Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3132382e302f32302d3230203d3e203533303631.roa
File:                     3138372e38352e3132382e302f32302d3230203d3e203533303631.roa (raw, json)
Hash identifier:          cyFnygU8pfD5yVXrmkDraBX8AHzUjSedyYiMsXFEdPE=
Subject key identifier:   53:16:2D:85:4D:18:18:E4:86:82:16:42:F0:4B:50:85:25:E0:C3:AA
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       5A68BD7B9CF9A6FD13759368FB2CC28E5CF34817
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3132382e302f32302d3230203d3e203533303631.roa
Signing time:             Thu 07 Mar 2024 20:02:03 +0000
ROA not before:           Thu 07 Mar 2024 19:57:03 +0000
ROA not after:            Thu 06 Mar 2025 20:02:03 +0000
asID:                     53061
IP address blocks:        187.85.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:68:bd:7b:9c:f9:a6:fd:13:75:93:68:fb:2c:c2:8e:5c:f3:48:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Mar  7 19:57:03 2024 GMT
            Not After : Mar  6 20:02:03 2025 GMT
        Subject: CN=53162D854D1818E486821642F04B508525E0C3AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:d6:6a:ce:7d:52:78:39:b0:ec:b7:8a:5e:
                    f7:65:cd:81:b4:01:75:d1:81:98:5a:5f:89:a5:b9:
                    96:c3:80:9f:02:ca:74:bf:74:ad:fd:e2:73:c4:5b:
                    16:9a:e3:a8:58:0b:40:86:89:71:30:6e:af:e1:2d:
                    67:2e:cd:e6:9b:8c:52:d0:c1:02:bc:64:13:77:62:
                    18:8f:0a:43:e2:2d:b3:17:20:c0:be:66:1a:c6:db:
                    5f:d6:c5:f5:e1:f9:38:e3:6f:9b:b7:98:f8:0d:39:
                    65:34:f1:3f:0c:89:3d:78:3b:b1:6b:7f:45:83:94:
                    20:c2:ea:9a:53:f0:08:d3:85:b4:91:ad:0a:0e:9b:
                    dc:d8:32:be:6e:11:85:2b:a6:74:a8:f4:84:9d:7d:
                    fe:b1:50:60:ac:fa:e1:8d:ee:02:1b:32:16:80:99:
                    65:23:5e:64:82:a6:fd:51:a4:90:8c:26:f5:37:0f:
                    17:ba:4e:d8:bd:57:62:d8:4d:63:aa:46:4e:39:45:
                    0a:99:3d:c9:dd:ce:30:da:16:a4:c8:d0:cd:c4:5a:
                    3d:aa:bc:3d:ac:2e:49:93:51:07:4c:5a:88:26:96:
                    03:2c:e1:68:ef:06:4c:1f:83:ec:99:c4:a1:43:de:
                    76:5c:af:5f:1f:93:3e:80:a2:0e:72:56:1f:c0:58:
                    92:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:16:2D:85:4D:18:18:E4:86:82:16:42:F0:4B:50:85:25:E0:C3:AA
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3132382e302f32302d3230203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:5f:d7:8f:18:ca:fe:98:36:18:76:52:63:e3:1e:1e:4b:ce:
         46:4f:83:c9:27:0b:16:4f:86:6f:2b:08:0d:bd:15:32:c1:96:
         c5:15:36:55:03:cd:45:d2:ad:fe:0b:9e:07:51:ac:c5:4a:5e:
         01:52:c0:14:d1:01:b6:18:c3:c2:50:00:b8:43:d6:e3:93:9a:
         b1:28:27:9e:ff:95:f6:85:7c:84:f8:ff:69:b1:24:fd:14:03:
         09:8b:fc:b3:fd:6b:ff:92:7a:c8:2b:43:22:43:c7:9b:7c:5e:
         06:28:ad:c2:d4:a9:a3:66:20:71:51:df:fa:ad:55:36:59:54:
         e1:18:10:93:c6:93:26:d8:68:23:d4:a4:12:1f:06:3d:d2:84:
         cc:b3:3b:d9:30:c0:d6:62:ca:c9:03:3c:03:27:b8:b7:c9:8e:
         79:f8:9f:0d:33:77:09:f7:1f:d1:16:b1:6f:4b:7e:25:1f:56:
         48:6c:36:09:17:81:92:c2:40:cb:39:d2:63:8f:ce:8a:3e:d7:
         9f:f0:24:5e:f1:b7:c4:3c:5d:f0:42:8a:31:b7:65:3c:0c:16:
         0c:28:ee:ef:fb:45:44:e7:19:94:06:6c:a6:ef:22:51:be:61:
         3a:cc:49:fd:c7:4e:a4:82:e9:ae:de:2e:ea:b6:67:a9:0e:66:
         d5:4f:c9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org