Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230322e302f32342d3234203d3e20323633313436.roa
File:                     3138372e38362e3230322e302f32342d3234203d3e20323633313436.roa (raw, json)
Hash identifier:          8yp5JyoXUtmzO1XhUzNZ236zYs2SF8P4H+JCxxUWxXI=
Subject key identifier:   C7:D3:16:23:6A:6C:D7:0A:6A:78:2C:E2:9E:57:BD:90:FB:76:E8:35
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       408C2B49DDA4A99C13DA003644B71AE63F63E901
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230322e302f32342d3234203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:41 +0000
ROA not before:           Tue 27 Feb 2024 17:25:41 +0000
ROA not after:            Tue 25 Feb 2025 17:30:41 +0000
asID:                     263146
IP address blocks:        187.86.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8c:2b:49:dd:a4:a9:9c:13:da:00:36:44:b7:1a:e6:3f:63:e9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:41 2024 GMT
            Not After : Feb 25 17:30:41 2025 GMT
        Subject: CN=C7D316236A6CD70A6A782CE29E57BD90FB76E835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c6:7f:67:d3:19:11:e9:b1:3f:e6:18:9c:bf:
                    6f:3e:f9:2e:80:5d:5e:d7:16:4c:02:d9:98:80:b4:
                    bb:90:7d:6f:51:a4:8b:04:b9:0f:5f:1b:b7:3f:4b:
                    4b:84:ae:e1:b1:9d:8b:03:b7:4a:50:00:71:00:de:
                    ca:88:f1:0e:1f:2a:cf:27:bb:eb:a0:1e:5b:b2:90:
                    c0:51:74:8f:cb:e0:40:49:a6:9d:ba:78:1e:a9:7f:
                    f0:fd:16:fb:0b:70:00:c6:b8:70:05:74:a5:f4:4f:
                    23:53:15:7d:e2:1a:8f:a8:c5:bd:b4:60:72:99:8c:
                    06:e9:4e:42:16:e5:2a:c5:4e:a3:bf:8c:2c:e1:b6:
                    59:a1:23:81:56:5e:06:4a:a2:21:09:ef:e3:eb:bb:
                    eb:70:b2:4b:79:13:94:8c:52:a3:be:b0:ae:12:72:
                    12:78:1b:8b:2e:dd:7f:b0:06:c7:c8:f6:d6:60:a7:
                    f6:fe:4b:dd:6a:2a:78:49:d3:b4:7e:38:e1:8f:9f:
                    85:1c:0f:ad:2e:02:19:3d:42:20:b1:77:dc:9d:b1:
                    d6:1c:13:62:43:78:20:f6:d4:a1:4d:c2:13:d4:16:
                    e5:d2:b8:e6:28:96:42:ae:d9:e7:b9:8b:15:bd:19:
                    4d:96:b9:80:38:9f:52:e9:7d:a3:c4:fb:b1:55:f4:
                    89:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D3:16:23:6A:6C:D7:0A:6A:78:2C:E2:9E:57:BD:90:FB:76:E8:35
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230322e302f32342d3234203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:45:9f:db:27:6f:fc:e0:c8:03:0d:d9:d7:d0:c4:0a:75:ea:
         73:cc:13:b6:98:2b:5f:46:1f:59:0d:6b:46:d7:51:3a:5c:63:
         9c:a7:aa:9a:e0:6f:cf:f7:86:c3:6f:16:10:eb:3b:1b:fa:33:
         8b:7e:06:fa:6f:7e:fc:50:14:28:72:9b:14:78:e3:1d:67:de:
         16:7a:1d:1a:5c:e6:5b:bb:9d:15:74:8a:9a:a8:51:c7:4e:ce:
         6c:06:d1:be:02:77:97:dd:40:3c:66:68:11:b2:36:a1:e6:90:
         90:d4:52:b7:4c:23:c3:e4:80:f3:59:ff:69:d6:cb:b4:29:2d:
         9a:b0:f8:d6:aa:ff:03:26:0b:d1:53:b7:86:10:2e:41:53:5c:
         7c:ac:08:33:ad:d1:0e:91:eb:6e:30:e5:ee:44:8d:22:44:ed:
         cf:a4:44:83:49:e9:e9:91:b6:87:5b:d6:eb:97:c6:1e:7f:71:
         25:b1:89:3a:1f:c8:3d:15:82:0d:cb:4e:d5:9e:5c:96:bd:e6:
         9a:7f:53:2d:86:bd:9d:7e:56:00:a9:37:cb:f1:92:45:af:4a:
         b8:25:e8:50:ca:aa:1b:8e:18:81:b2:b3:8c:dc:5a:e8:90:28:
         55:16:cd:c0:65:47:93:06:49:75:64:41:fa:d7:8b:2e:14:5c:
         0e:f2:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org