Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/1/3138372e31372e31362e302f32302d3234203d3e203238323835.roa
File:                     3138372e31372e31362e302f32302d3234203d3e203238323835.roa (raw, json)
Hash identifier:          3M/4jFeg4fHOLqHtvmmqbp3BvotTDzaXrQ3yNZUHuDk=
Subject key identifier:   58:E0:F8:DA:72:83:3E:C0:80:A7:ED:5E:E5:41:CB:C0:FC:FA:C4:DA
Certificate issuer:       /CN=8B18CFD44D4D2A1CD7C3EFF64062C5F1A36EEF2F
Certificate serial:       5B4EF929F2AC4081B0F7E8A31AB61152E0749695
Authority key identifier: 8B:18:CF:D4:4D:4D:2A:1C:D7:C3:EF:F6:40:62:C5:F1:A3:6E:EF:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B18CFD44D4D2A1CD7C3EFF64062C5F1A36EEF2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/1/3138372e31372e31362e302f32302d3234203d3e203238323835.roa
Signing time:             Thu 04 Apr 2024 17:46:46 +0000
ROA not before:           Thu 04 Apr 2024 17:41:46 +0000
ROA not after:            Thu 03 Apr 2025 17:46:46 +0000
asID:                     28285
IP address blocks:        187.17.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4e:f9:29:f2:ac:40:81:b0:f7:e8:a3:1a:b6:11:52:e0:74:96:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B18CFD44D4D2A1CD7C3EFF64062C5F1A36EEF2F
        Validity
            Not Before: Apr  4 17:41:46 2024 GMT
            Not After : Apr  3 17:46:46 2025 GMT
        Subject: CN=58E0F8DA72833EC080A7ED5EE541CBC0FCFAC4DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:3d:23:e0:9d:2c:de:fb:8d:e3:90:76:e3:
                    ec:30:70:d7:b6:c4:26:4b:2b:08:13:61:ce:28:2d:
                    1b:7a:a7:43:48:5b:9e:b8:d1:09:67:93:47:d9:c4:
                    2a:83:97:19:a5:ad:af:94:5d:77:7d:40:a8:f9:08:
                    95:61:aa:7a:60:d5:5e:17:86:6d:d6:9e:12:41:89:
                    d6:2a:f5:0a:55:da:1d:99:60:b4:f2:c9:fb:52:b7:
                    de:20:47:5b:97:cf:f2:70:83:d0:7b:05:59:b9:0f:
                    c7:1d:0e:4e:57:4f:41:ec:ce:6e:c9:70:40:20:d7:
                    39:b0:ac:67:6b:60:61:cf:60:ba:3a:33:05:a8:ed:
                    ed:77:a4:dd:6d:cb:74:ad:1c:e1:e4:46:1c:cb:96:
                    34:d1:32:1a:ca:52:93:d3:1c:f0:1e:96:60:c5:f4:
                    9e:aa:63:7c:7a:bc:6e:59:3d:ff:1f:01:fa:ac:e5:
                    05:4f:3c:3b:38:08:d1:8a:e2:b2:f3:24:05:39:6f:
                    36:bc:a3:52:f0:3d:20:87:28:5e:5d:6f:00:51:49:
                    58:68:92:03:09:24:27:4e:80:a5:22:0e:8a:02:14:
                    9e:f0:67:b5:1f:b6:1d:4e:d1:25:91:4b:cb:0f:e3:
                    14:38:4e:25:76:ed:48:be:11:77:8b:75:f3:6e:02:
                    fc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E0:F8:DA:72:83:3E:C0:80:A7:ED:5E:E5:41:CB:C0:FC:FA:C4:DA
            X509v3 Authority Key Identifier:
                keyid:8B:18:CF:D4:4D:4D:2A:1C:D7:C3:EF:F6:40:62:C5:F1:A3:6E:EF:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/1/8B18CFD44D4D2A1CD7C3EFF64062C5F1A36EEF2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B18CFD44D4D2A1CD7C3EFF64062C5F1A36EEF2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/1/3138372e31372e31362e302f32302d3234203d3e203238323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:eb:11:f5:6e:01:39:71:dc:9d:8b:7b:0e:2e:d5:ab:b1:5d:
         14:dd:19:32:53:d7:9f:3a:4c:5d:5a:20:46:5f:97:f0:f1:d5:
         81:97:ee:ae:3f:df:78:90:ca:d7:2f:73:45:2c:f5:ef:90:92:
         70:29:d4:43:e5:58:b3:91:85:90:4f:54:cb:83:82:20:73:91:
         bf:59:07:bd:e2:f4:48:96:f2:6e:87:92:76:91:a3:20:4b:e3:
         40:80:6c:da:2a:a0:5a:80:9c:df:e2:a1:4b:24:df:da:3d:39:
         62:3e:60:ea:1a:72:5d:9a:57:b5:c5:7f:05:dc:17:6a:27:34:
         a3:78:96:7e:71:8d:eb:7f:e1:9d:ef:dd:5c:59:85:12:e0:ba:
         39:b0:fe:5e:32:e3:06:f7:88:3d:09:56:57:c4:5d:a7:29:79:
         1d:3e:9a:e8:99:2b:9a:f2:a8:eb:8e:4d:6c:5d:34:ba:59:3f:
         36:96:d4:1d:cd:4f:2f:3e:79:fe:18:ca:7d:13:d3:56:6a:bc:
         53:64:02:8c:20:9c:d6:b9:57:51:83:ff:e8:ef:6c:b1:1e:e2:
         6d:68:d7:5a:bc:b0:b7:2c:7f:ae:48:ca:44:14:a1:ff:6e:78:
         54:43:17:da:f9:cd:00:2f:3b:bd:56:d3:66:0b:7a:76:22:be:
         b0:17:ee:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org