Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133302e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133302e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          JimMnGAWFE07gYBMuS3C/ZH2EC03hMiuAA03I0qledk=
Subject key identifier:   96:66:D9:1C:0A:1C:0F:18:1F:48:33:52:2F:7B:B2:E3:B5:6A:0C:9C
Certificate issuer:       /CN=B6C0FDD6595C6024AE01D3374C8F636E5537AAFC
Certificate serial:       1E369C4B84A18C06B6D2D8CD7AA0B5B992A7AA39
Authority key identifier: B6:C0:FD:D6:59:5C:60:24:AE:01:D3:37:4C:8F:63:6E:55:37:AA:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6C0FDD6595C6024AE01D3374C8F636E5537AAFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133302e302f32342d3234203d3e203238323338.roa
Signing time:             Tue 02 Jan 2024 16:10:20 +0000
ROA not before:           Tue 02 Jan 2024 16:05:20 +0000
ROA not after:            Tue 31 Dec 2024 16:10:20 +0000
asID:                     28238
IP address blocks:        187.0.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:36:9c:4b:84:a1:8c:06:b6:d2:d8:cd:7a:a0:b5:b9:92:a7:aa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C0FDD6595C6024AE01D3374C8F636E5537AAFC
        Validity
            Not Before: Jan  2 16:05:20 2024 GMT
            Not After : Dec 31 16:10:20 2024 GMT
        Subject: CN=9666D91C0A1C0F181F4833522F7BB2E3B56A0C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:99:7a:5e:57:fd:65:5a:53:f7:68:92:80:8f:
                    94:1a:74:5b:4a:c3:4b:be:39:f5:fa:cf:cb:d2:f4:
                    24:02:60:f6:e6:ac:1c:43:69:6a:1a:da:11:82:d6:
                    ac:9d:dd:cf:f4:87:05:04:66:2d:9f:a6:0e:3d:4d:
                    4a:5f:2e:f9:62:8f:3e:97:73:8f:77:06:99:d5:34:
                    23:3b:d9:7c:c5:e3:01:88:6d:5e:73:b3:64:47:47:
                    cc:41:67:8e:8c:b9:9d:e5:6d:ce:fa:4e:a6:e7:be:
                    7e:cc:5c:2f:0d:3f:88:88:3d:57:ee:3c:70:e3:53:
                    d6:66:23:c4:76:c2:46:e6:1d:d5:e1:b5:df:cf:23:
                    b1:f9:0e:f7:07:cb:5d:4d:a2:80:be:35:0a:d0:c1:
                    18:7d:73:6e:e1:02:eb:cb:7e:d7:d0:55:a8:bb:80:
                    cb:09:18:eb:10:5a:27:82:6f:20:1f:3f:ca:f9:98:
                    b1:45:c7:fd:b4:60:33:e7:f9:61:78:f8:09:21:35:
                    58:4d:ce:08:bd:79:39:87:39:e3:24:54:ad:e4:70:
                    b3:69:89:90:67:34:13:72:07:67:d2:1b:0d:c4:b2:
                    3b:66:4b:98:8a:60:43:a2:95:cf:ef:b9:97:93:7c:
                    46:28:ed:43:2e:2e:8d:0a:50:00:61:0d:1f:c2:64:
                    9c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:66:D9:1C:0A:1C:0F:18:1F:48:33:52:2F:7B:B2:E3:B5:6A:0C:9C
            X509v3 Authority Key Identifier:
                keyid:B6:C0:FD:D6:59:5C:60:24:AE:01:D3:37:4C:8F:63:6E:55:37:AA:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/B6C0FDD6595C6024AE01D3374C8F636E5537AAFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6C0FDD6595C6024AE01D3374C8F636E5537AAFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3133302e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:1f:a0:c6:d9:02:c9:b8:78:5a:2c:19:27:ef:fc:84:62:25:
         bf:aa:f2:6e:f3:b3:c6:dd:f5:40:d2:81:d3:d9:40:a2:1f:e0:
         6b:0d:81:42:72:11:3e:54:0b:42:e2:8d:26:1b:0e:ab:37:c7:
         dd:47:e5:86:04:a5:65:f7:50:49:70:cf:26:84:54:06:ec:88:
         3a:aa:03:b1:43:6b:ce:5c:b4:ab:e7:5e:b5:1f:e5:24:69:b8:
         64:19:ce:a2:f4:0c:43:4a:4a:34:07:d4:a1:75:06:6a:c2:32:
         34:9b:9b:52:7b:69:00:25:49:45:fd:04:78:91:4a:60:62:a2:
         7d:13:d8:05:83:93:2e:a6:74:54:99:fd:89:e2:0d:51:c4:c4:
         54:45:36:65:73:8b:8f:5b:45:3e:ba:20:ea:6f:ec:0e:10:42:
         6c:04:e5:67:b5:77:02:a0:00:50:d2:09:50:2a:e1:74:41:9b:
         56:d1:12:7d:2b:63:fa:a3:ee:58:ee:82:29:a1:e0:60:cc:a5:
         1c:f6:d3:8b:13:01:ed:b7:bf:7e:bd:40:0a:8c:50:91:76:aa:
         4c:59:4a:a9:ee:e0:3b:2c:1a:8e:d6:5a:69:86:1b:63:d8:a6:
         33:d6:08:a1:81:44:0b:2e:46:13:0e:3c:15:48:ea:1b:ac:7f:
         7b:28:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org