Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3131312e302f32342d3234203d3e203533313036.roa
File:                     3138372e3130382e3131312e302f32342d3234203d3e203533313036.roa (raw, json)
Hash identifier:          pgF12DkOKfuamFTannLI5BQlqgAxLeej3Ss9bUHc+Vs=
Subject key identifier:   4E:87:A7:E6:75:AD:C0:1A:E8:C5:60:00:7D:66:DE:8A:BF:E3:DA:2B
Certificate issuer:       /CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
Certificate serial:       624EBC3AAFD29AB575A6B062B8F5825487FD037A
Authority key identifier: DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3131312e302f32342d3234203d3e203533313036.roa
Signing time:             Wed 05 Jan 2022 15:53:07 +0000
ROA not before:           Wed 05 Jan 2022 15:48:07 +0000
ROA not after:            Wed 04 Jan 2023 15:53:07 +0000
asID:                     53106
IP address blocks:        187.108.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4e:bc:3a:af:d2:9a:b5:75:a6:b0:62:b8:f5:82:54:87:fd:03:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDE58F6D57B9038A0A10AD486DF07E91EFE9D424
        Validity
            Not Before: Jan  5 15:48:07 2022 GMT
            Not After : Jan  4 15:53:07 2023 GMT
        Subject: CN=4E87A7E675ADC01AE8C560007D66DE8ABFE3DA2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:4d:fe:17:ab:6c:d0:e0:9c:cb:14:ea:42:
                    65:d4:0b:b0:a5:b4:c8:22:f7:13:64:48:5c:38:7b:
                    f9:7e:d7:e9:b4:46:30:f6:39:3c:17:81:02:5a:c4:
                    64:4c:1b:11:7b:3f:30:24:ef:76:73:d7:cc:eb:35:
                    43:52:61:dd:1b:fd:79:9b:24:8b:a5:d2:8c:7e:aa:
                    1c:bc:13:d6:69:d9:e1:b0:28:fb:31:5d:d0:b7:24:
                    7c:af:ed:5e:78:7f:59:3b:be:a6:3c:83:51:fb:47:
                    21:c1:25:77:d9:6b:4b:c1:ac:50:ec:43:0e:04:90:
                    29:02:07:21:eb:69:73:47:cc:f9:2c:04:52:84:38:
                    ae:86:43:08:91:57:c9:a3:39:5a:74:e4:a5:15:de:
                    be:d8:83:05:ae:c8:e2:87:58:78:ab:6b:73:fe:f5:
                    24:55:51:f3:07:e2:5c:be:dc:bb:c8:09:24:5b:af:
                    ad:74:73:a1:57:ad:79:8f:69:13:a9:8f:da:2d:ca:
                    b4:d4:43:e2:bf:67:5b:1b:18:e3:7e:7b:80:f3:4e:
                    a5:a8:1c:85:ac:f4:98:05:fa:0b:0e:66:ef:1e:5b:
                    25:1d:b3:3a:b0:bb:fc:c0:14:b7:03:c4:d3:6e:e0:
                    76:a9:be:54:ae:44:d3:1d:d0:49:05:d8:2f:71:f0:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:87:A7:E6:75:AD:C0:1A:E8:C5:60:00:7D:66:DE:8A:BF:E3:DA:2B
            X509v3 Authority Key Identifier:
                keyid:DD:E5:8F:6D:57:B9:03:8A:0A:10:AD:48:6D:F0:7E:91:EF:E9:D4:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DDE58F6D57B9038A0A10AD486DF07E91EFE9D424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8C9zA9XZgpM4uV7xXDCFGiHdjujU4V54MYpfhJbSjXyn/0/3138372e3130382e3131312e302f32342d3234203d3e203533313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:8b:64:91:fe:d6:ad:e9:d0:45:95:a7:eb:5c:cf:18:bf:57:
         f9:d7:53:7a:8f:db:82:c7:29:69:94:74:e5:42:42:bb:6c:2a:
         3a:1b:6f:ad:84:b4:93:27:fe:cc:19:99:c9:0d:11:96:78:c1:
         2f:13:27:22:ee:22:2a:15:09:f8:ba:82:2b:35:14:30:77:c5:
         84:e4:03:a9:b4:fb:30:98:6a:9e:6f:02:73:79:17:fe:bd:a0:
         91:5e:d6:d1:79:9f:04:88:f9:21:53:30:0b:ce:b8:46:f0:cc:
         36:b3:1b:a7:ce:70:ca:d7:0c:50:8e:87:df:f4:80:01:d6:90:
         d1:3c:eb:d3:b6:90:a1:ab:ee:ce:25:ae:65:34:ac:54:07:3d:
         09:b7:bb:5d:b8:b3:5e:3c:05:d2:07:33:a1:c8:ed:ba:06:5b:
         17:fc:2c:8f:19:a8:f0:04:1c:ed:e9:db:48:09:7e:d5:e5:43:
         29:22:8d:05:d2:41:43:f2:1c:ab:3d:28:89:26:e0:3d:93:e6:
         67:36:73:a0:7a:62:73:cf:91:56:be:b7:97:bd:e7:0a:c0:63:
         ae:5c:61:2b:9a:fd:53:cb:32:05:da:ff:88:01:4c:40:f8:ce:
         61:00:2a:d1:d2:f3:ba:88:49:9f:54:18:97:8a:e9:f3:fa:ea:
         58:aa:45:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org