Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230352e302f32342d3234203d3e20323633313436.roa
File:                     3138372e38362e3230352e302f32342d3234203d3e20323633313436.roa (raw, json)
Hash identifier:          xErzi9quuCnOsg0cP8B0y+qoLtUx1RjoNK/+zuP2ASs=
Subject key identifier:   3C:6D:E3:A4:A6:58:B7:79:B7:D6:60:FB:B1:2D:8D:98:B9:AB:78:77
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       7F12D73E03BE22BEDCF468C31F42B53560D19381
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230352e302f32342d3234203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:46 +0000
ROA not before:           Tue 27 Feb 2024 17:25:46 +0000
ROA not after:            Tue 25 Feb 2025 17:30:46 +0000
asID:                     263146
IP address blocks:        187.86.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:12:d7:3e:03:be:22:be:dc:f4:68:c3:1f:42:b5:35:60:d1:93:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:46 2024 GMT
            Not After : Feb 25 17:30:46 2025 GMT
        Subject: CN=3C6DE3A4A658B779B7D660FBB12D8D98B9AB7877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:a5:84:a6:4c:e8:54:22:6b:32:c9:e4:fa:
                    0b:87:26:96:79:74:13:f0:2c:5b:c1:a1:bf:52:b5:
                    73:36:84:f4:9c:ce:d1:d1:48:a9:38:a5:5f:e7:d0:
                    4a:dc:37:82:d5:a9:dd:da:95:22:85:11:50:9f:21:
                    66:e9:0e:be:de:15:ed:01:92:ee:ae:d7:6b:83:98:
                    86:67:43:eb:01:ed:4b:ef:42:d7:55:c9:da:67:16:
                    be:9f:23:96:cf:0f:4b:ca:4e:e3:80:8d:b8:55:19:
                    bf:40:1a:07:1d:da:28:ad:48:15:54:e6:5f:09:1c:
                    fa:ab:2f:71:8f:63:eb:3a:d4:7e:a4:f2:bf:e9:93:
                    fa:29:a6:e4:47:d3:eb:90:c8:cd:bb:68:59:b0:7d:
                    ce:de:0a:e2:09:7b:90:9e:da:a0:ab:31:03:10:a9:
                    34:f9:f6:4d:01:a1:b5:f4:19:ea:dc:47:c5:39:81:
                    b7:ec:40:f2:11:eb:1a:19:34:72:83:da:13:84:a3:
                    48:e7:7a:4f:e3:d7:83:d0:09:4b:22:13:1d:cf:43:
                    10:8b:1f:48:6d:3c:3f:79:31:48:bf:8f:f5:2b:a8:
                    52:29:72:ab:eb:cd:c9:34:85:5d:97:da:83:69:59:
                    dd:9a:79:ce:37:0e:e7:3b:bc:27:24:cf:71:6f:1f:
                    02:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6D:E3:A4:A6:58:B7:79:B7:D6:60:FB:B1:2D:8D:98:B9:AB:78:77
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230352e302f32342d3234203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:60:27:8b:bd:c9:8f:d5:f8:79:61:76:28:e0:96:4f:ce:3f:
         bd:4e:7d:77:27:03:b2:92:03:f8:a2:df:8f:56:2b:05:56:d5:
         b9:97:f3:ba:50:91:6e:61:fd:1d:0b:fa:bd:c7:af:2c:e1:9e:
         eb:17:b3:8e:e3:86:eb:e3:07:a7:14:ec:59:dd:48:48:62:e0:
         f5:b1:c4:84:25:4f:9b:be:49:83:0f:85:ca:03:2f:be:7a:05:
         78:35:a2:e6:fa:91:fc:7f:f5:d6:95:09:14:d6:dd:87:0a:88:
         ac:47:4c:5b:c9:33:2f:7e:19:6f:e2:f2:8e:f1:79:94:80:52:
         1b:87:b4:19:4c:66:ff:02:2b:d1:8e:9e:88:b9:0b:52:0d:2d:
         2a:c5:7b:8e:a7:11:ce:a3:ba:81:01:7a:55:84:ac:da:1a:a3:
         9d:80:e6:6c:91:45:2d:98:2a:1f:2b:19:96:7a:99:c1:c5:74:
         7f:9d:09:17:52:0a:33:00:0c:11:14:da:27:90:f8:fa:86:4a:
         35:d3:a3:e0:16:ec:90:3a:cd:a5:0e:c5:bf:25:fc:de:14:8e:
         11:75:79:7a:f7:02:80:4d:51:18:16:f7:f6:41:f2:87:da:99:
         09:98:dd:e2:08:68:02:48:86:01:2c:23:a8:ba:44:ef:88:1d:
         11:e9:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org