Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230372e302f32342d3234203d3e20323633313436.roa
File:                     3138372e38362e3230372e302f32342d3234203d3e20323633313436.roa (raw, json)
Hash identifier:          Q5jymQo1cCQAQdPG19J7vSLJQ0pFPdcq3f9Bh8xsUG4=
Subject key identifier:   13:F9:45:3D:95:9E:4A:2D:CA:72:98:1B:0D:E0:D5:0F:6F:36:62:0C
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       4054737FF91A6922C0D8B4FBFA863ECC2D1271AE
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230372e302f32342d3234203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:44 +0000
ROA not before:           Tue 27 Feb 2024 17:25:44 +0000
ROA not after:            Tue 25 Feb 2025 17:30:44 +0000
asID:                     263146
IP address blocks:        187.86.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:54:73:7f:f9:1a:69:22:c0:d8:b4:fb:fa:86:3e:cc:2d:12:71:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:44 2024 GMT
            Not After : Feb 25 17:30:44 2025 GMT
        Subject: CN=13F9453D959E4A2DCA72981B0DE0D50F6F36620C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c9:67:be:a4:d4:0c:96:11:f5:68:24:60:9a:
                    e2:b8:bb:13:86:14:29:a7:11:6c:e0:c4:9c:36:ca:
                    62:d9:58:98:94:c6:bb:84:d4:c5:3a:55:6a:c6:54:
                    e4:5a:67:f2:57:f7:44:55:37:8f:7c:c6:d4:dc:77:
                    b1:97:b4:50:11:6f:bb:62:37:ee:e5:65:a0:69:53:
                    a8:e6:b6:8f:9b:bd:8d:44:5c:49:79:a6:d1:e8:d7:
                    18:2a:48:d0:55:50:11:67:8e:6c:06:f0:1a:c5:a2:
                    8d:bb:7a:6b:5f:b1:e4:aa:f4:69:18:8c:a8:d6:21:
                    1a:41:09:08:e5:12:6c:3a:82:28:d6:0f:1c:98:54:
                    d2:2e:9c:f7:0a:5e:cc:33:eb:0a:b1:ce:d8:97:be:
                    06:8d:fe:69:79:42:3d:52:24:71:ee:37:af:e0:4e:
                    f3:90:2c:80:a8:d6:27:9e:7b:61:59:cf:e1:64:07:
                    8b:9c:95:19:da:0e:91:22:3a:63:c7:7e:bc:96:aa:
                    21:74:ea:fa:ac:55:91:f4:c8:89:37:9f:6b:31:85:
                    97:1d:78:5d:5d:09:ac:d8:90:16:d1:c4:92:3a:dc:
                    de:00:48:b6:73:1e:bf:10:b6:58:3f:bb:d3:7c:52:
                    0d:70:18:25:a0:c2:34:7d:5e:11:95:d1:75:b6:95:
                    88:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F9:45:3D:95:9E:4A:2D:CA:72:98:1B:0D:E0:D5:0F:6F:36:62:0C
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/3138372e38362e3230372e302f32342d3234203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:9b:d2:de:0a:e0:f4:9b:09:0e:f3:43:b7:51:da:b2:1a:7e:
         da:bb:b4:02:11:04:ab:5d:f9:24:09:2f:c9:bd:5a:13:a0:bf:
         57:02:7c:1c:17:37:46:ce:4c:be:32:5c:77:78:76:a3:fa:be:
         94:6d:e6:52:de:e6:69:24:5c:61:96:49:23:db:b0:1a:e5:db:
         c9:d1:ab:74:5d:4a:9f:e4:46:7c:00:dd:01:e7:8a:c5:33:cf:
         7e:ad:40:c8:3c:7f:21:6c:7b:63:b9:08:8c:19:bc:07:35:1b:
         2e:da:38:db:03:6c:b3:ee:bd:21:8b:bb:90:4f:53:5e:c1:03:
         ff:bf:2f:c4:2e:1e:18:02:6a:a7:7e:af:87:da:a6:6a:2c:77:
         1a:67:b6:89:e8:b3:ad:9c:f9:cc:1c:b8:11:3d:a5:69:d2:b3:
         55:03:be:9d:c3:7b:ea:4b:f7:35:58:a7:13:cf:7c:5e:15:bc:
         a0:da:ac:6c:29:02:03:d6:86:e5:e5:2d:0d:37:47:0b:2b:0d:
         25:7e:f5:f6:cf:0a:d8:e4:e4:26:d1:8d:6b:66:9c:47:04:dc:
         08:e5:28:6a:41:b1:b5:85:24:af:79:d5:16:2e:29:4e:8f:85:
         78:92:a5:07:8b:cc:a0:64:a2:08:79:32:cb:84:7f:45:ec:93:
         39:85:15:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org