Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3134312e302f32342d3234203d3e203533303631.roa
File:                     3138372e38352e3134312e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          iZJMv3JZNdII93xMUjPExPPAo+Waq03pcX31OThChmg=
Subject key identifier:   B9:26:F7:F2:ED:67:49:73:66:BF:08:93:FB:78:F7:B4:BB:93:E2:F2
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       6217F87B9205320F258C7D41E7894D6125CC1663
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3134312e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:48 +0000
ROA not before:           Thu 06 Apr 2023 19:15:48 +0000
ROA not after:            Thu 04 Apr 2024 19:20:48 +0000
asID:                     53061
IP address blocks:        187.85.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:17:f8:7b:92:05:32:0f:25:8c:7d:41:e7:89:4d:61:25:cc:16:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:48 2023 GMT
            Not After : Apr  4 19:20:48 2024 GMT
        Subject: CN=B926F7F2ED67497366BF0893FB78F7B4BB93E2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7f:ad:a6:56:b8:1c:9d:6a:4a:8f:dc:4d:32:
                    96:c2:29:4a:62:41:45:c6:8a:b7:1d:c1:ea:ff:96:
                    14:31:39:74:d7:55:0e:bd:fe:04:83:03:d9:0e:45:
                    ea:37:01:02:6f:28:e4:29:c4:00:f9:d9:4a:a8:6c:
                    8f:5e:b3:67:01:6e:16:08:52:fe:a7:27:77:b3:57:
                    68:a6:bd:45:5f:8a:ba:5c:2b:1b:d3:27:2f:2f:fc:
                    ba:96:bd:fb:94:95:66:72:00:84:ae:6c:cb:7c:4e:
                    6f:4e:1f:57:d5:09:31:ca:cf:8c:56:bb:79:4d:5d:
                    2f:21:84:a9:99:76:ca:4a:e3:e2:67:ff:c4:a1:5d:
                    80:20:3b:fd:37:52:08:78:ff:8b:3c:f2:d2:6e:f8:
                    08:aa:10:79:f4:1f:d9:d7:2c:51:d7:0f:4e:9f:b9:
                    8f:d1:de:f5:6a:e0:4d:a5:49:5b:e9:d0:93:32:50:
                    95:0b:2c:cb:e6:6a:44:00:6b:c3:11:12:21:78:07:
                    ea:2c:ee:66:19:5a:46:a4:45:65:fa:40:e1:31:dc:
                    b5:9c:31:2c:94:c1:7c:fb:59:73:02:23:fc:7e:c6:
                    28:b3:2e:09:6e:39:4b:d5:b3:72:cd:47:82:7d:05:
                    82:84:f7:05:9c:26:2d:94:47:a6:d6:31:61:f5:c9:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:26:F7:F2:ED:67:49:73:66:BF:08:93:FB:78:F7:B4:BB:93:E2:F2
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3134312e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:51:3a:1e:6e:ef:28:4f:78:23:62:09:cc:8b:4c:02:ae:5c:
         e3:b0:a3:92:06:1a:88:d9:37:77:2e:6f:cf:55:e7:a8:27:1e:
         bd:b6:5a:ea:f7:58:b6:18:09:97:db:c8:ae:ee:55:df:5c:c9:
         08:f7:cc:8e:7f:8b:f5:c0:b9:b6:7a:98:90:16:aa:00:80:0c:
         92:a1:f7:eb:f3:45:02:bf:22:1a:4a:5c:a7:0a:30:2f:b7:03:
         4a:46:a7:53:c4:3d:d8:fc:a2:fd:db:2a:9a:59:65:b4:3f:3c:
         64:ce:9c:f6:49:69:ce:7f:df:0d:62:7d:17:84:63:da:eb:b3:
         78:a1:6e:94:b9:ea:71:f1:e8:77:ae:a4:c5:07:d0:5e:04:8a:
         67:e3:e6:a2:52:71:a7:80:b4:71:c2:8b:95:6c:eb:30:59:c4:
         db:58:ba:df:64:0d:88:7f:2b:51:2c:33:8d:c8:15:bc:01:ba:
         eb:96:eb:42:49:37:2e:4f:91:59:31:c6:cc:e2:77:be:00:36:
         04:b0:20:23:82:c3:ed:d7:be:26:92:2b:26:8f:23:86:7c:38:
         dd:af:23:3a:02:e0:df:db:a2:7d:ee:d9:12:d2:ca:2c:ea:39:
         b1:7b:ac:fa:bf:84:67:be:a5:60:57:98:30:de:10:67:45:8f:
         19:a0:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org