Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3134302e302f32342d3234203d3e203533303631.roa
File:                     3138372e38352e3134302e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          4/MpHi+ybspADggnCb+nt99kCe2DZi9DM4Dy3nKWYOs=
Subject key identifier:   65:54:EC:5C:42:0B:0E:2F:D7:9B:31:C6:8E:6E:C3:D3:78:E9:C5:F8
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       3B59A4C757308AFE0BE1360E17C342EEF95FC528
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3134302e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:46 +0000
ROA not before:           Thu 06 Apr 2023 19:15:46 +0000
ROA not after:            Thu 04 Apr 2024 19:20:46 +0000
asID:                     53061
IP address blocks:        187.85.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:59:a4:c7:57:30:8a:fe:0b:e1:36:0e:17:c3:42:ee:f9:5f:c5:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:46 2023 GMT
            Not After : Apr  4 19:20:46 2024 GMT
        Subject: CN=6554EC5C420B0E2FD79B31C68E6EC3D378E9C5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:50:b5:36:45:dd:ef:19:1d:71:a7:15:be:
                    d6:47:04:50:b9:f1:16:ce:74:48:67:a6:70:cf:a0:
                    a5:84:28:59:19:7e:a4:3f:2e:70:44:58:ab:02:a9:
                    b5:b1:9e:e0:68:2d:80:06:71:fe:36:e1:a4:02:5c:
                    95:4c:f7:7a:03:da:0c:15:25:48:29:0e:51:07:fb:
                    3b:a4:2d:3c:11:11:93:4c:ef:70:71:d8:a8:72:c5:
                    39:1e:97:eb:98:57:f1:65:e8:68:90:da:ba:9e:f4:
                    e0:2e:6a:63:f2:7e:fe:a5:4c:67:7f:7b:b3:d6:36:
                    5b:3a:07:0d:12:39:04:25:cb:a9:7a:ad:1b:97:5a:
                    88:61:7e:9e:69:0e:05:4d:63:e6:78:d0:db:b5:60:
                    72:35:2d:fa:e8:b6:8b:da:9b:fb:43:d2:f0:74:d8:
                    90:9b:42:f6:56:8a:81:e5:74:12:79:3c:60:16:92:
                    6f:33:50:24:12:be:43:21:13:ce:ea:08:da:b4:56:
                    89:95:44:81:df:22:ed:80:ca:96:99:f9:a4:48:2b:
                    62:f6:f0:ce:43:c3:3d:c3:f0:25:59:57:ad:77:5a:
                    5c:26:8e:2e:c7:0f:b3:00:47:37:d5:be:a3:ea:13:
                    3d:f3:0b:d6:b9:b9:21:12:04:9d:f8:54:a0:0b:39:
                    ed:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:54:EC:5C:42:0B:0E:2F:D7:9B:31:C6:8E:6E:C3:D3:78:E9:C5:F8
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3134302e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:62:e1:b4:0b:39:75:5f:94:56:31:32:de:6c:8e:f8:97:f2:
         1a:3b:46:0d:83:e2:2a:c0:2a:9e:de:56:ee:b8:3b:42:8e:d3:
         28:d4:54:82:e4:cb:b0:7a:67:97:6f:35:02:66:e7:08:ac:62:
         64:6f:a4:1a:87:88:49:ec:cd:3b:70:1b:e7:ff:1c:a9:11:79:
         f7:07:62:7a:4c:1d:1f:a8:4f:41:10:9c:d1:35:e4:47:d6:2f:
         de:9e:45:ee:5f:ba:f2:40:6b:e6:a0:eb:fd:3c:4e:cc:04:86:
         1d:dd:9e:69:98:b5:54:cb:8c:43:4c:22:bb:2e:d9:29:b4:ad:
         ca:fd:41:c8:d0:52:46:ef:d4:13:62:cd:3c:1a:7c:a8:b3:60:
         25:75:bf:0f:0d:8f:99:c2:55:7e:c5:08:c1:d2:fc:38:2c:1c:
         9a:51:54:9b:77:83:e0:3b:09:91:4d:28:1c:51:cc:87:db:e7:
         9a:0f:8f:85:f4:46:2a:86:72:19:78:4c:7d:f1:41:58:60:75:
         f9:34:48:c3:79:85:5f:7d:bc:85:bb:ce:4c:a6:8e:ec:26:b4:
         b2:36:6c:46:3e:50:05:5f:7e:a9:db:7a:5c:45:ed:1c:24:e3:
         18:3d:57:19:21:51:c9:4d:00:b9:a6:90:93:c0:33:4d:79:44:
         eb:81:cf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org