Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133392e302f32342d3234203d3e203533303631.roa
File:                     3138372e38352e3133392e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          dPVGuT0s+cIreVA/DVM8D7ARgaNHW67313SENMZn1co=
Subject key identifier:   39:6B:41:79:30:35:09:E5:D8:59:F9:0A:0A:01:3D:35:83:D4:0E:5C
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       6E3D0C3514B54C11096AE9B5885410D1F4623D0C
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133392e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:48 +0000
ROA not before:           Thu 06 Apr 2023 19:15:48 +0000
ROA not after:            Thu 04 Apr 2024 19:20:48 +0000
asID:                     53061
IP address blocks:        187.85.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3d:0c:35:14:b5:4c:11:09:6a:e9:b5:88:54:10:d1:f4:62:3d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:48 2023 GMT
            Not After : Apr  4 19:20:48 2024 GMT
        Subject: CN=396B4179303509E5D859F90A0A013D3583D40E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dd:6f:33:19:a5:3e:18:c2:a9:b1:2a:39:a0:
                    ce:2e:75:73:0d:c6:98:e8:a3:e3:9a:f9:ba:67:c2:
                    9e:b8:01:c4:96:38:2f:2c:8e:16:79:63:d1:f0:5e:
                    88:9e:59:cd:2e:5b:9a:52:07:b6:fe:b3:f2:e8:97:
                    04:19:ab:19:dd:63:66:f3:7c:39:22:d6:64:fb:88:
                    46:9b:a3:7d:5f:10:07:8c:10:17:69:74:fd:b4:42:
                    d4:c2:90:4a:72:48:01:72:0b:db:30:c5:45:d0:38:
                    1e:c8:85:14:10:75:ba:92:08:c9:ca:b4:64:f9:47:
                    28:4b:ce:19:f9:03:9f:31:25:7a:e0:4a:29:ab:67:
                    87:3b:e6:aa:e7:c5:c5:51:b0:6d:1a:6e:ce:0a:34:
                    94:49:0d:2d:b5:95:fc:1a:b7:10:6f:71:66:9c:b8:
                    35:c3:a6:07:83:88:b4:ec:d6:19:f6:7a:65:2a:c1:
                    c5:3a:f8:88:59:6c:9d:90:73:43:7c:e4:df:73:9e:
                    ba:29:83:47:8f:d1:cb:07:84:ce:30:d6:1b:8f:93:
                    1d:9c:bc:d2:16:09:a0:c4:87:d9:b4:b6:e6:a0:fb:
                    db:fd:c4:1a:75:43:99:eb:e9:ee:f7:fd:28:bd:44:
                    0b:4b:9d:a6:7e:ef:e7:a9:2f:ed:a1:4c:48:12:ba:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6B:41:79:30:35:09:E5:D8:59:F9:0A:0A:01:3D:35:83:D4:0E:5C
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3133392e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ed:db:c1:c5:4f:13:dd:e3:89:7a:12:f5:0a:7e:8d:80:37:
         92:39:e5:fd:51:8f:38:15:5c:11:56:7e:3f:a3:cb:18:86:63:
         2b:bb:c6:90:b2:9f:fe:01:1f:29:9a:ae:9d:0c:b0:24:91:8c:
         41:c1:6b:59:b6:6b:d4:c1:d4:f3:21:2a:a7:30:36:4f:3e:b7:
         22:62:53:cf:e5:7d:15:b6:57:fb:14:ec:2b:22:35:6e:6a:f4:
         9d:20:e1:26:bb:45:59:09:90:d9:1f:13:59:1d:9c:68:90:d6:
         58:21:89:f9:97:03:75:81:20:58:99:15:75:f9:9e:24:26:68:
         17:06:fd:8e:b2:88:cb:04:86:f8:e8:0d:09:4c:e2:1e:b4:07:
         50:6e:db:a0:9e:bc:53:18:00:1b:56:88:d3:32:d9:57:02:00:
         28:b9:79:e2:0b:28:6f:21:3f:32:da:4e:6a:5b:4a:59:40:99:
         d2:2c:31:c0:4f:af:99:d9:d6:15:b4:48:5b:f1:d7:50:8f:4a:
         c0:da:a6:f3:70:5d:d0:5a:9d:03:91:12:c9:ac:f9:80:e2:65:
         66:b3:93:c1:a2:8a:77:9c:fc:89:16:c9:8c:ed:4d:9f:f7:88:
         d7:e1:92:e7:ce:47:72:b4:28:da:a7:e2:a5:72:c6:d3:f9:8b:
         8b:7d:67:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org