Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa
File:                     3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          CDBcNGZ8TFKn9sxvXhWeSvSlMjYL76nGdKPIUx9pHCs=
Subject key identifier:   76:34:B2:A9:A7:25:C9:B3:BB:78:1D:47:80:C9:1B:DC:58:82:1E:40
Certificate issuer:       /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial:       357023143A3A56EF5C53B4964CD1786973DAE612
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 May 2024 19:44:40 +0000
ROA not before:           Fri 03 May 2024 19:39:40 +0000
ROA not after:            Fri 02 May 2025 19:44:40 +0000
asID:                     28669
IP address blocks:        187.111.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:70:23:14:3a:3a:56:ef:5c:53:b4:96:4c:d1:78:69:73:da:e6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
        Validity
            Not Before: May  3 19:39:40 2024 GMT
            Not After : May  2 19:44:40 2025 GMT
        Subject: CN=7634B2A9A725C9B3BB781D4780C91BDC58821E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:82:d5:d6:4a:1f:65:c1:f8:bb:e5:5e:ea:
                    76:70:22:af:07:d6:df:7a:cf:7d:d2:11:ae:53:3a:
                    95:1e:af:33:14:96:43:f1:7f:fc:65:b7:97:8a:ab:
                    8c:87:2b:6d:d8:2d:de:d5:8b:7f:c7:05:71:54:78:
                    6b:ad:12:1b:5e:da:38:e1:11:f3:37:c5:91:cc:50:
                    23:ce:e3:2c:c5:a1:65:e9:68:3a:8e:99:69:36:ad:
                    24:5b:8f:06:55:28:4e:65:65:71:9d:ea:ae:3f:9d:
                    94:83:9f:b3:b2:53:c9:83:9c:cb:47:fc:03:fd:fd:
                    63:c5:a7:c6:21:fb:26:89:83:fe:d1:3a:cc:dc:3e:
                    ad:7e:1c:4b:41:11:eb:3e:80:32:8b:4f:ae:36:59:
                    b6:e3:4b:ef:7e:23:ce:9c:b7:96:e3:18:be:8a:2e:
                    81:c2:f3:98:84:9b:7b:d9:a5:f3:87:c0:42:83:73:
                    bd:cc:f3:54:f6:3e:7f:7b:96:f2:e3:9b:b9:d3:a7:
                    5c:50:34:4b:c5:37:20:12:d1:ef:92:14:12:0b:72:
                    25:09:13:4b:de:55:c7:ff:4b:b0:00:72:7b:79:89:
                    f5:00:4f:cb:be:46:16:e6:22:76:1d:27:68:df:8f:
                    18:4c:a5:44:60:1b:a3:ca:f6:f9:db:3d:85:fd:0f:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:34:B2:A9:A7:25:C9:B3:BB:78:1D:47:80:C9:1B:DC:58:82:1E:40
            X509v3 Authority Key Identifier:
                keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3138372e3131312e3136302e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:dc:ac:eb:6e:ed:35:1c:45:34:c7:e3:61:17:fe:dd:5e:06:
         39:a2:ba:ed:d0:f5:cf:c1:8d:d5:9b:0f:60:7b:d2:e0:82:1c:
         f9:cf:07:c0:a7:7e:15:12:fc:91:2f:ab:6a:10:8c:bd:5b:23:
         96:30:a1:e8:de:ba:c8:ca:95:b3:fe:bd:a4:f3:8e:a7:aa:a8:
         53:ed:10:13:87:a5:f0:15:46:3a:c7:eb:c9:da:51:85:bd:a4:
         f4:b6:9f:0a:cc:0c:c0:05:63:39:8b:86:02:e2:dd:09:93:e1:
         98:6a:87:5f:d7:30:07:e2:cc:66:49:08:df:ef:e4:18:94:03:
         36:9e:96:c5:82:8a:0f:a7:f3:30:8d:ac:bb:cf:48:d4:06:15:
         20:2d:72:1b:b6:21:61:8d:c1:66:82:92:5d:53:60:ff:e6:49:
         dc:c0:41:3a:bc:9d:a5:23:e5:ac:71:2d:39:6d:03:c6:af:77:
         93:2b:15:4a:0c:3a:93:91:48:6d:8c:67:27:98:03:1c:c4:84:
         c9:9d:8b:66:a2:69:db:96:f9:8c:eb:2f:9e:2d:4a:b2:2c:2b:
         29:3a:f6:c2:3a:f1:3a:ef:30:89:d4:8b:a2:c8:f8:fc:67:dc:
         2f:a6:2d:ae:72:e7:b8:d2:c4:92:28:4b:95:f9:7f:1e:b7:6d:
         c2:41:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org