Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/1/3138372e3130332e38302e302f32302d3234203d3e20323632373032.roa
File:                     3138372e3130332e38302e302f32302d3234203d3e20323632373032.roa (raw, json)
Hash identifier:          k8QONpdHtv528w2rEXMVsaklaONVP6pahza+Mu1ZcUg=
Subject key identifier:   42:C3:3D:4A:49:AF:DB:1F:60:95:F3:A9:02:C4:A5:30:83:8A:A7:EA
Certificate issuer:       /CN=4259D9D84DEC2A165B84F2D8C96D8345FC946C95
Certificate serial:       41BD259C080AD3BFA84A038075CBA2AA4418D001
Authority key identifier: 42:59:D9:D8:4D:EC:2A:16:5B:84:F2:D8:C9:6D:83:45:FC:94:6C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4259D9D84DEC2A165B84F2D8C96D8345FC946C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/1/3138372e3130332e38302e302f32302d3234203d3e20323632373032.roa
Signing time:             Thu 04 Apr 2024 00:55:46 +0000
ROA not before:           Thu 04 Apr 2024 00:50:46 +0000
ROA not after:            Thu 03 Apr 2025 00:55:46 +0000
asID:                     262702
IP address blocks:        187.103.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bd:25:9c:08:0a:d3:bf:a8:4a:03:80:75:cb:a2:aa:44:18:d0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4259D9D84DEC2A165B84F2D8C96D8345FC946C95
        Validity
            Not Before: Apr  4 00:50:46 2024 GMT
            Not After : Apr  3 00:55:46 2025 GMT
        Subject: CN=42C33D4A49AFDB1F6095F3A902C4A530838AA7EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:71:5e:42:d5:e3:de:0d:b3:ee:c2:40:b5:
                    1c:42:aa:56:82:b3:fb:d9:76:28:86:cb:d3:a3:be:
                    75:d3:0d:bd:d1:e6:eb:f5:1c:fe:6c:65:77:da:62:
                    51:ef:cc:3e:2e:85:96:54:59:3f:2d:1a:18:d4:f0:
                    e5:f1:63:14:d3:11:49:65:7f:fe:86:fd:56:e4:14:
                    a0:7b:c9:9d:ed:7e:e0:1c:be:2b:2b:0e:3d:a8:91:
                    9a:41:28:21:b9:20:0a:b2:da:64:78:46:23:b7:44:
                    07:cb:b3:7e:69:44:ae:93:5a:b3:0c:f4:76:2c:71:
                    34:4a:3c:d7:d0:95:cd:18:fd:00:42:9a:48:bd:8a:
                    d4:e1:21:4e:5b:f4:55:89:58:84:e6:4f:11:0a:72:
                    ea:21:9d:93:1d:3a:e0:9f:2d:7a:17:e5:9d:55:f8:
                    b6:37:55:6a:80:06:55:f5:72:c9:e1:e1:84:7b:7b:
                    80:52:e0:6e:db:b9:8b:94:ef:76:3d:e5:9d:9f:89:
                    7f:51:39:c8:4a:6e:6b:7c:3f:d0:44:03:e0:2f:a4:
                    e4:2c:82:65:d4:2e:b9:60:50:92:21:7d:9f:f6:1f:
                    5c:08:4f:57:df:96:b7:a2:b3:ac:53:24:8a:ea:23:
                    b9:e9:53:b9:53:9b:d9:46:2c:78:b5:e7:ec:9c:b8:
                    12:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C3:3D:4A:49:AF:DB:1F:60:95:F3:A9:02:C4:A5:30:83:8A:A7:EA
            X509v3 Authority Key Identifier:
                keyid:42:59:D9:D8:4D:EC:2A:16:5B:84:F2:D8:C9:6D:83:45:FC:94:6C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/1/4259D9D84DEC2A165B84F2D8C96D8345FC946C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4259D9D84DEC2A165B84F2D8C96D8345FC946C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/1/3138372e3130332e38302e302f32302d3234203d3e20323632373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:06:e2:4a:8e:53:1a:f3:3f:cc:23:9f:cd:49:40:5f:01:fc:
         8c:99:53:6d:76:9e:57:94:fd:3c:c1:51:e2:9e:09:91:62:d6:
         00:a0:cf:70:ad:ac:a0:f8:87:9b:bf:11:77:44:c4:73:f0:cf:
         81:bf:b6:ad:73:b3:f0:19:6b:01:15:73:41:a2:31:ab:43:54:
         4b:ab:2b:1b:5d:62:eb:a9:30:db:25:c5:0c:b8:46:74:83:5a:
         d4:ae:eb:3f:ff:85:e8:49:08:da:69:2e:38:ae:96:9d:72:e9:
         a0:b4:57:e2:a8:28:52:c1:27:5a:38:71:1d:bb:e1:a1:0d:c8:
         a2:13:73:a4:9b:60:3c:76:0d:10:1c:63:1a:e5:5e:fe:2d:af:
         bc:0a:ad:63:cb:b3:4e:8c:76:a1:e6:f8:22:5b:5e:c0:d3:b5:
         ba:09:94:e8:bd:2d:ac:27:ec:b8:51:47:bd:81:20:d2:2b:dc:
         d9:a8:af:a4:69:95:98:11:ba:e2:78:dc:4e:d3:d9:18:e6:91:
         3a:ee:44:dd:37:22:88:d0:c0:38:a4:10:7a:d1:f6:76:4b:b5:
         f1:86:3b:6b:f4:12:0d:d2:cc:8b:19:1f:05:89:d3:ed:b8:7e:
         24:27:70:b2:c1:a3:54:7a:e2:4d:db:05:26:37:ac:86:37:55:
         51:c9:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org