Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/3138372e3130392e3234302e302f32302d3234203d3e20323632343937.roa
File:                     3138372e3130392e3234302e302f32302d3234203d3e20323632343937.roa (raw, json)
Hash identifier:          46wXTY9HWCv9NTC2YeAIZVVqByitaqx8dCwt2w84eYA=
Subject key identifier:   64:42:46:66:F8:1F:10:FB:84:22:E3:BC:57:52:41:99:07:2A:4A:CD
Certificate issuer:       /CN=9B3B51A3925842C0C12F2E34AFA55693DCD3640C
Certificate serial:       1B026740EAC2FF05E8219EEAC642AAFC325804AE
Authority key identifier: 9B:3B:51:A3:92:58:42:C0:C1:2F:2E:34:AF:A5:56:93:DC:D3:64:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B3B51A3925842C0C12F2E34AFA55693DCD3640C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/3138372e3130392e3234302e302f32302d3234203d3e20323632343937.roa
Signing time:             Mon 18 Mar 2024 20:55:23 +0000
ROA not before:           Mon 18 Mar 2024 20:50:23 +0000
ROA not after:            Mon 17 Mar 2025 20:55:23 +0000
asID:                     262497
IP address blocks:        187.109.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:02:67:40:ea:c2:ff:05:e8:21:9e:ea:c6:42:aa:fc:32:58:04:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B3B51A3925842C0C12F2E34AFA55693DCD3640C
        Validity
            Not Before: Mar 18 20:50:23 2024 GMT
            Not After : Mar 17 20:55:23 2025 GMT
        Subject: CN=64424666F81F10FB8422E3BC57524199072A4ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:69:bd:da:73:7d:79:39:e8:c2:cd:1e:be:
                    13:a3:64:83:66:a5:0f:2d:93:f3:98:a2:32:7e:3e:
                    27:00:dc:08:41:eb:a4:d9:64:87:eb:07:bb:cd:43:
                    cb:a4:1f:08:7c:d4:81:cf:be:a7:86:2a:2f:28:69:
                    21:4d:f0:4b:e9:05:d4:51:92:b5:35:82:72:b8:80:
                    2a:d4:c2:b4:da:a4:d2:15:fd:f6:da:f1:2c:6a:e0:
                    60:9f:2e:dd:7c:95:ef:fb:b5:42:41:be:10:ea:8b:
                    d7:9b:0f:02:49:74:d8:e0:9c:97:1f:2d:a7:33:22:
                    0a:fb:bc:0b:f4:31:be:f4:1a:e4:04:89:61:b7:f6:
                    6d:21:94:78:db:af:34:e1:17:af:08:79:59:f7:e8:
                    82:17:35:49:12:d3:8d:d5:dd:d4:ee:f4:64:42:86:
                    73:44:5f:e1:40:10:df:25:eb:28:62:ac:67:a0:69:
                    71:96:6f:17:93:24:09:3a:92:7b:67:41:1d:4e:d6:
                    e0:e1:d7:78:f6:13:7e:49:7d:1f:7a:66:72:3f:f7:
                    f3:2d:0f:4e:a6:15:8f:c1:61:7d:97:6d:8f:e5:9b:
                    44:02:c3:30:ab:74:aa:60:83:fe:9c:ce:8e:6d:fa:
                    02:75:2f:3a:da:c4:b5:50:c7:69:75:69:0e:01:87:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:42:46:66:F8:1F:10:FB:84:22:E3:BC:57:52:41:99:07:2A:4A:CD
            X509v3 Authority Key Identifier:
                keyid:9B:3B:51:A3:92:58:42:C0:C1:2F:2E:34:AF:A5:56:93:DC:D3:64:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/9B3B51A3925842C0C12F2E34AFA55693DCD3640C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B3B51A3925842C0C12F2E34AFA55693DCD3640C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vvcSKaeKL8UGgoQwNuwcv1vZ25neUQEDwuztHUcCRee/0/3138372e3130392e3234302e302f32302d3234203d3e20323632343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:a1:18:df:12:ee:d2:58:30:1e:dd:15:3c:be:91:28:73:69:
         9d:09:18:d5:47:1f:b9:56:2b:f8:82:8e:c8:c1:dd:1e:72:1c:
         ab:2a:0a:c6:35:f8:5e:3e:bd:d2:27:fb:9d:93:bb:59:37:1d:
         0b:8d:7d:72:cb:5c:11:d1:46:bf:a4:05:12:3b:2b:69:9c:2a:
         30:de:28:6a:40:71:64:b8:3b:02:18:c1:73:e2:8b:12:65:c5:
         26:07:17:59:9f:66:80:89:51:cb:2e:b4:e6:15:8f:f1:37:1f:
         ad:66:a6:22:32:45:22:11:5f:33:22:93:00:cb:43:66:d6:e6:
         03:91:94:d5:ea:c8:25:58:60:d5:bc:a9:18:84:e6:72:2d:e1:
         e1:d8:f1:cd:cc:fe:ef:b8:0d:46:82:e9:97:5f:18:71:99:9b:
         91:93:f9:b7:30:e7:c3:a5:20:f5:c3:78:bd:31:0a:33:de:8e:
         92:16:27:b6:b1:31:e6:c3:92:b9:6a:1d:5d:54:7d:c9:58:6d:
         97:c0:09:a9:d0:fd:6a:96:f1:61:3e:39:d4:62:cf:23:de:fb:
         69:09:3a:c8:78:59:80:89:1a:d3:fb:af:aa:68:df:0f:f6:ae:
         d0:38:1c:3c:45:76:32:0b:db:82:d0:32:04:ce:2f:be:74:75:
         a8:ee:30:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org