Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133342e302f32332d3233203d3e203533303631.roa
File:                     3138372e38352e3133342e302f32332d3233203d3e203533303631.roa (raw, json)
Hash identifier:          gvIARfbtlVxyWgT/atTOQXFvBn4Mbxe7wwMVwOWT6eU=
Subject key identifier:   F3:8C:F0:C3:18:6D:A3:FC:C7:6B:58:D8:9D:61:DA:01:8C:20:C3:42
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       15980BEF2D59374BF7C88D64E3B98E7E4E5AE23B
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133342e302f32332d3233203d3e203533303631.roa
Signing time:             Thu 05 May 2022 18:45:55 +0000
ROA not before:           Thu 05 May 2022 18:40:55 +0000
ROA not after:            Thu 04 May 2023 18:45:55 +0000
asID:                     53061
IP address blocks:        187.85.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:98:0b:ef:2d:59:37:4b:f7:c8:8d:64:e3:b9:8e:7e:4e:5a:e2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: May  5 18:40:55 2022 GMT
            Not After : May  4 18:45:55 2023 GMT
        Subject: CN=F38CF0C3186DA3FCC76B58D89D61DA018C20C342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:56:ba:7c:a5:62:08:36:85:8b:ee:81:bb:
                    73:05:15:45:81:7a:66:d3:0b:ce:a4:bc:28:87:61:
                    30:42:79:b6:14:b1:e4:e9:53:cc:17:7c:3f:36:f9:
                    3f:f8:95:36:77:98:0e:86:9d:31:e3:00:af:a4:11:
                    c8:41:b0:80:0e:65:3b:96:33:f3:bf:8c:e9:2c:35:
                    45:45:50:31:62:09:3f:68:64:f8:81:49:45:65:4b:
                    b7:e5:90:d6:54:50:68:6e:83:65:94:56:3d:d8:07:
                    16:a8:14:c2:5a:1e:f4:9d:61:eb:c7:7f:c4:3e:c4:
                    b0:f3:c2:6f:8e:3c:27:d5:5a:4d:5b:de:ae:10:cb:
                    60:f5:78:10:f3:f7:2c:d6:eb:37:c6:f3:55:d2:47:
                    14:71:e0:6f:d4:5b:12:2c:30:9a:6c:e1:49:21:f3:
                    da:4e:80:cf:87:c7:da:77:ec:78:5e:cb:47:31:93:
                    0b:fc:51:e2:53:c0:fe:10:d3:ad:25:c5:7d:22:6a:
                    f6:ff:25:cb:c9:b5:48:7b:2d:5f:ab:52:0f:20:a6:
                    c2:2c:e0:ca:bd:b2:9a:53:50:34:b1:37:cf:80:53:
                    e5:69:97:bf:87:be:f5:e6:9a:ad:13:e4:e2:ae:a0:
                    b6:2f:63:9c:e8:83:e5:fc:a5:3e:d5:e4:a8:02:7d:
                    97:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8C:F0:C3:18:6D:A3:FC:C7:6B:58:D8:9D:61:DA:01:8C:20:C3:42
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133342e302f32332d3233203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:f0:c9:12:e9:f2:d7:1a:83:d8:1c:78:40:a4:99:ea:42:55:
         fd:3b:b2:e1:b6:df:8f:fd:94:90:0a:57:c0:16:17:a0:3b:6b:
         f0:6d:f2:cb:10:ee:99:30:73:5c:d8:8c:db:10:d5:a9:46:80:
         a2:d4:32:47:38:c4:20:b3:fb:9a:07:10:2f:ba:24:06:5e:b6:
         c6:10:0f:f7:71:f5:64:a0:fa:57:fe:cc:2f:e8:7e:ec:1b:e9:
         6a:f1:85:34:36:29:2a:da:75:7c:03:4b:9e:0d:14:5a:78:39:
         b6:51:54:8b:c3:05:f0:3c:ff:ff:b0:8d:6a:df:90:5e:1a:19:
         04:b8:ff:71:78:37:b9:67:0a:9b:c2:7c:3e:66:ec:1c:de:d8:
         8d:a5:65:ac:87:53:70:2f:a3:45:33:cf:52:e1:28:9e:77:9b:
         8b:7c:a3:3e:37:52:22:3b:53:e7:1a:00:1c:85:60:b9:e4:13:
         55:c1:33:6f:42:fb:60:26:ad:b8:2c:90:ff:7f:b6:f7:00:98:
         12:4c:b7:df:c9:51:fe:43:4b:50:f4:48:f1:79:ba:08:bb:ad:
         dc:99:f3:4a:25:d3:bd:36:e4:37:b2:a6:aa:0a:ef:27:23:e3:
         0a:1c:da:77:1c:66:99:ed:78:b3:9c:80:40:6b:65:b0:23:47:
         be:27:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org