Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133332e302f32342d3234203d3e203533303631.roa
File:                     3138372e38352e3133332e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          GYXz+wnOJtrob0WTrFgSksWjmJlawIKF/QleGJsVPQY=
Subject key identifier:   14:23:41:FD:10:51:C3:98:6F:B5:6D:7F:E4:78:B8:50:C1:A1:E0:BB
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       26C517813D7B12A9B0DFFFE2B889CDBC59292B38
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133332e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:47 +0000
ROA not before:           Thu 06 Apr 2023 19:15:47 +0000
ROA not after:            Thu 04 Apr 2024 19:20:47 +0000
asID:                     53061
IP address blocks:        187.85.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c5:17:81:3d:7b:12:a9:b0:df:ff:e2:b8:89:cd:bc:59:29:2b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:47 2023 GMT
            Not After : Apr  4 19:20:47 2024 GMT
        Subject: CN=142341FD1051C3986FB56D7FE478B850C1A1E0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:b0:b8:b1:09:9d:ff:f5:45:d8:4d:fb:22:
                    b7:86:16:2a:b6:35:d4:fa:33:04:fc:b8:0a:e5:62:
                    13:35:fe:2e:30:3e:02:c0:34:95:3b:f1:61:de:f9:
                    82:4b:78:dc:ca:93:77:b5:16:64:9e:a5:49:f3:21:
                    36:24:b7:45:d5:ec:bc:37:e2:eb:d6:29:84:0e:1f:
                    03:3c:33:15:7b:98:e5:15:a5:39:04:f0:da:56:26:
                    db:e3:ea:23:9f:15:9c:74:14:13:de:db:f0:c7:3f:
                    96:1a:0f:b9:c4:a5:4f:d9:c6:0c:66:6a:7b:2d:f3:
                    5d:88:3c:78:34:59:95:45:11:5e:6a:a0:14:57:f9:
                    22:f6:ed:15:52:9f:2c:be:51:ca:28:71:7e:11:c4:
                    f5:b0:fc:55:d6:38:6d:20:c1:5e:7b:9b:cc:f2:5b:
                    77:45:2f:02:52:e4:9b:f8:16:46:34:08:ad:f1:d3:
                    0a:49:3b:62:5b:94:03:dc:7b:e3:80:e5:9b:1f:23:
                    7a:eb:c7:99:ba:5d:83:aa:61:c2:63:c7:74:46:7f:
                    c9:67:1b:a8:c2:c1:8d:05:d6:d5:16:1c:9f:68:2f:
                    17:5d:e9:4b:e7:e7:2a:3e:75:f5:51:3c:ee:f6:b6:
                    90:bc:a3:07:62:9c:1e:46:ae:cf:58:93:bd:2a:93:
                    09:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:23:41:FD:10:51:C3:98:6F:B5:6D:7F:E4:78:B8:50:C1:A1:E0:BB
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133332e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:67:0c:fd:a0:78:48:37:8f:75:39:95:8e:f4:b1:2a:67:81:
         47:81:29:b1:13:3e:2e:4f:2b:66:bd:89:6f:be:dd:73:63:df:
         ec:88:51:ba:e3:c1:b0:82:ff:b9:1c:9f:f9:ed:90:bf:e4:ae:
         63:81:6b:87:ad:67:6f:19:75:80:5c:e1:36:3f:93:d1:b9:10:
         6a:13:ae:b4:0e:45:d9:e5:d1:fc:e6:0c:4b:74:0d:5c:16:ea:
         e9:67:f9:56:ba:7c:0d:34:96:bd:9a:31:f1:3e:85:3b:dd:b3:
         85:3d:c5:6e:48:f2:79:ad:46:e8:46:d5:04:95:4c:d4:18:0d:
         8d:23:99:e6:60:35:d5:d9:b7:c1:a1:66:26:1a:b4:41:6e:74:
         80:2d:0d:cf:5b:71:fa:33:59:e5:dd:92:0b:1e:f8:be:b6:76:
         3e:58:eb:e7:51:ca:5a:f1:ac:0b:b6:c3:1f:32:28:54:81:02:
         ed:9d:bb:b6:6c:02:93:a7:f9:c7:9c:f8:29:e8:7b:0c:8b:e4:
         65:67:72:a4:99:7f:81:78:b3:93:b2:a7:79:16:a1:85:b4:47:
         88:d0:52:fa:0e:25:3b:96:75:33:f7:11:98:95:df:a4:6c:40:
         67:3b:23:3d:45:e8:48:03:15:52:26:34:8b:86:cf:4f:da:7e:
         ec:e8:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org