Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32322d3234203d3e203533303532.roa
File:                     3138372e38342e34342e302f32322d3234203d3e203533303532.roa (raw, json)
Hash identifier:          tHD2iDweiR0kW6mtRHjSdjoO9PlskEw/8U9YlcSBt3w=
Subject key identifier:   44:78:56:6E:B8:1D:45:B6:7D:31:5B:EF:DB:E0:3E:CA:68:F5:59:A6
Certificate issuer:       /CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
Certificate serial:       026CCD2E2B7AD9A52991BEFA1F5383C61D972437
Authority key identifier: EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32322d3234203d3e203533303532.roa
Signing time:             Tue 13 Jun 2023 01:00:00 +0000
ROA not before:           Tue 13 Jun 2023 00:55:00 +0000
ROA not after:            Tue 11 Jun 2024 01:00:00 +0000
asID:                     53052
IP address blocks:        187.84.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6c:cd:2e:2b:7a:d9:a5:29:91:be:fa:1f:53:83:c6:1d:97:24:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBC99FF89ED089CB32980A722A112E63E5B2D567
        Validity
            Not Before: Jun 13 00:55:00 2023 GMT
            Not After : Jun 11 01:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:9a:77:43:97:8f:72:ae:25:58:64:9d:bd:
                    e5:ee:76:e5:34:56:e7:7c:37:b4:74:47:3f:02:81:
                    97:5e:5f:35:86:a7:7f:bf:64:48:f2:a9:90:3e:c5:
                    4f:da:be:87:24:89:b3:66:4c:92:22:e2:f3:18:75:
                    3f:c0:c7:a9:6c:65:81:c1:5f:3f:e0:8a:7f:5d:dc:
                    87:29:e5:1e:e0:34:22:46:a4:ce:9e:fe:2a:73:30:
                    f1:45:78:18:1a:b8:d0:3b:d0:3a:9d:3b:32:f5:a1:
                    fb:73:69:0a:01:f9:1d:80:82:58:42:d7:09:1d:64:
                    1a:6a:4a:fa:a2:e5:e0:69:97:7d:f1:d0:2c:ec:10:
                    80:72:a1:ff:45:b7:17:db:e0:05:ba:e1:fe:1f:6d:
                    49:ac:6e:30:5e:6a:97:0b:12:12:b1:af:92:80:ee:
                    e2:55:01:c5:d9:f9:0c:63:cd:be:04:bc:9d:f4:6c:
                    fb:98:09:69:fc:ef:3f:c7:05:26:c3:3e:a6:eb:05:
                    3e:4f:5b:11:40:76:7e:80:01:fd:50:4b:39:ec:19:
                    4f:44:92:7c:c8:b0:5e:6e:30:86:cc:cc:02:1c:82:
                    b0:03:5c:25:cd:f6:11:53:0c:51:00:0b:55:0d:77:
                    da:95:c4:54:43:2f:e9:86:2e:c8:30:00:c2:a4:bf:
                    f6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:78:56:6E:B8:1D:45:B6:7D:31:5B:EF:DB:E0:3E:CA:68:F5:59:A6
            X509v3 Authority Key Identifier:
                keyid:EB:C9:9F:F8:9E:D0:89:CB:32:98:0A:72:2A:11:2E:63:E5:B2:D5:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBC99FF89ED089CB32980A722A112E63E5B2D567.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32322d3234203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:68:16:bb:06:72:14:d9:22:1a:e3:74:4e:fd:12:d5:9d:4a:
         5d:b5:77:cb:07:5a:ed:c9:1d:65:b3:75:db:32:b3:36:18:d3:
         c5:d0:34:d7:58:98:f4:a0:fa:49:44:8a:97:92:65:77:6f:72:
         c7:81:db:f5:4c:3e:03:02:f8:21:6d:cf:cb:ec:a7:2b:a7:a9:
         b5:1e:d2:ad:53:db:9e:26:9d:f4:4d:17:76:fd:2b:33:28:e0:
         b6:e1:68:7d:8e:04:3c:43:59:39:49:8c:3f:44:ef:1a:52:db:
         78:5a:8b:48:d2:21:0e:34:89:4e:34:d0:ca:a5:c4:ea:91:9c:
         91:c1:96:2b:80:16:c6:ef:30:45:12:46:ca:19:6b:7a:81:af:
         28:d9:b7:fc:05:0d:f5:02:98:f6:ee:30:c1:65:bc:3a:d1:f9:
         38:89:5b:84:ef:34:50:d9:b1:ef:c1:1f:32:74:18:4e:cc:97:
         21:de:2f:8e:0f:29:ae:5c:c7:db:59:3d:13:61:d6:9f:3c:95:
         e7:d0:9e:36:c0:80:41:0d:30:1e:bb:89:60:c5:ca:6f:69:97:
         a3:26:48:0d:b1:2d:7b:51:49:42:05:b5:9a:95:7f:36:f9:54:
         ac:e9:65:4c:e4:d5:12:5e:02:78:10:fb:91:77:13:67:07:4d:
         af:e7:49:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org