Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38372e36342e302f32302d3234203d3e203533313433.roa
File:                     3138372e38372e36342e302f32302d3234203d3e203533313433.roa (raw, json)
Hash identifier:          h7rSMnoUbfJVqhbfeOZ9vWTHoB9LUejTxGm1opgwkao=
Subject key identifier:   64:9A:46:78:B0:F2:F5:4C:0F:1B:49:A6:0A:AD:EE:4D:C9:E9:83:F0
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       6E287682EA9E8B9A62D1D3FA81954858390593F2
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38372e36342e302f32302d3234203d3e203533313433.roa
Signing time:             Sat 20 Jan 2024 18:45:48 +0000
ROA not before:           Sat 20 Jan 2024 18:40:48 +0000
ROA not after:            Sat 18 Jan 2025 18:45:48 +0000
asID:                     53143
IP address blocks:        187.87.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:28:76:82:ea:9e:8b:9a:62:d1:d3:fa:81:95:48:58:39:05:93:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:40:48 2024 GMT
            Not After : Jan 18 18:45:48 2025 GMT
        Subject: CN=649A4678B0F2F54C0F1B49A60AADEE4DC9E983F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:3d:0c:71:b7:7b:6b:66:0d:57:52:a1:d8:
                    69:1f:d1:3f:7a:5c:8e:d3:5e:98:44:fa:1a:db:15:
                    5c:dd:cc:cc:99:bb:3a:81:a6:e5:90:ea:e2:87:05:
                    84:1e:8b:22:31:07:a7:15:22:5e:50:35:8b:be:14:
                    40:37:97:cb:85:fd:df:b8:05:c4:00:51:cf:93:cb:
                    80:a5:23:63:ec:a8:6c:92:b6:1b:ff:21:be:14:eb:
                    51:c2:2e:97:f2:dd:2b:aa:61:bd:4d:5b:58:c6:2d:
                    1f:9c:1b:e5:c8:ac:52:65:63:80:c2:af:21:45:7a:
                    a1:4e:8c:af:0a:78:ed:86:11:bf:93:a9:65:ec:ce:
                    b5:18:0f:52:8d:d3:78:69:ae:60:d1:5a:d7:5d:59:
                    ab:f9:b5:f4:87:be:22:64:c8:4b:9f:4d:49:5b:e2:
                    bc:61:87:d5:5a:f5:f5:06:95:4e:41:be:a7:de:c8:
                    e4:51:c1:93:03:dc:76:de:ed:66:13:80:1a:9e:14:
                    bd:32:06:73:27:9a:d6:a4:e9:8a:5c:52:ed:8b:3e:
                    b8:b4:44:c6:95:22:ed:a5:7e:a4:85:21:30:bb:f1:
                    98:ed:06:f3:23:5d:65:84:94:2c:1d:96:6f:6a:bc:
                    dd:e6:b4:7e:56:30:85:d2:a8:94:11:52:00:93:fd:
                    b6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9A:46:78:B0:F2:F5:4C:0F:1B:49:A6:0A:AD:EE:4D:C9:E9:83:F0
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38372e36342e302f32302d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:87:25:69:ef:0f:81:37:04:ec:e1:06:45:97:0b:d8:49:fb:
         bb:eb:ef:c9:a9:77:bf:b9:dd:d9:e6:00:e9:c3:6f:70:6c:ca:
         9b:f5:78:9f:e7:ef:0f:5d:56:c9:e7:e3:65:45:08:6b:cd:05:
         23:76:0e:02:da:9d:dc:7b:90:21:1e:29:92:2d:f1:cd:bf:22:
         7a:29:2d:78:09:4c:73:1e:fc:a8:5e:a4:c1:f0:74:3b:91:31:
         c7:a2:02:6f:74:36:58:56:37:b4:78:6c:c5:0a:97:08:98:68:
         a3:fb:17:96:8a:cc:05:21:4e:c3:65:7b:59:1c:c2:d3:ce:c9:
         1e:c6:74:3f:03:b6:59:2d:46:e4:f2:3e:7c:1c:db:d2:fc:ed:
         df:d1:fb:ab:a7:f7:ab:73:34:db:6b:84:a6:86:ed:47:26:1d:
         8a:a0:b3:3d:55:fa:c1:9b:37:b1:5b:9e:f8:53:3a:34:c9:db:
         8e:7e:ec:e6:97:c9:c7:d3:ff:e6:4d:72:1a:ab:ed:34:84:c6:
         6d:9f:fc:c1:bd:78:f2:5b:c7:6d:78:ed:84:c0:7b:52:53:09:
         7e:52:bd:82:e3:6e:9c:c5:54:0b:da:e0:ef:ba:9d:aa:9a:87:
         9f:d6:0f:33:57:0a:1c:d8:13:b8:ef:5c:3f:d5:21:2e:8c:fa:
         7c:83:e1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org