Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3130392e302f32342d3234203d3e203533313036.roa
File:                     3138372e3130382e3130392e302f32342d3234203d3e203533313036.roa (raw, json)
Hash identifier:          3FNaajrmBalVXes+g02KM6BNC3Lw0rCU7qTII7TjoqU=
Subject key identifier:   24:E6:79:30:D0:85:D0:59:11:84:E2:C2:27:F1:60:FD:9A:09:07:93
Certificate issuer:       /CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
Certificate serial:       25868E89A353DB05B53E38F3623BD3E2DDE59638
Authority key identifier: DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3130392e302f32342d3234203d3e203533313036.roa
Signing time:             Wed 05 Jan 2022 15:53:08 +0000
ROA not before:           Wed 05 Jan 2022 15:48:08 +0000
ROA not after:            Wed 04 Jan 2023 15:53:08 +0000
asID:                     53106
IP address blocks:        187.108.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:86:8e:89:a3:53:db:05:b5:3e:38:f3:62:3b:d3:e2:dd:e5:96:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
        Validity
            Not Before: Jan  5 15:48:08 2022 GMT
            Not After : Jan  4 15:53:08 2023 GMT
        Subject: CN=24E67930D085D0591184E2C227F160FD9A090793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:55:77:3c:ef:9d:f6:ce:24:45:fd:49:5b:
                    1d:f4:2b:c2:4a:5b:07:d8:fe:b5:24:9b:73:ee:7c:
                    93:ec:92:0b:f2:f5:31:f8:c8:a0:d6:82:05:98:3c:
                    93:a0:29:c7:ea:3d:c9:86:9c:6f:6e:1c:ea:7e:b8:
                    61:55:81:2d:ac:5b:72:8e:6b:c5:ca:ae:bf:2b:14:
                    49:9f:ca:97:d2:af:9a:5f:54:12:a5:68:bc:74:7b:
                    e9:dd:86:01:ae:31:12:5b:84:99:17:63:bc:b7:a0:
                    30:ff:fc:28:50:89:22:0c:95:24:b8:ef:95:7a:42:
                    82:73:12:ee:75:8a:e4:9b:e4:e8:e3:8e:14:81:80:
                    82:48:c0:49:07:24:96:35:87:a9:ea:9b:f0:d2:71:
                    ee:f5:c3:21:c9:e5:b4:40:25:3f:2e:f9:fd:fe:18:
                    b8:9f:49:f2:62:4b:91:3a:29:3e:63:74:63:28:f4:
                    1a:f8:e9:1a:99:e7:76:75:44:b2:7b:44:54:23:09:
                    9b:7c:92:3e:12:1f:b3:70:4e:34:81:b1:be:09:24:
                    85:80:68:8e:56:e5:6e:3d:22:be:a5:65:fc:57:e4:
                    e2:19:29:fd:87:e5:01:cf:ed:7e:8e:ed:bb:0a:9d:
                    2f:5b:93:e4:70:4e:2b:19:71:ef:73:aa:22:61:c6:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E6:79:30:D0:85:D0:59:11:84:E2:C2:27:F1:60:FD:9A:09:07:93
            X509v3 Authority Key Identifier:
                keyid:DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3130392e302f32342d3234203d3e203533313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:60:3f:e1:09:68:c0:c7:e9:ed:c6:2c:93:8e:e3:0e:17:a5:
         9a:a4:87:55:f3:50:35:3d:fa:5b:d6:7e:dd:91:2c:5a:3c:e5:
         19:9b:f8:ca:8a:7e:33:8a:e9:3a:e0:ca:2e:d3:a7:1f:53:10:
         78:2d:3a:81:42:06:e9:19:ee:c8:f5:55:ee:33:86:81:f3:0a:
         1f:f5:6c:83:18:e5:88:c2:55:64:6d:09:96:21:35:6d:be:ab:
         e0:6c:39:01:4e:09:d8:1c:88:f6:c7:7e:58:4f:0a:13:16:ab:
         0e:be:f9:bf:83:a1:5a:94:5e:2f:00:d8:ad:50:7a:d7:38:7a:
         18:0d:55:70:36:8e:24:51:96:48:6f:9f:31:26:9b:02:b0:97:
         16:0d:34:7e:56:6d:07:59:5e:f7:bb:6b:00:c4:3a:13:21:0e:
         18:3b:80:15:e8:e3:0d:00:e9:db:0e:c9:4a:14:08:87:ba:51:
         70:a1:39:b0:89:ff:5b:55:4a:4f:66:c4:42:b0:c3:dc:c6:6b:
         d7:3c:55:39:1e:03:8d:44:0f:18:b9:ad:00:f0:cc:08:85:50:
         63:4b:ea:80:08:d2:5b:1f:62:1e:7e:f0:38:39:05:b8:ae:b9:
         65:0e:6e:e8:1f:bc:d9:07:9d:d8:5a:4c:09:83:c1:09:9c:0f:
         80:74:a8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org