Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139392e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139392e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          3xa/r9fvf12112Fvo9WxnWvAEJKQTh9CXcnpdehDbFw=
Subject key identifier:   E7:3A:9D:F7:45:48:9F:5B:1B:46:44:42:00:DB:81:B7:4A:84:4C:85
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       2DB7B99683964C6D177062250EDD594EEE3E10ED
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139392e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 27 Feb 2024 18:29:24 +0000
ROA not before:           Tue 27 Feb 2024 18:24:24 +0000
ROA not after:            Tue 25 Feb 2025 18:29:24 +0000
asID:                     262687
IP address blocks:        187.87.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b7:b9:96:83:96:4c:6d:17:70:62:25:0e:dd:59:4e:ee:3e:10:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Feb 27 18:24:24 2024 GMT
            Not After : Feb 25 18:29:24 2025 GMT
        Subject: CN=3082010A0282010100C5426AD86B823724D03BBD0C183865D0582C2E563946E290CDD665DCC6DD99FC29B11454ED0B82CA51BBB54FF2C5DE4A14752779C4049CB0A42F9122323DCF5980A7D8ABCF6D460330E172221A00FC15F0C834A2EF6BACBC1AB293CBB19EFB6B526E1FD3CB1B36198EAA637D7051DD249AB0EED30B94C33934C318BA977CEB5EF3859AFF0E0BB3DF7BB1CB1F9A6077B75458FF649F86EF481C9BF68303588D1CA790912EEFE9DAED30BDAE5B88946E210CBC58588B632D7EBD3FEEFFF346863DA850C3F6CA5DB41D2DFD1F6F114B5FD410E51625597304255816B4A18E01EBD17061E5054A9BD354EA2027296EEDD6C01EFFE7EE73478153BDA03895EC526F890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:6a:d8:6b:82:37:24:d0:3b:bd:0c:18:38:
                    65:d0:58:2c:2e:56:39:46:e2:90:cd:d6:65:dc:c6:
                    dd:99:fc:29:b1:14:54:ed:0b:82:ca:51:bb:b5:4f:
                    f2:c5:de:4a:14:75:27:79:c4:04:9c:b0:a4:2f:91:
                    22:32:3d:cf:59:80:a7:d8:ab:cf:6d:46:03:30:e1:
                    72:22:1a:00:fc:15:f0:c8:34:a2:ef:6b:ac:bc:1a:
                    b2:93:cb:b1:9e:fb:6b:52:6e:1f:d3:cb:1b:36:19:
                    8e:aa:63:7d:70:51:dd:24:9a:b0:ee:d3:0b:94:c3:
                    39:34:c3:18:ba:97:7c:eb:5e:f3:85:9a:ff:0e:0b:
                    b3:df:7b:b1:cb:1f:9a:60:77:b7:54:58:ff:64:9f:
                    86:ef:48:1c:9b:f6:83:03:58:8d:1c:a7:90:91:2e:
                    ef:e9:da:ed:30:bd:ae:5b:88:94:6e:21:0c:bc:58:
                    58:8b:63:2d:7e:bd:3f:ee:ff:f3:46:86:3d:a8:50:
                    c3:f6:ca:5d:b4:1d:2d:fd:1f:6f:11:4b:5f:d4:10:
                    e5:16:25:59:73:04:25:58:16:b4:a1:8e:01:eb:d1:
                    70:61:e5:05:4a:9b:d3:54:ea:20:27:29:6e:ed:d6:
                    c0:1e:ff:e7:ee:73:47:81:53:bd:a0:38:95:ec:52:
                    6f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3A:9D:F7:45:48:9F:5B:1B:46:44:42:00:DB:81:B7:4A:84:4C:85
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139392e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:d1:79:c7:35:42:eb:28:30:a3:ad:93:30:bd:e7:7e:d2:2e:
         d2:aa:9f:24:d9:50:6c:4f:e0:7f:fb:58:d8:0c:b3:ea:af:e8:
         a4:42:70:6a:e7:52:58:73:cb:9e:aa:5b:d9:ba:8e:a4:0d:70:
         c0:3c:57:cc:ed:92:62:25:8e:68:ff:c3:af:05:08:dd:78:13:
         26:f7:d1:d8:ed:a8:31:2e:1c:d4:6c:fc:c9:17:c6:8a:47:6e:
         b3:55:f6:a1:ef:18:08:69:40:d2:36:58:63:ec:7c:05:5f:65:
         cd:04:22:4b:01:97:40:ed:31:47:2c:b3:eb:8b:89:9f:e8:8a:
         3d:6a:b2:28:8f:8b:63:47:75:06:09:4a:80:73:8e:e9:91:e4:
         10:a8:8a:ed:d1:4a:a9:ad:ce:4f:9c:5c:49:e2:e9:37:b3:df:
         fe:e9:62:2d:a5:97:9a:83:62:20:16:69:b0:2f:59:72:1b:23:
         35:66:58:83:39:b7:f0:25:35:ea:72:86:71:1f:44:72:ba:f3:
         d3:07:02:ea:f5:a8:4a:9a:b1:24:a1:18:a1:f4:84:0c:82:7e:
         a5:c0:aa:23:56:08:30:91:f4:c6:64:43:f2:97:2c:a6:ae:72:
         e6:d7:7f:83:69:7a:3c:31:d5:6a:8e:f2:0f:c4:33:a3:ca:cd:
         3b:65:f8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org