Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133372e302f32342d3234203d3e203533303631.roa
File:                     3138372e38352e3133372e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          AOUDsyOTab1PcgXpeKOrDAg2jVokS6KhL8Q5aMZ6PzM=
Subject key identifier:   20:9F:66:F2:3F:C9:81:9C:9D:A2:63:26:AD:76:03:32:C0:EE:9E:2A
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       2B27298976E0A6CD76C26232EB1E3D9C445C283D
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133372e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:45 +0000
ROA not before:           Thu 06 Apr 2023 19:15:45 +0000
ROA not after:            Thu 04 Apr 2024 19:20:45 +0000
asID:                     53061
IP address blocks:        187.85.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:27:29:89:76:e0:a6:cd:76:c2:62:32:eb:1e:3d:9c:44:5c:28:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:45 2023 GMT
            Not After : Apr  4 19:20:45 2024 GMT
        Subject: CN=209F66F23FC9819C9DA26326AD760332C0EE9E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ca:2c:57:2c:0f:f9:e0:8f:43:08:78:e7:f7:
                    19:21:1a:e7:49:bc:e3:45:1e:8e:1f:c4:a4:d3:9f:
                    3d:b9:e2:b0:f1:1a:8e:38:7b:c1:50:3f:b0:30:af:
                    64:04:33:b6:3b:d0:bf:30:58:cf:fa:c3:a6:f2:98:
                    b6:12:0e:09:63:a1:38:8e:2c:51:16:db:40:a0:e6:
                    57:6f:8c:14:ac:0a:e2:8d:ff:04:18:81:b4:ee:8a:
                    f6:f8:00:ed:71:57:91:2a:6f:b9:13:4b:7b:14:31:
                    86:cd:ac:93:a3:85:e7:0b:70:22:36:83:42:6e:9a:
                    39:58:9b:f6:69:ee:9b:76:ba:00:67:48:12:fd:e8:
                    71:ab:65:d0:37:fa:95:e6:ec:19:94:7f:8d:2b:ce:
                    30:72:42:61:58:26:2b:1e:8f:49:06:db:8e:31:ae:
                    5a:ee:b9:37:8f:0e:b0:5f:59:7b:62:c4:d2:64:3f:
                    2f:2b:88:bf:ab:f1:2b:d4:b0:35:4d:e4:7b:3d:a0:
                    06:a5:0d:f1:04:e2:75:3e:77:3a:de:f3:02:00:7b:
                    a1:0f:5c:d7:1b:54:71:9d:1f:bc:df:be:34:7f:a7:
                    71:2e:ed:4b:a5:1d:52:84:a3:9c:a9:3b:e4:1b:82:
                    fb:ce:96:d0:93:ff:30:8d:d0:4b:0b:76:65:d0:4b:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9F:66:F2:3F:C9:81:9C:9D:A2:63:26:AD:76:03:32:C0:EE:9E:2A
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133372e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:1b:b3:a9:0e:3c:ad:fc:2a:50:01:86:18:10:81:a1:8e:97:
         c9:09:5d:69:40:05:15:02:34:6f:db:ca:39:c1:16:c9:5b:d8:
         56:5b:bf:c3:26:70:26:d3:ff:f0:98:65:76:83:e4:50:82:76:
         3c:a6:57:b5:07:46:1e:21:b3:04:76:78:e3:c5:99:d6:8b:a9:
         9b:e9:ff:8a:52:15:67:c6:7c:a6:fa:dc:13:05:65:12:d1:83:
         c8:8b:0b:c6:b4:b8:76:6f:86:10:58:e0:65:2a:1b:a7:39:41:
         2b:ec:b7:90:36:05:d1:14:f0:ad:80:a9:d2:11:61:46:f1:4c:
         3e:e1:7a:d2:d0:a7:24:f0:4a:c3:af:14:6c:d4:c6:c0:04:a8:
         db:68:a2:6b:f6:39:29:0a:27:67:b4:80:c9:b9:5c:cd:86:6d:
         9c:13:06:c9:3b:28:a9:89:27:d0:a9:84:32:d8:22:ae:63:6c:
         64:4b:36:23:99:f4:8a:a1:c4:a8:00:8e:f9:b2:73:e1:45:11:
         49:35:2f:25:ec:db:6c:63:5b:3b:e3:21:db:7a:44:15:d4:0b:
         d3:c7:b7:a4:82:67:d8:d4:db:be:8c:74:9a:6f:5f:f2:b9:1b:
         4f:08:5f:a5:f4:63:00:e8:ed:16:d5:9d:0a:37:40:3a:17:8d:
         45:de:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org