Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230342e302f32332d3233203d3e20323633313436.roa
File:                     3138372e38362e3230342e302f32332d3233203d3e20323633313436.roa (raw, json)
Hash identifier:          Cx/8ZcUy0lb6IYPo3d8/uFAtVWSCTVZVORDYARMXO+U=
Subject key identifier:   84:68:79:14:23:BF:FF:19:EF:F2:C7:61:0D:DA:93:A9:F9:73:26:4A
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       71EB1C32C81E1164854528F2C0134729BCC9BA81
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230342e302f32332d3233203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:43 +0000
ROA not before:           Tue 27 Feb 2024 17:25:43 +0000
ROA not after:            Tue 25 Feb 2025 17:30:43 +0000
asID:                     263146
IP address blocks:        187.86.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:eb:1c:32:c8:1e:11:64:85:45:28:f2:c0:13:47:29:bc:c9:ba:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:43 2024 GMT
            Not After : Feb 25 17:30:43 2025 GMT
        Subject: CN=8468791423BFFF19EFF2C7610DDA93A9F973264A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:49:a0:5f:bb:6e:df:c6:06:47:f7:88:ec:
                    5f:98:03:e2:b7:af:ea:82:a3:0d:fb:91:b6:27:9b:
                    c4:b8:f8:5b:4e:50:8d:78:e3:90:fc:d5:ec:d9:4d:
                    c8:ed:ef:80:21:54:dd:85:06:2b:52:80:4b:cd:5a:
                    28:58:2f:56:c2:d1:b1:e3:d2:83:5d:6c:af:41:01:
                    cf:64:38:d7:1f:d5:42:93:01:04:f3:76:27:52:d6:
                    3a:0d:ee:da:c9:a1:7a:f3:d2:24:a9:99:78:91:fd:
                    71:83:f4:ba:1a:4b:3a:83:cd:ce:b4:04:11:5e:44:
                    36:9e:5d:b5:5c:62:b2:da:af:e6:65:dc:06:25:e9:
                    20:33:92:b9:5b:7f:9a:71:55:f4:a0:a5:23:b2:81:
                    8c:67:92:39:7e:aa:67:bf:e6:85:bb:2a:62:d6:17:
                    86:52:92:29:81:c3:dc:9e:6f:42:88:a9:e9:55:1f:
                    65:a7:ad:47:0e:26:9d:41:58:34:d8:55:6b:b9:a5:
                    6e:43:1b:cd:aa:15:01:18:27:7f:7c:18:ae:99:cf:
                    d4:60:3f:ed:bb:24:23:8a:c5:e3:bf:36:3b:d2:7d:
                    14:0c:4b:bc:51:94:c0:65:41:0a:56:71:6e:13:d5:
                    65:5d:09:a7:eb:39:f7:c1:75:05:78:bf:db:10:b6:
                    0c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:68:79:14:23:BF:FF:19:EF:F2:C7:61:0D:DA:93:A9:F9:73:26:4A
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230342e302f32332d3233203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:5a:59:cf:2a:cb:55:16:a8:d0:32:dd:45:98:24:b7:0b:9d:
         4a:69:11:b3:40:00:37:00:90:a2:09:87:84:d2:79:d8:a5:91:
         64:be:1d:10:e0:0e:f7:93:1b:66:56:31:3e:c0:6c:b3:4e:09:
         c7:bf:bf:67:b2:e1:b9:1a:27:10:8b:a2:3f:9c:85:b2:9d:2f:
         09:b6:0c:e4:aa:57:7d:6f:b6:dd:f8:24:41:8f:0a:f8:5b:66:
         4e:5b:28:f6:71:db:0b:29:c8:ab:ce:1a:f2:9b:90:80:c2:3d:
         d6:2b:99:4b:e7:1d:70:e7:d4:3b:7f:c0:23:e6:31:97:ff:ee:
         f1:c8:a8:bd:0a:29:6b:81:1d:e0:9e:3c:1d:e4:4c:92:d3:f7:
         54:3f:41:7f:5b:e4:f0:d3:5d:de:3c:a4:07:8d:63:0e:ae:ae:
         67:bf:34:ce:29:7e:4a:49:f9:2b:1a:31:5b:7c:60:ad:45:8d:
         b0:66:e4:ed:1f:0a:dd:39:7c:23:fa:bf:2d:8f:11:29:ca:56:
         bf:4f:1a:f2:e5:bd:2e:84:88:db:d7:de:be:82:49:f7:3b:07:
         f5:b7:3a:55:fc:66:6f:84:9b:83:b1:7a:af:d3:9a:5d:8a:9f:
         97:21:ff:d0:7d:43:7f:ef:66:47:87:82:c2:29:d6:04:7f:29:
         b4:97:81:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org