Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230362e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3230362e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          GpOC2ZCUu3QLUMe1RU5z0aeftfks8tt1GH0NQ9xq4Rs=
Subject key identifier:   00:C6:33:D3:2C:E8:6B:9D:EC:A7:02:3F:BD:C7:FC:72:26:BC:A8:5C
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       35D6D05F33810096C1BC0DAAE00FFC2C802EBB66
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230362e302f32342d3234203d3e20323632363837.roa
Signing time:             Thu 14 Mar 2024 02:00:00 +0000
ROA not before:           Thu 14 Mar 2024 01:55:00 +0000
ROA not after:            Thu 13 Mar 2025 02:00:00 +0000
asID:                     262687
IP address blocks:        187.87.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d6:d0:5f:33:81:00:96:c1:bc:0d:aa:e0:0f:fc:2c:80:2e:bb:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Mar 14 01:55:00 2024 GMT
            Not After : Mar 13 02:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:54:d3:5a:5c:13:26:f1:03:31:54:f2:34:15:
                    8f:33:05:d4:e9:66:3a:78:7b:db:b0:b1:b0:ac:8f:
                    06:8d:46:01:0a:07:d3:f3:93:0b:77:15:54:67:56:
                    6f:2c:02:0f:4c:0c:53:94:d3:00:bc:f2:a8:ee:07:
                    48:60:fa:79:2e:56:93:6d:4f:3e:e8:47:55:a1:5a:
                    22:b2:5b:4b:2a:3b:22:52:3e:6c:a2:4b:14:7e:08:
                    eb:c5:86:c1:28:ac:ab:18:56:c8:e3:92:c5:44:a9:
                    42:dc:87:9f:38:d0:e8:37:8e:e5:a3:7d:45:34:bd:
                    6e:cc:e5:d3:69:1b:a2:09:0c:b5:a0:5b:fb:ad:e0:
                    a3:51:82:e3:8b:17:51:41:1d:f2:7c:72:d9:e5:9f:
                    07:3d:bf:c8:18:62:dc:3d:13:ae:77:44:02:31:dd:
                    fc:76:61:4a:bc:12:13:99:35:86:aa:4a:44:e9:48:
                    28:ec:68:4e:21:49:a5:f8:2a:b6:52:d5:8b:25:03:
                    09:e4:5d:b0:a6:a7:57:e5:c7:24:72:f8:43:9a:02:
                    53:1a:80:05:8f:f5:11:23:6b:08:3b:ee:4d:76:b9:
                    09:6c:20:d0:2d:fa:1b:30:08:49:18:c6:3b:98:31:
                    fd:5a:01:59:14:33:54:4b:da:93:4f:e0:a3:97:66:
                    36:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C6:33:D3:2C:E8:6B:9D:EC:A7:02:3F:BD:C7:FC:72:26:BC:A8:5C
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3230362e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:13:19:d7:ec:75:09:4e:cc:fb:fb:48:1a:88:95:f3:22:59:
         e9:41:21:ad:0b:27:ce:fb:6e:f4:38:e1:cd:fd:22:31:2a:e8:
         8d:34:d3:1c:30:33:e9:ec:3f:45:9e:6b:43:b4:a2:a6:1e:c6:
         f4:fe:1a:6f:71:0c:01:9e:5d:6d:7c:3c:a7:97:2c:c5:fd:4f:
         77:87:16:68:a9:c1:60:26:19:f8:d0:0d:bc:db:bd:a8:9e:b4:
         17:fb:28:88:2d:63:8e:46:4a:c9:a1:76:65:88:c4:78:76:3b:
         16:88:f8:67:7b:9e:37:06:1a:00:17:34:db:fc:84:8c:48:e4:
         72:c3:d0:bd:2f:ce:95:18:c9:5e:f1:34:f3:d1:89:15:20:e9:
         f2:c1:9e:bc:67:7a:ea:c4:58:5b:81:8d:5c:2e:4a:01:63:69:
         80:e2:cf:9c:39:4b:97:4d:99:d3:4d:bf:c5:47:51:63:6c:66:
         ae:da:fc:d6:3f:b3:8b:db:cd:21:59:4d:b8:69:06:77:23:cc:
         99:24:0f:64:56:6b:b6:e7:83:b0:2f:54:27:d7:67:d6:a2:ff:
         b8:f1:98:9a:d8:12:3e:28:d6:ac:3c:da:2e:94:56:65:fa:d1:
         2a:09:47:1a:b1:56:36:25:be:1d:26:2b:45:33:e3:56:0b:d2:
         a0:58:79:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org