Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          MJgEyWzqEaOuT0qOJKhVpTuW4mYQ5GiAqZfJmg+kGLM=
Subject key identifier:   51:D5:91:EE:4A:F7:DB:38:CF:AD:53:0C:47:F8:AE:DD:A1:E6:A4:02
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       758416610E73FE9F5A3D691A0A23B278BC73DCF7
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa
Signing time:             Wed 24 Jan 2024 11:44:50 +0000
ROA not before:           Wed 24 Jan 2024 11:39:50 +0000
ROA not after:            Wed 22 Jan 2025 11:44:50 +0000
asID:                     262687
IP address blocks:        187.87.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:84:16:61:0e:73:fe:9f:5a:3d:69:1a:0a:23:b2:78:bc:73:dc:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Jan 24 11:39:50 2024 GMT
            Not After : Jan 22 11:44:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a8:1b:88:00:d2:19:ca:98:1f:d2:1c:ee:7b:
                    77:9a:1c:e6:ca:31:1a:ff:f9:a8:71:a9:d2:71:ca:
                    6d:b7:8b:a3:2e:2b:15:8d:ac:34:0c:22:74:6c:48:
                    df:95:61:58:8e:9e:6e:66:3c:d4:43:86:9b:e3:25:
                    53:d0:45:ff:3f:d9:87:d0:14:de:be:9d:66:ea:9d:
                    79:e6:1b:f5:57:35:c5:7c:30:00:72:59:83:47:9f:
                    11:be:b8:4d:38:e8:77:85:08:05:80:3e:2b:4c:09:
                    71:5c:82:64:d0:35:2a:5b:59:4e:05:e0:37:36:53:
                    d0:27:8c:29:b9:80:c8:be:c3:5d:5e:b1:26:6f:78:
                    bf:4f:b3:58:8f:ca:6e:2d:ce:3a:fb:f3:cb:fd:d1:
                    69:da:ac:ad:c0:a3:b3:11:87:73:94:dc:b9:5a:4e:
                    4d:4d:32:27:35:7a:1b:94:ea:0d:d5:f4:98:c2:52:
                    07:ba:20:8d:e7:9c:7a:65:72:38:d5:5c:5c:9f:9c:
                    14:b2:c3:e1:f9:a4:db:1b:88:07:2d:c6:3b:7e:a3:
                    0f:be:fe:77:6b:b5:82:b3:1c:0b:ad:a9:4a:f0:d5:
                    0f:1d:8e:bb:d4:3f:dc:72:6b:b8:5c:7d:33:59:e6:
                    51:7d:23:47:1c:d4:1f:81:01:7f:68:28:74:89:47:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D5:91:EE:4A:F7:DB:38:CF:AD:53:0C:47:F8:AE:DD:A1:E6:A4:02
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230312e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:ca:cf:28:c1:1b:73:94:05:b2:85:68:3c:ed:47:55:d6:e7:
         fd:68:fd:44:d1:0a:38:d6:c8:48:21:35:fc:f8:fb:f4:4b:5c:
         64:fa:6f:b7:34:68:1d:6e:bb:c2:e7:5e:b6:f9:18:4f:f9:80:
         14:f7:5f:f2:a4:df:9d:a8:08:5c:01:54:48:a9:ee:ac:d2:d8:
         42:d4:9f:d3:cb:fe:d2:93:db:f1:76:d0:b6:dc:19:b8:76:6f:
         3f:57:91:3e:04:f8:7e:9c:2e:3b:cf:b0:ec:95:6e:95:75:7e:
         d6:e7:e4:99:00:a3:a9:15:d7:e3:0c:d4:89:9c:bc:ea:d1:9d:
         a6:2f:06:1e:53:de:b9:f4:09:f0:06:60:a3:4f:a1:8d:cb:7a:
         df:3c:62:14:9a:39:45:0e:12:7b:cc:44:b3:3f:b0:8c:e7:ed:
         bf:a8:a8:00:96:07:ec:6c:ff:62:84:81:6f:48:10:bc:ef:aa:
         32:84:18:f3:5f:36:31:60:d2:7e:15:a5:6e:f6:94:86:45:40:
         24:3f:a9:a1:b2:b9:14:6f:36:b4:ac:33:49:ad:5f:23:d3:38:
         82:b7:a5:1d:d9:ae:0b:4b:a0:9b:fd:06:75:03:e0:d4:b8:fc:
         65:52:23:48:35:5d:58:e8:58:7a:9c:52:a3:a9:87:79:0b:79:
         95:73:88:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org