Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138372e31382e36342e302f31382d3234203d3e203232363839.roa
File:                     3138372e31382e36342e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          kYBzJ67zyJrNZw/ruPqruJceaTaMlVyz3AIV8AX3yYs=
Subject key identifier:   DA:08:25:DA:99:FF:41:B5:59:13:E1:85:AF:DE:54:2A:42:83:6B:2D
Certificate issuer:       /CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Certificate serial:       2DA44B20B6B53C382FB6C1629001AEBF616011A5
Authority key identifier: 60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138372e31382e36342e302f31382d3234203d3e203232363839.roa
Signing time:             Tue 20 Feb 2024 16:57:04 +0000
ROA not before:           Tue 20 Feb 2024 16:52:04 +0000
ROA not after:            Tue 18 Feb 2025 16:57:04 +0000
asID:                     22689
IP address blocks:        187.18.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a4:4b:20:b6:b5:3c:38:2f:b6:c1:62:90:01:ae:bf:61:60:11:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
        Validity
            Not Before: Feb 20 16:52:04 2024 GMT
            Not After : Feb 18 16:57:04 2025 GMT
        Subject: CN=DA0825DA99FF41B55913E185AFDE542A42836B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:65:c8:d7:b3:b3:5c:09:9a:d3:15:5f:5c:
                    26:f5:c1:61:3b:d4:a6:9b:25:e6:5a:54:08:37:fb:
                    0d:1e:6e:ca:27:ca:9d:48:52:75:b2:bc:09:4c:63:
                    17:5a:35:bd:1b:7d:6a:33:b6:4e:cf:8b:cb:2c:86:
                    cc:ee:23:33:64:5c:9e:4c:d3:53:4c:e6:8a:07:af:
                    cf:ec:1c:3c:03:31:83:e2:61:5b:e5:e2:51:b3:15:
                    8d:67:83:81:6c:81:4e:44:d7:bf:da:2b:46:bc:cd:
                    b4:be:52:3f:ce:00:6d:b2:de:c1:50:ad:fb:2d:d9:
                    98:a0:81:e3:0e:ba:e7:87:73:25:73:76:e1:44:23:
                    8f:fc:36:4f:23:39:76:26:37:c5:bb:6e:ea:a9:ed:
                    8d:46:01:ab:b5:5f:36:44:92:0e:b1:12:69:d2:c5:
                    cd:5a:fc:aa:75:e3:0a:46:de:23:85:8a:41:b0:5b:
                    f1:f2:4f:34:fe:24:af:2c:a1:48:2b:13:34:f3:a9:
                    27:8d:8e:a0:45:9f:d5:33:d7:7a:36:44:6c:22:61:
                    53:58:18:1a:30:67:89:4c:19:8d:d9:e6:37:92:2a:
                    9a:32:39:10:97:c9:78:b1:11:9b:4d:9c:fa:41:ad:
                    68:ab:f8:90:8c:be:40:31:64:d9:20:1c:e5:cd:d9:
                    83:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:08:25:DA:99:FF:41:B5:59:13:E1:85:AF:DE:54:2A:42:83:6B:2D
            X509v3 Authority Key Identifier:
                keyid:60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/3138372e31382e36342e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.18.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         61:12:8d:c1:f4:d7:49:2f:18:12:00:2a:e2:a8:2f:21:ab:b7:
         6d:23:26:c7:f1:64:cb:2b:2b:f7:ad:91:ce:e5:bb:f2:4f:16:
         fe:0c:17:74:0b:68:42:61:a4:4f:c6:a2:16:90:c4:ae:fa:55:
         55:60:19:d5:4d:e9:bd:a2:a9:2a:54:56:b6:b6:40:32:51:30:
         5e:94:fa:b3:09:55:35:35:18:0a:a2:22:24:73:c1:f5:f3:e3:
         f2:89:0a:31:5d:e9:5e:c4:94:10:5b:d6:87:43:2f:be:6b:33:
         a1:f0:8c:b7:b7:84:48:42:04:41:ce:89:1f:f9:5f:53:37:14:
         0b:a7:d8:55:ab:d1:14:69:8d:16:e6:e6:83:a5:95:2c:b5:2d:
         9e:ee:b1:34:e6:b9:e3:10:c4:6b:64:d3:73:3c:52:3e:77:83:
         e2:4f:0b:61:d8:16:af:84:99:de:dd:e8:2e:77:5e:f6:04:64:
         f4:88:d6:fa:1d:e1:07:ad:69:bf:30:80:25:39:6b:4c:20:a2:
         84:73:77:81:76:b3:52:d1:6a:e9:f3:92:d8:f7:9f:85:df:8c:
         25:12:8d:2c:a8:fa:5a:66:4c:4e:fa:74:c8:80:62:99:57:95:
         35:b6:83:68:c0:ba:6a:31:a0:8d:1c:38:a8:3e:64:70:3c:22:
         69:72:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org