Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e31382e302f32342d3234203d3e203238313339.roa
File:                     3138372e34392e31382e302f32342d3234203d3e203238313339.roa (raw, json)
Hash identifier:          EF9H9ujY18RMsA6M/gXLRRVNC79HqcDj2R4K8EGRrPg=
Subject key identifier:   57:12:5E:3F:32:FA:44:A0:E7:E1:9D:4C:5F:75:47:09:D9:99:F1:70
Certificate issuer:       /CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
Certificate serial:       5FB2DDABA479A9AFB5F10A9E891385D9123A45A6
Authority key identifier: FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e31382e302f32342d3234203d3e203238313339.roa
Signing time:             Mon 31 Jul 2023 18:14:47 +0000
ROA not before:           Mon 31 Jul 2023 18:09:47 +0000
ROA not after:            Mon 29 Jul 2024 18:14:47 +0000
asID:                     28139
IP address blocks:        187.49.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b2:dd:ab:a4:79:a9:af:b5:f1:0a:9e:89:13:85:d9:12:3a:45:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
        Validity
            Not Before: Jul 31 18:09:47 2023 GMT
            Not After : Jul 29 18:14:47 2024 GMT
        Subject: CN=57125E3F32FA44A0E7E19D4C5F754709D999F170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:d1:33:ed:57:f1:64:8e:78:56:8b:75:bd:
                    3f:06:28:44:cc:0b:49:e5:12:44:75:c4:79:cc:c2:
                    87:13:e0:10:cc:5b:51:66:44:fc:44:88:9c:17:f3:
                    23:88:6b:1b:bd:cf:32:36:bb:c0:bd:61:88:0a:35:
                    84:3d:cc:2e:39:1b:dd:41:29:7f:be:ad:eb:9f:c4:
                    16:5c:ab:17:5e:cd:94:b7:81:c5:61:a2:11:a9:bd:
                    53:93:80:63:33:4e:4f:20:ef:40:58:88:03:34:08:
                    8c:3c:e8:99:fe:0a:06:c4:ac:77:40:ab:6b:3d:b6:
                    24:26:e2:20:26:7f:a5:f3:0d:35:da:53:2e:3a:56:
                    70:d1:3e:a1:3b:5a:7a:0b:73:5d:25:a3:c3:19:e3:
                    3b:5d:9a:4c:bf:e0:5f:80:7e:43:b7:df:44:3f:87:
                    23:5c:8d:b2:0d:a8:6c:cd:73:df:f9:a0:43:b3:86:
                    f7:08:bf:95:30:a7:e7:7a:17:d6:87:19:51:ce:87:
                    4c:12:f6:02:a3:9f:d3:a3:d3:66:13:a6:12:5d:4b:
                    e8:61:ec:58:07:c1:b9:15:f2:f1:82:ed:e0:79:5a:
                    c9:64:a8:fd:7d:9e:3c:c7:56:7a:bd:ec:dc:6b:00:
                    27:62:29:81:a7:f7:94:d5:5f:32:2a:72:2e:48:fa:
                    b2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:12:5E:3F:32:FA:44:A0:E7:E1:9D:4C:5F:75:47:09:D9:99:F1:70
            X509v3 Authority Key Identifier:
                keyid:FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e31382e302f32342d3234203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:ac:7d:55:58:aa:fa:2a:72:71:e2:7e:cc:ef:08:49:0e:92:
         78:33:f6:79:c2:4c:90:4f:36:4c:94:80:2a:35:cc:16:7e:3f:
         28:4d:8d:1f:11:47:39:6c:63:64:0d:b2:b6:5c:17:42:68:56:
         9e:e9:cf:18:35:92:6d:49:8b:21:17:86:43:1c:bf:ec:d8:22:
         c2:d8:f1:c6:8d:ec:f8:64:69:38:2a:6e:34:32:99:94:3f:40:
         42:21:20:39:37:50:9f:33:01:f6:9b:fa:cd:01:b6:88:f5:4a:
         10:c0:ad:a7:34:cd:00:8a:24:9a:a2:d4:93:71:f8:5e:58:38:
         ab:5e:c4:df:ee:83:49:49:36:22:88:77:e0:53:57:f1:be:b3:
         f3:e6:b1:86:c4:1c:b9:65:de:9d:03:1d:44:f2:87:d4:0e:0b:
         9b:1c:7d:3f:9b:4a:f8:55:dc:cf:c1:a5:4a:73:06:2c:eb:e4:
         1c:63:b1:ec:aa:7c:2d:88:c8:4d:39:31:bc:3f:e5:8e:e4:50:
         a0:c5:40:a1:7e:97:99:6b:39:9a:3b:13:e9:54:8b:4d:85:83:
         a3:bc:27:3f:68:90:36:56:e2:7e:c3:1f:af:92:0d:ad:00:33:
         b4:67:85:a7:59:64:5a:b0:19:89:78:b8:7a:bb:ae:15:8d:be:
         96:94:61:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org