Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138372e38372e3230382e302f32302d3234203d3e20323632363838.roa
File:                     3138372e38372e3230382e302f32302d3234203d3e20323632363838.roa (raw, json)
Hash identifier:          6vf7h6kR0iQblNm0eu2Jm1y0DnVKnwLWzOyvM5Ed+YQ=
Subject key identifier:   2D:7D:6E:3C:4D:38:6A:DE:8D:DD:1B:31:49:54:E3:68:D2:3F:9A:FF
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       3CF7F88CA6EF8559CAF8E7BF76235EC8A7EF9137
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138372e38372e3230382e302f32302d3234203d3e20323632363838.roa
Signing time:             Wed 21 Dec 2022 17:16:49 +0000
ROA not before:           Wed 21 Dec 2022 17:11:49 +0000
ROA not after:            Wed 20 Dec 2023 17:16:49 +0000
asID:                     262688
IP address blocks:        187.87.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f7:f8:8c:a6:ef:85:59:ca:f8:e7:bf:76:23:5e:c8:a7:ef:91:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:49 2022 GMT
            Not After : Dec 20 17:16:49 2023 GMT
        Subject: CN=2D7D6E3C4D386ADE8DDD1B314954E368D23F9AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:de:59:0b:ce:62:6a:0f:90:16:72:a1:74:
                    a0:1e:ab:b2:ba:9f:20:11:d3:4b:81:22:7e:bd:41:
                    16:2b:14:8b:46:08:05:79:2a:09:00:a3:dd:b6:5f:
                    7d:10:a0:bf:18:0d:27:1d:d0:e8:31:de:f0:54:f8:
                    08:d2:1d:14:7f:3f:fc:df:b0:5b:62:d5:ff:69:36:
                    c0:62:95:e0:5d:d9:f6:a0:5a:95:1a:ea:75:77:5d:
                    67:7f:06:cb:a2:e9:b3:c6:e9:23:d9:3c:31:5c:55:
                    eb:44:9d:88:10:45:5c:33:49:e4:bb:b2:c3:ae:82:
                    fb:28:ad:dc:f4:3e:35:40:7a:df:74:49:80:58:26:
                    84:0d:5d:fc:ec:b3:86:85:86:fe:3d:4d:b2:9a:37:
                    dc:25:26:9c:b5:ab:ba:f7:77:a8:55:97:18:c1:4f:
                    60:64:52:32:84:51:64:e5:c9:ab:cb:b0:a2:69:b6:
                    db:e1:35:d1:92:1d:64:40:e5:04:ef:ed:72:46:df:
                    7a:4a:c2:7c:21:f2:66:0e:b5:b6:49:e1:67:60:84:
                    e6:50:6e:e2:02:62:45:44:b4:56:61:e0:be:77:00:
                    3f:8e:f4:6e:61:e0:a0:4d:86:ce:ff:c5:62:45:c1:
                    ca:6e:27:7e:5f:8b:d0:02:e5:2c:47:9f:ac:e2:e2:
                    e4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7D:6E:3C:4D:38:6A:DE:8D:DD:1B:31:49:54:E3:68:D2:3F:9A:FF
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138372e38372e3230382e302f32302d3234203d3e20323632363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:d8:34:5b:3f:65:33:b7:dc:e0:03:62:1b:b0:3d:6f:b9:99:
         be:c5:1c:5b:54:40:58:70:47:1f:6b:0a:1a:28:83:75:f3:54:
         61:73:b9:a1:4d:c7:b9:af:6e:19:13:18:1d:98:7b:a2:be:c9:
         66:97:30:cf:ea:e3:a2:08:cd:5b:b3:16:5b:07:fc:c5:81:76:
         fa:f0:4d:3a:9b:70:1b:e9:4d:ed:85:06:e0:b7:ab:39:87:47:
         3a:f3:3e:d2:13:9f:9f:70:bc:33:17:27:37:5c:9f:b5:b7:c9:
         17:51:1f:1b:40:b6:5f:45:3e:72:59:be:d9:b4:56:7f:70:2d:
         0d:14:7a:0a:b9:0d:13:37:ed:56:41:a3:7f:08:a3:3a:30:9c:
         7f:18:a8:4f:13:68:0d:93:6b:f7:1e:b0:1d:f2:68:18:3d:86:
         94:85:8d:d0:8e:e6:e3:ec:9d:ac:93:2a:33:46:53:15:3a:9b:
         e4:99:b1:8e:7f:08:be:5c:20:ec:d7:77:2c:25:19:ea:d4:a6:
         42:7c:70:16:b0:62:64:cb:f2:d6:7c:e2:b7:e1:cd:33:35:07:
         06:7a:4d:f0:be:e1:f8:2b:62:47:95:a0:66:8f:5e:a2:ce:05:
         83:23:d5:93:ca:44:00:34:e8:a5:d4:77:0b:3c:eb:e5:3b:91:
         90:b5:aa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org