Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133322e302f32342d3234203d3e203533303631.roa
File:                     3138372e38352e3133322e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          +NNZep227muB7oVlu5YIGSK4vFGSsXYdZi6R6w+KsJ0=
Subject key identifier:   53:2D:7E:71:89:A5:F0:D6:24:22:B4:25:21:57:AA:2E:21:45:D6:BD
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       51CF97AC573FB9B4A9C7752F6B40BB9AB71F7567
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133322e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:45 +0000
ROA not before:           Thu 06 Apr 2023 19:15:45 +0000
ROA not after:            Thu 04 Apr 2024 19:20:45 +0000
asID:                     53061
IP address blocks:        187.85.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cf:97:ac:57:3f:b9:b4:a9:c7:75:2f:6b:40:bb:9a:b7:1f:75:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:45 2023 GMT
            Not After : Apr  4 19:20:45 2024 GMT
        Subject: CN=532D7E7189A5F0D62422B4252157AA2E2145D6BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:1f:fe:7a:f5:32:f1:aa:16:70:f9:94:03:
                    69:6e:1c:cd:ff:62:b1:3d:54:67:8b:05:8c:b3:63:
                    31:9b:45:b5:61:3b:68:b0:67:7a:bd:44:3a:c2:30:
                    00:07:12:8f:d1:3d:08:5c:44:b5:f5:7f:be:0c:08:
                    f5:8f:19:66:dc:e7:a4:05:d2:fc:18:55:4b:a5:21:
                    19:38:d8:27:17:23:40:22:21:af:da:a0:d4:5a:99:
                    61:4d:76:a3:e6:e8:99:66:5b:18:1e:5f:bb:05:bd:
                    fd:68:30:cf:58:aa:82:05:33:a1:09:f5:ba:3e:a6:
                    cb:e8:0c:98:83:e6:04:d1:02:93:01:90:a2:8d:fe:
                    73:05:d5:c4:cd:68:21:b0:6b:fa:15:57:4f:84:4a:
                    d4:00:a0:f9:35:ec:1e:18:77:3d:97:72:14:19:95:
                    7f:57:bd:ec:05:50:44:96:3b:1f:50:be:db:f9:d7:
                    7b:12:f1:df:02:be:d8:f2:bc:2a:33:7b:2d:c7:5a:
                    14:54:fd:c9:f3:ad:1c:4a:10:c9:b9:9e:08:af:24:
                    f5:80:ec:d3:49:90:0e:27:b5:93:a3:07:26:f9:2a:
                    03:39:9e:a6:2d:6a:2b:bf:7b:ee:15:2a:3b:91:65:
                    e2:99:df:74:52:47:00:38:31:b9:01:8b:f3:0d:55:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2D:7E:71:89:A5:F0:D6:24:22:B4:25:21:57:AA:2E:21:45:D6:BD
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133322e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d2:d5:25:be:06:88:a0:e4:23:5a:27:ee:e2:5d:82:36:e0:
         6e:9f:7e:e2:c7:f4:b6:72:37:32:cd:ad:4b:b3:4a:60:0c:23:
         cd:5b:b8:c9:a8:f9:c7:26:7c:57:b9:fc:98:d3:fd:6e:56:0a:
         d6:b7:3d:4e:1c:c8:60:56:82:40:19:65:82:68:f0:07:5a:75:
         54:50:f7:ae:0d:f0:46:7f:ba:01:32:72:8c:c9:6f:c5:fa:5e:
         c9:e9:87:62:83:65:0c:9f:ff:00:fd:11:7f:a6:e6:a9:ce:f8:
         3d:c5:6b:97:da:8f:09:47:09:32:14:53:f5:6c:1b:22:46:8f:
         4e:f5:6e:97:1a:61:ce:aa:31:12:4a:55:b7:95:05:0e:7a:1e:
         86:01:96:27:f3:28:76:d1:9c:d2:71:4b:72:c4:cb:ec:95:da:
         40:56:a6:d5:47:2e:3a:ee:32:0a:37:2a:09:8b:0e:7a:47:fb:
         51:9a:47:f8:e6:66:f8:e3:66:5c:84:aa:81:99:1f:9a:76:19:
         e6:d3:65:e8:dd:c2:1d:6d:c5:07:99:1d:e0:6a:bb:9c:e1:d3:
         a7:95:98:fb:7a:b0:df:fd:7e:81:22:59:87:2b:7d:00:90:f3:
         18:26:5b:0b:b9:e8:01:22:58:1d:e7:fe:31:80:6e:2d:19:31:
         6c:1b:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org