Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa
File:                     3138372e38352e3230302e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          9pgA/+H4XhFY09wbSur4qyY6TnznjTYIJORG+5d9TDY=
Subject key identifier:   6A:78:D8:AA:B7:19:89:53:A2:DD:43:0F:44:98:7C:7A:3D:81:95:15
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       3EC917DDBE4B336A65625915C6553A7D00B5FB7B
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa
Signing time:             Sat 20 Jan 2024 22:12:23 +0000
ROA not before:           Sat 20 Jan 2024 22:07:23 +0000
ROA not after:            Sat 18 Jan 2025 22:12:23 +0000
asID:                     28349
IP address blocks:        187.85.200.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c9:17:dd:be:4b:33:6a:65:62:59:15:c6:55:3a:7d:00:b5:fb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 22:07:23 2024 GMT
            Not After : Jan 18 22:12:23 2025 GMT
        Subject: CN=6A78D8AAB7198953A2DD430F44987C7A3D819515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:04:fc:51:b8:5a:79:4a:47:98:ed:b9:fa:
                    14:c4:97:1a:ff:b8:07:7e:8a:e2:11:7c:a4:15:30:
                    b2:5a:0f:46:6e:b5:57:0d:24:9b:ce:e1:65:20:a4:
                    72:ba:f3:69:c9:8a:f5:b5:87:6c:97:50:07:60:a4:
                    bf:e2:57:c1:cc:31:0d:08:0d:8f:b9:ca:54:04:55:
                    37:16:e1:67:fb:4f:22:5f:65:bd:84:4f:e5:49:0c:
                    0f:08:ef:a8:94:ae:f6:33:6d:c9:ec:9f:8c:7c:07:
                    f4:de:71:01:ca:c6:3e:b3:90:03:df:88:9e:e8:5e:
                    7b:86:34:b2:d7:1e:02:5e:06:f8:9c:6e:3b:2b:8d:
                    d0:80:d3:dc:08:71:27:80:43:7a:87:52:1a:79:56:
                    b3:35:78:24:95:4d:62:22:7a:99:09:30:1f:c7:bd:
                    3b:16:3c:c7:f3:7a:75:81:cf:d5:5a:78:10:b2:81:
                    3f:6a:4a:48:a7:8e:c1:51:28:14:ba:8c:61:80:6f:
                    05:9e:73:9e:61:66:e0:fb:c3:ab:85:58:fa:3e:d0:
                    58:4b:dd:e9:85:d4:4b:39:46:a8:3c:ae:61:d2:a1:
                    1f:67:77:20:01:93:0f:42:ad:91:69:f8:ee:06:83:
                    00:a5:90:74:a4:86:8b:78:24:9d:3e:39:36:d5:77:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:78:D8:AA:B7:19:89:53:A2:DD:43:0F:44:98:7C:7A:3D:81:95:15
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:c1:f2:20:fe:6d:bb:18:a5:be:4b:64:7a:4e:94:70:0b:53:
         bb:ee:62:c4:c9:f3:ea:07:7e:90:6d:62:1d:52:07:66:87:cd:
         15:5a:a5:d4:61:b6:78:95:1a:2c:7b:ec:ab:e3:69:a4:2b:66:
         ca:ad:65:b0:77:55:53:e1:14:22:e0:63:0a:21:f6:f7:5b:46:
         8b:af:2d:fb:a0:25:c4:54:d6:23:73:bf:b1:06:7f:73:dc:9c:
         69:fe:a0:f9:5c:b2:5a:ec:fa:01:fb:a7:c0:95:cc:9e:71:6c:
         70:24:f1:15:71:ca:1f:e2:4d:7b:96:cf:22:06:80:ed:24:da:
         04:d5:89:8c:9b:07:9a:09:eb:74:0a:e6:af:5f:c1:de:50:d2:
         80:b0:70:e3:df:8a:7f:c5:b1:4f:0a:83:a2:04:0f:ff:d6:cc:
         96:6e:25:68:71:f8:4d:59:a2:83:80:18:a4:37:69:80:37:ad:
         49:d5:fd:43:b5:8d:8c:74:dd:e0:09:98:29:8b:37:f6:b0:82:
         16:c1:95:59:cd:a8:93:07:dd:73:c9:e8:6a:b6:79:2a:df:90:
         d2:61:1c:8b:83:e3:a9:79:30:63:72:61:fe:d8:38:f3:52:9a:
         e2:06:11:b0:db:1a:5f:0c:9f:cd:6b:8a:96:3c:d2:53:37:61:
         f4:a0:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org