Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/1/3138372e3132302e32312e302f32342d3234203d3e20323636313831.roa
File:                     3138372e3132302e32312e302f32342d3234203d3e20323636313831.roa (raw, json)
Hash identifier:          QLGO5lr7x1PJiZyAuqHUeE4UnAx8qYA8bBT1GA6NGLM=
Subject key identifier:   89:EB:B3:0D:5E:A6:80:EC:EC:37:ED:18:62:CB:B3:CA:28:2A:BD:7E
Certificate issuer:       /CN=ED3E39FA4408538D2B9D76E372D1662D7778B8B9
Certificate serial:       5F474EFB705DA0416A646ACF38DC5CC0A54482BD
Authority key identifier: ED:3E:39:FA:44:08:53:8D:2B:9D:76:E3:72:D1:66:2D:77:78:B8:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED3E39FA4408538D2B9D76E372D1662D7778B8B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/1/3138372e3132302e32312e302f32342d3234203d3e20323636313831.roa
Signing time:             Wed 16 Nov 2022 16:00:00 +0000
ROA not before:           Wed 16 Nov 2022 15:55:00 +0000
ROA not after:            Wed 15 Nov 2023 16:00:00 +0000
asID:                     266181
IP address blocks:        187.120.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:47:4e:fb:70:5d:a0:41:6a:64:6a:cf:38:dc:5c:c0:a5:44:82:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED3E39FA4408538D2B9D76E372D1662D7778B8B9
        Validity
            Not Before: Nov 16 15:55:00 2022 GMT
            Not After : Nov 15 16:00:00 2023 GMT
        Subject: CN=89EBB30D5EA680ECEC37ED1862CBB3CA282ABD7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:b2:c6:ea:44:e6:b5:b1:28:40:49:81:39:
                    7d:7f:21:7c:63:a6:81:a5:4e:89:95:97:33:26:1e:
                    8e:2c:2a:d8:b2:22:9b:51:71:e8:2a:11:90:30:ef:
                    e0:14:1d:3b:93:7e:4c:c3:84:88:36:8b:33:a4:91:
                    f1:9e:3e:b2:b5:af:7d:5d:db:c4:6d:87:78:4c:75:
                    17:d2:e8:a5:d3:8b:cf:5c:19:07:92:aa:df:42:fe:
                    8d:60:cc:45:04:ab:eb:07:07:4a:24:8a:6e:b5:93:
                    76:85:13:69:b8:d5:89:0d:ee:58:7d:8f:6a:1d:2a:
                    af:e8:e0:cb:d1:00:25:f5:05:d9:fd:23:6f:78:1b:
                    f8:bc:0e:3b:bb:e6:7c:dd:c4:b2:82:99:03:f7:71:
                    e3:53:b8:02:19:89:00:b0:a1:e1:f5:2f:46:65:f1:
                    bb:6c:ba:39:93:c7:78:09:bf:ac:02:79:12:86:fe:
                    96:31:b4:80:67:9e:d1:a1:f9:38:ba:56:21:f7:d0:
                    18:7a:af:76:6a:e9:b1:df:6a:39:40:2d:e9:34:2e:
                    47:60:1d:55:96:f3:bf:ca:55:4c:55:b9:50:6d:80:
                    4a:73:93:36:d1:0d:64:f2:05:19:02:5a:53:71:b7:
                    d7:0f:d9:21:50:11:8a:08:0c:62:dc:52:46:8a:cb:
                    15:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EB:B3:0D:5E:A6:80:EC:EC:37:ED:18:62:CB:B3:CA:28:2A:BD:7E
            X509v3 Authority Key Identifier:
                keyid:ED:3E:39:FA:44:08:53:8D:2B:9D:76:E3:72:D1:66:2D:77:78:B8:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/1/ED3E39FA4408538D2B9D76E372D1662D7778B8B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ED3E39FA4408538D2B9D76E372D1662D7778B8B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/1/3138372e3132302e32312e302f32342d3234203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:cd:2f:75:90:c5:68:78:c5:50:15:49:61:19:1b:61:bd:75:
         2f:9a:c4:dd:58:f5:68:b8:da:77:a1:bd:6d:61:ea:01:f5:9b:
         14:a0:eb:85:56:db:aa:f1:83:fb:95:09:e8:8a:3e:62:e6:39:
         4b:7f:4c:db:ac:18:f9:4c:8c:8c:9b:6a:71:9d:94:89:60:5b:
         8b:79:ea:b4:ce:14:5f:b6:21:1c:0e:09:1e:59:10:c3:19:dc:
         ca:2d:03:6c:bf:f5:30:fd:b3:74:c4:b7:3e:48:33:20:5e:5d:
         9b:0c:85:bd:35:e8:d7:d3:e4:33:f0:ac:55:6b:b8:85:b5:98:
         41:f7:2d:b8:3e:c4:97:49:15:3a:cd:1c:aa:56:fe:68:71:b3:
         13:87:a6:ae:64:91:1f:90:c0:96:94:89:ae:46:f7:69:d5:de:
         ae:57:4e:1e:fe:b1:92:8c:13:c2:d7:d1:17:e7:65:c7:d6:01:
         00:29:56:17:61:8e:19:e8:7b:a6:f9:de:01:72:e5:0d:32:27:
         18:82:69:42:4e:eb:5b:0f:f8:70:8e:6f:43:2c:d2:6a:55:f3:
         e9:4d:2e:bf:fc:c6:37:fd:42:ce:78:c1:4c:43:d1:ce:58:80:
         2f:51:32:69:7d:27:52:60:e3:ae:f2:1c:59:09:55:21:a6:76:
         45:06:86:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org