Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133382e302f32342d3234203d3e203533303631.roa
File:                     3138372e38352e3133382e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          uDdUO8OmhvNzw4UN900uWIOYfTc+DWyAAw0vG6ytNXs=
Subject key identifier:   7F:DB:35:85:17:C4:73:2E:6D:2B:3C:CF:0C:42:12:59:CC:5F:38:44
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       3B4F84D541940CE6DF8A27F30EAC7395A6C97533
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133382e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:47 +0000
ROA not before:           Thu 06 Apr 2023 19:15:47 +0000
ROA not after:            Thu 04 Apr 2024 19:20:47 +0000
asID:                     53061
IP address blocks:        187.85.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4f:84:d5:41:94:0c:e6:df:8a:27:f3:0e:ac:73:95:a6:c9:75:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:47 2023 GMT
            Not After : Apr  4 19:20:47 2024 GMT
        Subject: CN=7FDB358517C4732E6D2B3CCF0C421259CC5F3844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:9e:64:4c:b4:92:cc:69:b2:19:3a:1b:16:
                    da:34:ac:3b:1f:8c:1b:ff:3a:92:78:ec:ea:5f:5c:
                    2e:39:c1:2a:a7:0e:a3:24:41:69:1a:1d:63:eb:1a:
                    b0:62:d4:0f:7b:1b:b5:28:31:35:c8:f7:13:19:41:
                    23:02:a7:53:e5:92:69:43:5e:56:38:a3:58:a0:b0:
                    ee:74:c9:1c:ed:05:42:b9:50:d1:e7:b3:70:25:ac:
                    ae:2a:83:e8:9a:e0:66:56:e5:e6:57:1c:31:cf:db:
                    bb:56:96:3e:e0:8d:d5:b1:97:53:f6:ae:a3:04:6a:
                    96:46:6e:46:8c:9b:8f:ed:ee:dc:de:9e:73:23:44:
                    80:58:a7:2a:2a:d2:dc:87:ee:d4:a8:4d:f2:88:a5:
                    ca:a1:38:00:2f:e0:48:64:56:f9:a5:c3:6d:b0:9c:
                    bf:72:b4:4b:f1:4f:6d:59:08:76:96:01:0e:42:83:
                    88:9e:44:d8:a8:1e:31:2b:09:33:7b:0a:83:7e:7a:
                    47:e4:00:4f:a8:dd:ac:dd:76:c5:61:21:c7:fe:23:
                    3d:46:43:b1:0a:cd:17:01:64:b9:bd:fc:3d:bd:ce:
                    71:ff:c5:6f:1c:2f:18:92:95:ce:94:3b:4a:00:b3:
                    38:d3:bc:34:47:35:68:94:db:84:ae:f8:fd:de:5c:
                    c4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DB:35:85:17:C4:73:2E:6D:2B:3C:CF:0C:42:12:59:CC:5F:38:44
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133382e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:5d:cd:6c:82:f7:80:f9:33:3d:2b:a3:4b:86:b9:86:2e:a2:
         24:76:89:f2:42:6f:1a:d4:80:29:81:30:ff:18:be:19:71:f7:
         0d:52:e8:1b:76:ce:66:0b:61:2c:80:55:c7:b4:c2:98:e9:d1:
         ca:6a:23:7a:f1:ed:e8:bf:ef:84:fc:0b:31:76:79:2c:37:14:
         f6:87:32:30:d1:1d:09:c2:62:a6:a8:6f:d6:bd:d4:d6:fb:0f:
         75:04:86:4f:6a:e5:3f:95:1b:ca:2e:8f:1d:89:5f:44:69:da:
         1f:1d:23:35:fc:71:b9:d9:4a:29:95:47:8c:c6:7d:31:7c:10:
         c3:70:43:ee:b4:62:57:9f:84:a2:ec:6f:70:0e:7f:ba:2a:56:
         37:d1:f5:57:b3:d4:96:6b:66:de:7f:ad:eb:b2:67:5d:b8:5e:
         e0:4d:a9:a4:ae:8e:54:c6:9b:04:bc:a6:35:b8:0e:70:f7:66:
         9b:41:56:9b:45:3a:ac:35:b7:4d:cb:37:0f:87:cc:a5:0f:8c:
         05:dc:b0:b8:55:76:25:42:c5:24:db:e3:85:64:be:43:38:0f:
         4e:1e:ad:c8:84:9a:b2:47:8d:74:e3:23:13:bf:55:ee:88:18:
         23:00:9d:30:0c:39:16:04:c7:b6:35:c8:b4:f3:41:f4:94:bc:
         cf:c0:a0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org