24:cc:b7:28:95:53:a1:f3:a5:e8:42:d6:
                    bd:70:7b:6f:b0:7f:88:cf:49:26:54:4a:2d:2e:cf:
                    48:f6:db:30:49:95:3b:94:e2:59:7f:20:82:84:d4:
                    c9:b4:54:02:8d:76:f8:1a:5f:fc:67:55:35:49:26:
                    5d:22:3e:d7:88:4a:c4:84:f6:bd:15:93:b1:e3:0e:
                    b0:53:ff:ea:8a:f5:ee:9b:47:52:5b:2c:2b:fb:96:
                    95:ec:7c:4c:34:05:b1:38:04:0c:fe:31:80:aa:d6:
                    b5:bc:c8:34:a6:c5:73:70:d8:89:b6:3f:99:4d:ed:
                    37:b6:af:d0:7a:92:51:96:b8:ce:bc:82:9b:12:fb:
                    f3:8b:11:f5:28:25:db:93:33:79:1a:ba:28:c6:26:
                    ff:8d:5b:fb:6f:08:f2:34:13:d0:b1:b3:61:9b:ba:
                    a5:2d:09:3d:4f:7b:c2:1b:e4:3b:58:1e:77:00:79:
                    a9:dd:ed:f7:f7:5a:43:bd:02:f1:23:5c:73:9e:e8:
                    2a:25:fe:99:0d:3f:d6:e4:25:a5:53:60:ba:4b:e1:
                    d7:73:ed:61:92:44:0a:ec:54:d3:a8:e5:2c:67:85:
                    21:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9F:45:A0:94:8B:12:EB:77:C0:82:E3:8B:20:71:D7:C5:9E:4F:2C
            X509v3 Authority Key Identifier:
                keyid:4A:E4:E5:7F:7E:0D:B3:A2:0F:92:05:99:A2:86:A6:72:EE:76:1A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AE4E57F7E0DB3A20F920599A286A672EE761AF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3138372e3130382e3132342e302f32322d3232203d3e203533313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:1b:27:e3:68:1e:f5:e3:f8:ab:f6:46:ea:f2:6e:7c:7e:d1:
         0e:86:66:02:70:7f:59:16:3f:d1:be:bb:ff:6d:f9:2a:5d:6b:
         5b:d4:b6:9f:ac:05:67:61:97:78:1f:5a:bc:c3:40:2a:26:1b:
         ac:bb:70:73:de:52:a8:12:3f:d9:0e:88:c2:06:a3:c6:f3:1d:
         3e:36:86:73:35:bd:bf:51:02:6f:63:16:13:53:d9:d6:08:ae:
         b4:77:fb:c4:aa:53:95:48:e6:d7:1b:7d:b1:7c:05:77:13:26:
         b5:77:40:7f:a6:ce:7e:53:48:10:51:83:af:2a:4f:2f:92:fd:
         cd:08:a2:50:89:81:19:0c:7f:8a:35:64:30:02:4a:2e:4a:a2:
         66:b4:d2:a9:62:f6:be:eb:9f:47:22:16:66:cf:5d:f9:63:57:
         50:dc:b9:2c:96:c8:6f:1a:2a:e9:18:8f:61:1f:96:38:9f:14:
         4b:f3:9d:42:06:07:5e:af:d8:45:6a:9b:b3:e8:fd:19:17:b3:
         ce:67:0d:3c:69:ed:1d:1f:3c:fe:36:37:44:45:a4:c8:1b:e2:
         f0:f7:87:b7:09:5a:ba:99:1e:60:98:1e:84:e6:47:77:f4:1a:
         cb:08:b9:a2:c5:c8:42:45:1f:17:f7:7b:99:bf:67:c1:c2:69:
         a1:e9:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org