Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          FTXtfZMOXEfobasYkmflh/S5x+5wUU9DuZydk8eFS9w=
Subject key identifier:   CD:8C:BE:1A:07:1D:E8:EF:74:30:8A:B5:A0:F8:66:28:1F:0D:14:BF
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       4A843C5EB97DD5378AE2ABD604464EFEB93831B9
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa
Signing time:             Wed 15 Nov 2023 14:00:00 +0000
ROA not before:           Wed 15 Nov 2023 13:55:00 +0000
ROA not after:            Wed 13 Nov 2024 14:00:00 +0000
asID:                     262687
IP address blocks:        187.87.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:84:3c:5e:b9:7d:d5:37:8a:e2:ab:d6:04:46:4e:fe:b9:38:31:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Nov 15 13:55:00 2023 GMT
            Not After : Nov 13 14:00:00 2024 GMT
        Subject: CN=3082010A0282010100D852E61BC9045FC88CAAF275FFB3DC5DD5B1640E50AD772F407A1083FC5C887371D63C62DD78B66010387409A469C4293F1C8CD61F98C1D1EEFDC9C0009A4E14612C59A879E4284694F7ECC25E597D245E0AD6909AD905535956B1EAE86C355CCD884C9A172D694E29725947FC502E92CFAE9F614958AB0FE2D6149E6EB8894358320D66A1E5619305DBEE67DAAE7A260CAB2F58E9A804A6F00A86A1C12EE1A5D26B3CB92838B8FE9EF73FCADB46842C920817FB1C9A9F6CC00B365BD10DBB2A5A9057AAA79822D91BCE4EAFB2DA6EA9041E4EDE4F65AFC53A8C90A0CAA62E87B74ECFDA727626B7A918F00185328E67748600512C8E226E4893BD00D7A1AA3B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:e6:1b:c9:04:5f:c8:8c:aa:f2:75:ff:b3:
                    dc:5d:d5:b1:64:0e:50:ad:77:2f:40:7a:10:83:fc:
                    5c:88:73:71:d6:3c:62:dd:78:b6:60:10:38:74:09:
                    a4:69:c4:29:3f:1c:8c:d6:1f:98:c1:d1:ee:fd:c9:
                    c0:00:9a:4e:14:61:2c:59:a8:79:e4:28:46:94:f7:
                    ec:c2:5e:59:7d:24:5e:0a:d6:90:9a:d9:05:53:59:
                    56:b1:ea:e8:6c:35:5c:cd:88:4c:9a:17:2d:69:4e:
                    29:72:59:47:fc:50:2e:92:cf:ae:9f:61:49:58:ab:
                    0f:e2:d6:14:9e:6e:b8:89:43:58:32:0d:66:a1:e5:
                    61:93:05:db:ee:67:da:ae:7a:26:0c:ab:2f:58:e9:
                    a8:04:a6:f0:0a:86:a1:c1:2e:e1:a5:d2:6b:3c:b9:
                    28:38:b8:fe:9e:f7:3f:ca:db:46:84:2c:92:08:17:
                    fb:1c:9a:9f:6c:c0:0b:36:5b:d1:0d:bb:2a:5a:90:
                    57:aa:a7:98:22:d9:1b:ce:4e:af:b2:da:6e:a9:04:
                    1e:4e:de:4f:65:af:c5:3a:8c:90:a0:ca:a6:2e:87:
                    b7:4e:cf:da:72:76:26:b7:a9:18:f0:01:85:32:8e:
                    67:74:86:00:51:2c:8e:22:6e:48:93:bd:00:d7:a1:
                    aa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8C:BE:1A:07:1D:E8:EF:74:30:8A:B5:A0:F8:66:28:1F:0D:14:BF
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139332e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:84:84:17:02:cc:54:85:c3:22:5d:19:28:70:5f:a8:66:b3:
         14:04:57:e8:d0:28:b0:15:06:06:5f:35:53:2b:10:4e:e2:79:
         40:b8:fc:3d:11:f8:7d:8e:6f:38:df:e9:ed:00:22:3a:da:1f:
         0d:ad:76:42:d9:31:19:dd:55:ee:eb:b5:5a:e9:1e:14:62:d8:
         bf:fb:aa:9d:19:38:63:f6:82:a4:aa:0e:c5:72:8c:5b:34:cf:
         f7:f9:ed:93:c9:da:8b:28:90:ff:33:0f:3e:60:7f:1a:26:3a:
         f0:95:e3:5c:a8:c6:45:6a:1a:f8:44:2b:46:11:bf:7d:cd:ba:
         2e:04:52:99:14:cd:92:3b:c7:38:36:db:bb:31:b2:81:00:98:
         db:ab:24:e9:33:e6:2c:b5:4e:c5:20:50:b3:db:d1:44:5f:f1:
         fe:51:93:4d:c2:b6:c2:d4:52:e5:b4:04:eb:52:39:49:12:a1:
         be:20:71:b5:21:32:cd:e1:f3:14:ef:29:1c:64:40:1c:e0:dc:
         06:86:7d:33:96:9f:19:37:3c:b0:5c:c2:05:8a:53:c2:0c:e1:
         de:a3:1b:ee:f7:39:73:ba:12:8b:e9:2b:ca:ca:dc:6b:f9:14:
         20:45:75:34:87:d7:47:e4:ca:67:cd:63:34:20:69:ab:e3:c7:
         aa:cc:fd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org