Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133342e302f32342d3234203d3e203533303631.roa
File:                     3138372e38352e3133342e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          Setseh+38YpLoqMfMmkUxdkD4rH0/xghlki6yWoXnV8=
Subject key identifier:   1D:A5:9F:79:40:BA:D8:52:26:73:66:FD:24:AD:77:41:99:64:4D:9E
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       0CEEEF14F32FD4A7E887C584A7EA5D10C8DD05C8
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133342e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:44 +0000
ROA not before:           Thu 06 Apr 2023 19:15:44 +0000
ROA not after:            Thu 04 Apr 2024 19:20:44 +0000
asID:                     53061
IP address blocks:        187.85.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ee:ef:14:f3:2f:d4:a7:e8:87:c5:84:a7:ea:5d:10:c8:dd:05:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:44 2023 GMT
            Not After : Apr  4 19:20:44 2024 GMT
        Subject: CN=1DA59F7940BAD852267366FD24AD774199644D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:6a:8f:92:0d:23:c8:6d:f6:bd:4e:b3:b9:
                    ee:a8:3d:6e:78:2e:36:d2:07:67:c1:51:77:b2:ee:
                    a0:f4:e9:70:97:fe:ea:c5:63:64:95:98:40:7d:83:
                    7e:9b:ae:38:06:dc:d2:1c:79:32:cb:68:6c:52:c8:
                    69:8a:a2:03:74:e3:70:e6:35:87:8a:dd:d1:03:88:
                    98:66:29:db:f3:fe:6e:da:da:53:eb:fb:64:89:01:
                    fa:55:a1:31:6a:07:7b:74:f2:cd:47:e7:05:4f:80:
                    d0:49:eb:5e:96:88:43:2e:86:21:c6:59:6b:52:89:
                    f1:a8:69:5a:57:32:0c:76:3f:69:42:f8:01:93:3c:
                    0c:46:43:78:b5:e2:3e:5e:3c:53:71:09:37:84:98:
                    ac:c2:5c:39:d4:dd:99:8d:4d:56:51:f9:e3:01:25:
                    1c:5d:b8:a9:5c:74:96:f1:8f:bc:71:e5:6f:ff:97:
                    8a:f1:62:53:92:01:a5:3c:57:5d:3e:96:c6:54:e5:
                    c3:bb:03:b0:1b:97:00:52:ed:07:06:b6:c3:78:9d:
                    2a:4a:43:43:d6:ad:c0:d5:59:ae:18:9f:20:5a:46:
                    70:f3:91:b1:74:30:b1:3e:64:fc:64:41:65:4d:a4:
                    96:48:64:46:14:74:ac:b1:4a:b3:4b:5b:f3:bf:f4:
                    93:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A5:9F:79:40:BA:D8:52:26:73:66:FD:24:AD:77:41:99:64:4D:9E
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133342e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:47:1a:88:47:fa:7f:d2:21:67:9b:0b:8a:0f:8d:f9:1b:19:
         86:9e:ff:10:7b:bb:3f:13:1b:b7:47:59:ac:20:02:1b:2f:45:
         df:c5:0d:ae:07:36:78:85:e8:0f:35:12:ab:5f:0f:21:bf:88:
         0f:bd:7e:1b:2e:86:f8:24:2b:98:ea:6b:4d:63:65:ab:44:18:
         c2:06:d4:25:dd:e9:4c:e9:2c:38:5a:cd:a5:67:fb:d8:a3:0c:
         2d:79:79:af:bf:e2:60:b6:87:08:9a:32:5e:42:3f:fa:a8:d6:
         c0:bf:7b:e7:60:f3:a4:28:c0:49:df:7f:ad:a4:cb:a4:37:f4:
         40:83:e9:76:7f:61:d0:b1:e5:eb:44:56:96:c1:7e:1a:25:9e:
         5a:18:6b:68:c8:fe:b8:d8:aa:9e:55:64:e6:5d:00:3a:1d:56:
         ab:ea:48:1b:2b:12:7b:59:1a:29:31:c1:0e:4e:4f:81:2c:48:
         ce:5f:27:73:47:a2:a7:b8:6a:30:8d:0a:6d:5f:03:f7:e7:d2:
         bd:8c:03:e0:0c:eb:78:7e:df:cc:bd:aa:d1:87:74:5e:e5:0b:
         a9:9e:03:0b:43:80:97:89:37:ee:11:fc:dd:00:fa:d9:8e:87:
         89:9b:2b:53:af:69:bd:0a:e2:36:1b:77:b7:4c:d4:99:51:7b:
         7e:38:5c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org