Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32322d3234203d3e203533303532.roa
File:                     3138372e38342e33322e302f32322d3234203d3e203533303532.roa (raw, json)
Hash identifier:          6HlQIaTuht1Z+VzK1Q7W/f0N/C+t9jC0uegLJkk+ybM=
Subject key identifier:   3C:5C:C9:8C:D0:74:83:2B:70:08:15:21:B8:AA:BC:0F:D9:69:C0:3D
Certificate issuer:       /CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
Certificate serial:       08508B1F2D7F256CAACC4373209BD4E33C12FCB1
Authority key identifier: EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32322d3234203d3e203533303532.roa
Signing time:             Tue 13 Jun 2023 01:00:00 +0000
ROA not before:           Tue 13 Jun 2023 00:55:00 +0000
ROA not after:            Tue 11 Jun 2024 01:00:00 +0000
asID:                     53052
IP address blocks:        187.84.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:50:8b:1f:2d:7f:25:6c:aa:cc:43:73:20:9b:d4:e3:3c:12:fc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
        Validity
            Not Before: Jun 13 00:55:00 2023 GMT
            Not After : Jun 11 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:23:a1:6a:ed:8d:5b:7d:35:4b:4f:ec:33:2c:
                    51:f5:ec:4b:1d:3a:b6:a7:57:b7:7e:ee:be:a0:5b:
                    43:0c:0a:a1:5c:bf:c4:85:f0:fe:1a:ae:a3:04:15:
                    97:5b:8b:9a:ac:69:9a:a0:aa:54:cd:f6:5c:4a:14:
                    5e:9f:28:d8:d0:83:28:3b:05:ec:01:b2:bb:a5:30:
                    da:92:c4:26:a9:ac:5e:af:ea:c6:81:9b:3d:66:18:
                    e3:68:30:71:2d:9e:b5:ca:4f:af:75:b4:b0:dd:c3:
                    c7:af:74:05:0e:5f:9f:56:7a:23:2f:81:49:f2:92:
                    cf:73:57:52:51:d1:1e:44:98:7e:7a:be:7b:38:3c:
                    79:09:3c:b5:c6:56:ae:85:99:39:72:8e:c7:11:66:
                    de:c2:d5:51:75:99:6e:73:fa:88:9f:2c:6b:21:bb:
                    23:7c:29:07:65:b8:81:54:4b:c2:3c:be:3c:a5:c7:
                    e1:18:bc:25:2b:a0:37:8d:7d:96:53:c7:66:c8:33:
                    57:72:70:57:23:0f:25:cf:f0:15:2b:2b:0a:91:5f:
                    86:77:97:46:4c:18:30:f0:d4:df:9d:48:31:90:d5:
                    57:0d:be:12:d1:20:fa:ef:a7:c5:69:f3:56:9f:6a:
                    f3:9b:ae:9b:2e:75:eb:38:c8:1c:ad:64:65:8a:97:
                    a1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5C:C9:8C:D0:74:83:2B:70:08:15:21:B8:AA:BC:0F:D9:69:C0:3D
            X509v3 Authority Key Identifier:
                keyid:EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32322d3234203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:d2:32:72:87:ed:af:c3:8d:f2:7b:52:ec:d3:8c:2f:db:ee:
         36:63:e6:ee:07:38:aa:42:15:5d:b8:79:d3:41:15:7a:44:9c:
         1e:00:a2:28:46:93:2e:1b:06:83:7b:c7:80:2a:7a:c2:3e:e8:
         3b:83:83:01:a9:6b:4e:dd:45:4d:70:e4:4c:89:9b:2e:52:4e:
         83:77:29:49:04:a6:d7:d9:b3:6c:a6:f4:f4:17:66:75:d7:8c:
         aa:83:58:06:e7:fa:4c:3b:be:99:a0:83:85:25:72:8c:79:39:
         41:84:6a:db:6c:81:4b:a9:37:f3:38:56:e6:7e:a1:77:a1:17:
         84:ea:4c:82:dc:ca:68:7f:91:00:14:73:ff:41:ab:8f:5c:ad:
         3e:2f:73:04:fa:4d:2f:0a:87:78:36:89:86:9a:11:77:4c:5b:
         53:91:04:85:02:45:95:ea:43:e0:37:dd:8d:6d:f5:f2:6e:2c:
         32:4c:f1:05:b7:88:7c:c1:7a:a8:0c:29:f8:19:f0:f2:69:39:
         79:2d:1b:a5:c8:75:bb:27:7b:e5:36:11:88:11:0f:1e:98:b5:
         74:a0:1c:c6:89:d0:55:46:ee:38:3e:59:e0:18:fa:d3:98:45:
         5b:78:fd:cd:c2:b6:19:d6:38:bf:20:42:8b:77:05:19:2c:c3:
         db:04:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org