Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3134322e302f32342d3234203d3e203533303631.roa
File:                     3138372e38352e3134322e302f32342d3234203d3e203533303631.roa (raw, json)
Hash identifier:          zwyvqyPqxV+mO9llV4rXsb4RKu4LW1rnRrB9SIPu3Ok=
Subject key identifier:   DF:FA:80:1D:12:B3:64:03:FC:7A:E1:49:5C:ED:E2:3D:76:E3:BA:7D
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       58A5E97FDCC1D1EB7B6171177B7A132428EE23C8
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3134322e302f32342d3234203d3e203533303631.roa
Signing time:             Thu 06 Apr 2023 19:20:47 +0000
ROA not before:           Thu 06 Apr 2023 19:15:47 +0000
ROA not after:            Thu 04 Apr 2024 19:20:47 +0000
asID:                     53061
IP address blocks:        187.85.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a5:e9:7f:dc:c1:d1:eb:7b:61:71:17:7b:7a:13:24:28:ee:23:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: Apr  6 19:15:47 2023 GMT
            Not After : Apr  4 19:20:47 2024 GMT
        Subject: CN=DFFA801D12B36403FC7AE1495CEDE23D76E3BA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:63:35:f3:2d:43:7a:6a:c7:00:31:5c:8b:
                    9b:79:46:1a:50:b2:2c:f0:7a:6c:67:48:c2:50:9b:
                    f4:27:9a:17:d7:dc:c2:68:c1:0c:93:68:cb:2b:ff:
                    fe:8f:02:5e:5e:bc:29:d1:b3:8d:de:3c:f4:27:ab:
                    91:16:1c:56:f6:7e:2d:c5:9d:2e:bd:eb:1f:3a:2b:
                    13:93:29:16:54:cf:0d:17:b3:95:3a:62:86:0e:6d:
                    d1:e2:7f:dc:ac:32:f5:fd:62:4d:d7:67:d4:9d:eb:
                    0f:2b:be:b0:69:4f:56:b3:ad:38:a6:95:61:c4:07:
                    35:a5:6a:2f:38:19:9a:06:14:8a:da:66:95:03:5c:
                    59:6b:05:07:e2:30:c3:5c:d3:f3:5a:9a:aa:30:70:
                    6b:9f:1c:e2:56:6a:6c:82:90:c2:4d:c1:2d:d9:28:
                    79:c7:9d:f5:53:fa:9f:29:7f:90:44:b2:99:3d:c1:
                    2b:66:92:67:25:d5:47:22:60:16:e5:7f:08:2a:11:
                    db:fa:c6:12:0a:47:8a:55:5e:e4:86:25:4e:48:a1:
                    0a:09:73:ed:4b:ea:39:c8:6b:b7:bc:28:6f:fa:e8:
                    fe:34:03:03:bc:d2:39:a0:67:9d:83:9c:fb:c2:20:
                    ee:11:58:5d:34:83:a1:4d:e7:26:f4:da:27:0d:1b:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FA:80:1D:12:B3:64:03:FC:7A:E1:49:5C:ED:E2:3D:76:E3:BA:7D
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/3138372e38352e3134322e302f32342d3234203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:36:5c:3c:46:5c:48:fc:6d:d0:43:99:a2:36:5d:a3:d1:7f:
         c5:22:b4:3e:25:e3:3e:33:04:f2:d9:68:b6:ff:22:79:a6:f8:
         18:3f:3e:48:34:7d:20:24:c3:cd:0e:5d:d9:35:d3:af:c8:1f:
         88:e6:7a:7a:92:e8:32:05:20:2d:7e:ef:ab:8e:37:fe:0a:43:
         8a:1a:4c:66:02:55:7d:60:75:d9:4c:f3:68:f1:09:d4:f7:b9:
         76:fb:d9:fe:df:19:00:63:35:4a:51:5a:db:cb:ba:32:94:18:
         e3:84:8f:06:d3:0a:8d:37:d5:f6:ae:ce:5c:a9:ad:ed:bf:7d:
         59:e8:6e:e5:ca:ef:75:bd:b4:bc:8b:9c:f5:56:ba:ec:de:90:
         2b:db:22:b0:85:62:91:c0:13:63:e2:e0:a2:2c:ed:e1:9b:c7:
         27:2c:49:7f:13:f6:26:b5:7d:27:cb:65:e0:dd:24:43:53:5e:
         0b:cd:47:51:93:e5:66:7b:6e:20:4c:6e:59:c0:7b:aa:a0:e5:
         91:9e:2c:f1:b2:5c:1d:34:69:17:4f:2f:f5:92:de:b1:3c:ef:
         39:09:6e:a2:36:04:a2:29:82:dd:7b:00:79:b0:4c:91:84:55:
         1e:3f:93:48:78:ac:24:83:90:dc:83:3c:e8:8c:20:1f:e0:b8:
         b9:5c:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org