Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e32302e302f32342d3234203d3e203238313339.roa
File:                     3138372e34392e32302e302f32342d3234203d3e203238313339.roa (raw, json)
Hash identifier:          NXAi5yAnhpyovMYYcxV3WjQe5UAKTsiC9CboOTo2esE=
Subject key identifier:   B2:AA:9D:EA:4F:1A:2C:4E:01:25:CC:FD:41:A8:FB:A0:79:BB:53:F5
Certificate issuer:       /CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
Certificate serial:       3EAD0D3AE69B9EAD42A021933FCF065FA8E952FC
Authority key identifier: FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e32302e302f32342d3234203d3e203238313339.roa
Signing time:             Mon 31 Jul 2023 18:14:51 +0000
ROA not before:           Mon 31 Jul 2023 18:09:51 +0000
ROA not after:            Mon 29 Jul 2024 18:14:51 +0000
asID:                     28139
IP address blocks:        187.49.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ad:0d:3a:e6:9b:9e:ad:42:a0:21:93:3f:cf:06:5f:a8:e9:52:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
        Validity
            Not Before: Jul 31 18:09:51 2023 GMT
            Not After : Jul 29 18:14:51 2024 GMT
        Subject: CN=B2AA9DEA4F1A2C4E0125CCFD41A8FBA079BB53F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:b7:e3:d3:86:fc:45:0b:06:0d:45:44:69:
                    63:e6:34:60:9b:b5:20:cc:61:36:ae:8d:e5:71:13:
                    a1:a8:38:77:08:62:7a:84:23:b8:da:3b:61:8e:71:
                    8c:04:6e:7d:d8:84:3f:31:c2:1c:15:06:7e:f9:4c:
                    06:78:f1:ee:6a:42:01:5d:d0:e9:7a:2c:9c:08:88:
                    73:58:bd:73:4c:e3:d8:f2:c7:df:91:cb:a8:99:92:
                    03:4a:f1:b1:d4:05:c7:f4:8b:35:4b:62:10:ac:0b:
                    b2:49:31:28:e8:5e:a6:b8:4e:7b:37:64:83:cf:4e:
                    bb:3a:da:a7:2d:ad:1c:4e:59:d7:ab:b6:8f:fb:78:
                    2f:14:ed:3a:18:bb:64:86:08:de:6c:0d:58:84:b1:
                    43:d1:b2:1a:92:a4:46:31:cd:9d:4a:50:bc:01:be:
                    15:c7:9b:f1:39:0f:ad:6b:9f:65:c7:e7:5c:f2:fb:
                    3b:d2:d2:28:40:d9:b2:04:0b:24:a0:58:ae:6f:3d:
                    18:77:c3:a1:20:eb:7b:fd:23:4c:25:cb:80:56:cf:
                    99:bc:f3:4e:1b:48:ae:23:17:2d:ca:d3:12:8c:b2:
                    77:62:72:8d:e9:d9:bf:14:03:af:d6:3d:e3:af:78:
                    d9:30:fc:62:c7:70:df:20:94:23:05:b3:fd:3a:f8:
                    41:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AA:9D:EA:4F:1A:2C:4E:01:25:CC:FD:41:A8:FB:A0:79:BB:53:F5
            X509v3 Authority Key Identifier:
                keyid:FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e32302e302f32342d3234203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:4e:b9:25:26:1c:e9:4c:97:dc:c6:d8:62:f6:93:29:38:98:
         f6:ce:d7:67:4a:59:98:d5:56:bc:3b:f0:f3:ce:b4:db:6c:88:
         83:a5:d4:30:54:75:d0:9a:02:06:36:9b:7b:f8:ee:99:c4:84:
         47:b9:40:09:71:8e:e6:4b:ee:6a:09:81:93:18:d8:c4:67:d0:
         c4:26:49:c0:70:45:82:72:cc:c9:ce:f7:41:8a:eb:58:fc:a8:
         6b:d2:24:f3:cd:57:3d:42:c6:cf:dc:a2:c2:eb:b3:88:4d:6a:
         ca:74:f1:ce:58:9d:a3:d4:72:62:b8:66:f5:e4:dd:05:d6:31:
         55:83:45:e6:a8:cc:84:1a:e2:d6:c8:ea:48:70:1c:6a:1d:b7:
         24:c8:f8:5f:be:04:95:0a:fe:2f:66:bb:9e:fb:ed:72:b3:06:
         40:37:93:c1:ef:45:ad:dd:5a:fd:10:89:0b:59:ac:dd:c5:fe:
         62:a4:5f:03:c0:87:f9:87:59:e4:5b:e3:a0:92:f6:b9:32:1f:
         49:55:7f:fd:6a:6a:11:a7:12:0e:f7:67:f6:d9:79:d0:f1:38:
         71:3f:e5:3e:79:29:0f:55:ae:98:5d:3e:b3:ef:f2:95:52:2a:
         b5:31:d2:c0:3d:48:5f:6b:dc:35:59:4f:09:cc:8e:25:0b:2f:
         a2:93:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org