Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/3138372e34392e3230382e302f32302d3234203d3e203238313534.roa
File:                     3138372e34392e3230382e302f32302d3234203d3e203238313534.roa (raw, json)
Hash identifier:          Z2rS3rlZlWlS7Jm5ACWcJUmdGGIYrRDEFyQCsYRo664=
Subject key identifier:   91:B6:4F:49:DF:15:DB:88:73:ED:37:9A:1F:95:FA:9E:D0:50:4F:64
Certificate issuer:       /CN=1BD51938C8BE6619E7290C7B5046C46C81CD38B6
Certificate serial:       62ABAC89E6E88661BCAE04BB027324A61A2EAEDE
Authority key identifier: 1B:D5:19:38:C8:BE:66:19:E7:29:0C:7B:50:46:C4:6C:81:CD:38:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD51938C8BE6619E7290C7B5046C46C81CD38B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/3138372e34392e3230382e302f32302d3234203d3e203238313534.roa
Signing time:             Thu 19 Oct 2023 18:09:22 +0000
ROA not before:           Thu 19 Oct 2023 18:04:22 +0000
ROA not after:            Thu 17 Oct 2024 18:09:22 +0000
asID:                     28154
IP address blocks:        187.49.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ab:ac:89:e6:e8:86:61:bc:ae:04:bb:02:73:24:a6:1a:2e:ae:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD51938C8BE6619E7290C7B5046C46C81CD38B6
        Validity
            Not Before: Oct 19 18:04:22 2023 GMT
            Not After : Oct 17 18:09:22 2024 GMT
        Subject: CN=91B64F49DF15DB8873ED379A1F95FA9ED0504F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:c0:b2:be:66:8f:6c:60:e6:37:40:70:4f:
                    09:51:e4:b3:0e:01:35:a3:1d:c5:de:9a:7e:86:de:
                    6e:1e:69:63:7d:7c:b6:5c:89:e0:2c:64:a1:67:8a:
                    b1:36:98:c4:a0:6d:00:d2:c7:ef:9e:17:8f:e9:eb:
                    50:d2:51:ba:1e:34:49:b3:45:86:b1:ce:e3:82:82:
                    66:de:58:9f:ff:95:bc:4f:70:98:66:ce:c0:59:7e:
                    35:fc:ec:82:81:4b:9a:e6:f0:ed:8b:c6:27:8b:10:
                    b4:f8:b4:d5:84:27:5e:05:db:57:34:e5:af:77:cf:
                    5f:8b:48:f5:8c:88:da:d0:03:90:8a:df:c1:b3:2e:
                    ee:3f:76:8c:b2:76:10:51:f7:97:a3:fb:ba:94:5d:
                    64:4e:93:00:d3:d4:94:3f:cc:fd:66:57:86:67:fb:
                    ae:f2:75:52:ec:86:89:62:fa:51:7f:a2:99:94:64:
                    1c:10:00:cd:44:71:57:9c:88:84:6b:db:81:5e:1b:
                    2a:9a:3b:84:ae:97:88:83:af:b4:b7:17:79:e1:44:
                    4c:bf:4d:02:74:ba:47:47:37:74:a6:14:73:ca:cb:
                    15:e9:36:a1:d5:30:e5:70:d3:31:60:04:99:84:f8:
                    cb:7a:6d:fb:a9:c1:5c:4c:1b:b1:8c:9c:41:2c:ee:
                    fd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B6:4F:49:DF:15:DB:88:73:ED:37:9A:1F:95:FA:9E:D0:50:4F:64
            X509v3 Authority Key Identifier:
                keyid:1B:D5:19:38:C8:BE:66:19:E7:29:0C:7B:50:46:C4:6C:81:CD:38:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/1BD51938C8BE6619E7290C7B5046C46C81CD38B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD51938C8BE6619E7290C7B5046C46C81CD38B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/0/3138372e34392e3230382e302f32302d3234203d3e203238313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:7c:fe:f5:79:b6:7f:3c:0c:ff:41:d9:e9:45:48:19:4e:ba:
         69:64:9e:9f:0a:60:fd:fb:64:42:2d:84:3d:f0:ab:35:28:e5:
         87:f0:33:8a:ba:25:c7:51:0f:3c:92:28:b9:25:e9:d8:23:55:
         3c:50:17:de:6f:41:6a:e1:c2:71:85:cc:7e:19:f2:6a:ae:d4:
         cb:d4:ce:ca:6c:14:19:29:20:4f:6a:ed:3d:74:8d:6a:30:67:
         9f:9e:27:67:7f:8f:f8:f8:97:f5:c3:6a:71:68:59:a6:81:31:
         d4:41:6a:77:eb:a9:f5:2c:c0:8b:3c:97:c3:93:65:2a:ac:ba:
         cd:f9:07:07:e8:73:75:70:90:b5:fd:f5:9c:a6:b4:ec:be:40:
         35:41:62:c1:52:aa:c4:0d:f9:5e:0f:95:03:34:4d:76:ad:01:
         a2:23:18:71:5e:e9:db:26:16:d9:bd:a7:1e:28:56:43:08:e2:
         95:ae:0f:cc:70:bb:c9:1a:de:0c:51:9c:1e:8a:31:a2:75:96:
         5e:06:64:dc:cb:cb:5f:f1:75:83:00:af:ff:92:20:41:4c:11:
         5d:7d:d9:c8:94:91:a4:00:e3:10:0d:bb:ff:31:15:01:2d:74:
         6e:cc:6c:04:ff:82:cb:9a:ea:dc:11:1f:40:7a:48:b4:a1:ff:
         1b:b7:60:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org