Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e31362e302f32342d3234203d3e203238313339.roa
File:                     3138372e34392e31362e302f32342d3234203d3e203238313339.roa (raw, json)
Hash identifier:          bx9g1clwdnlglpX3TL4Mr5IwXAK5kzgEEJDB8alJICQ=
Subject key identifier:   4A:21:90:F7:DE:12:E2:74:8D:AE:1F:31:F5:53:5D:F2:58:ED:DA:18
Certificate issuer:       /CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
Certificate serial:       57D95014C52A2B5FAD412A3B56FBBC0717E1A306
Authority key identifier: FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e31362e302f32342d3234203d3e203238313339.roa
Signing time:             Mon 31 Jul 2023 18:14:40 +0000
ROA not before:           Mon 31 Jul 2023 18:09:40 +0000
ROA not after:            Mon 29 Jul 2024 18:14:40 +0000
asID:                     28139
IP address blocks:        187.49.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d9:50:14:c5:2a:2b:5f:ad:41:2a:3b:56:fb:bc:07:17:e1:a3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
        Validity
            Not Before: Jul 31 18:09:40 2023 GMT
            Not After : Jul 29 18:14:40 2024 GMT
        Subject: CN=4A2190F7DE12E2748DAE1F31F5535DF258EDDA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b2:b5:72:a7:71:a4:6f:e9:bd:09:f7:e6:52:
                    41:2a:ac:29:b7:67:cf:c4:ed:bf:26:69:bd:84:3a:
                    b0:91:52:fe:3e:34:c2:9e:f8:71:dd:7d:eb:92:76:
                    27:74:87:4f:10:83:18:91:24:5b:ff:66:ae:bc:0d:
                    99:16:c3:81:50:46:04:38:3d:eb:42:81:80:37:b8:
                    e0:a7:cd:b4:c8:6f:ab:cf:28:b6:09:59:bf:a6:59:
                    29:92:c4:2d:24:2f:64:20:f4:ee:b9:c7:41:31:13:
                    a0:2a:8d:cb:47:78:16:fb:d6:3b:06:cf:79:f2:5c:
                    95:b2:97:8e:42:d9:77:0c:9d:2e:e8:55:71:9d:6d:
                    f8:b4:75:c9:d1:a6:86:90:72:70:00:ea:ea:84:1d:
                    10:68:b2:7e:dc:81:96:5a:d3:58:af:e4:ae:18:71:
                    04:63:66:17:83:73:e3:95:79:e2:b6:5c:46:e2:d5:
                    9e:1e:58:51:f0:c1:5f:5f:35:96:76:8c:2d:72:53:
                    3b:a7:71:63:7f:2e:fa:8c:5c:19:3c:91:32:f8:91:
                    48:27:c3:aa:bb:70:60:be:9e:22:20:04:4a:84:7c:
                    57:68:b1:bd:06:b1:21:f0:97:df:fd:92:99:63:e1:
                    3c:61:55:b6:17:a7:2f:c8:9f:53:4c:fb:d1:08:ec:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:21:90:F7:DE:12:E2:74:8D:AE:1F:31:F5:53:5D:F2:58:ED:DA:18
            X509v3 Authority Key Identifier:
                keyid:FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e31362e302f32342d3234203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:d8:da:56:de:ef:5d:7c:df:2f:d5:3b:8c:b3:93:52:bf:44:
         96:0e:28:25:73:db:dc:50:8a:99:5c:b4:f1:0a:77:df:46:fd:
         88:fd:d2:57:83:48:9e:e7:8a:42:2f:ef:ad:c4:d1:5d:bb:cc:
         11:c3:62:2a:e3:a6:19:51:53:65:4f:5e:71:1c:2d:0a:fd:7a:
         e8:65:ad:34:cf:03:00:b8:51:44:31:db:23:90:cc:cf:6f:84:
         3e:e1:e2:b7:13:3c:04:eb:f2:67:06:51:1a:e8:96:af:7b:60:
         4d:77:ac:30:43:62:73:39:96:5d:91:04:40:2b:2d:12:ae:e3:
         b6:20:16:b0:b0:dc:f3:85:b7:29:7b:41:ca:a7:c7:f2:f9:97:
         d3:f6:3d:75:fa:01:bf:b5:27:7b:e3:8e:58:ea:9b:dc:08:93:
         af:3f:89:c9:73:11:97:91:7c:e7:42:b5:23:17:9f:11:29:ad:
         b0:4e:cb:e5:ba:38:33:df:04:3f:82:52:00:4b:e6:2e:a8:f6:
         db:e0:ab:5f:6a:03:f9:1a:26:05:b6:96:bc:1d:c6:d2:ed:8c:
         37:c6:34:c4:53:2d:40:15:1a:d9:78:38:cc:8d:39:81:56:c8:
         9d:a2:7d:61:c4:73:93:b6:ce:4c:0b:05:ab:b8:82:56:e5:c3:
         58:ba:e5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org