Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38372e36342e302f32312d3234203d3e203533313433.roa
File:                     3138372e38372e36342e302f32312d3234203d3e203533313433.roa (raw, json)
Hash identifier:          P+da5cXO5HooNXlfxW6QrooLuJHgyzer/c3LUGUK5+M=
Subject key identifier:   FF:D5:9B:C3:E0:07:39:80:94:B2:E1:6B:83:32:C4:20:24:E0:CF:54
Certificate issuer:       /CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
Certificate serial:       346E508C8760B59FEF36F3B04B6884E76F81F536
Authority key identifier: 75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38372e36342e302f32312d3234203d3e203533313433.roa
Signing time:             Sat 20 Jan 2024 18:33:22 +0000
ROA not before:           Sat 20 Jan 2024 18:28:22 +0000
ROA not after:            Sat 18 Jan 2025 18:33:22 +0000
asID:                     53143
IP address blocks:        187.87.64.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6e:50:8c:87:60:b5:9f:ef:36:f3:b0:4b:68:84:e7:6f:81:f5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756B7677ACC39C76EFD47B63616C5ECF4060E521
        Validity
            Not Before: Jan 20 18:28:22 2024 GMT
            Not After : Jan 18 18:33:22 2025 GMT
        Subject: CN=FFD59BC3E007398094B2E16B8332C42024E0CF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:4e:47:eb:b5:d3:74:eb:07:f4:aa:6e:a0:
                    93:fd:6f:d0:20:85:32:ac:2b:76:4b:4d:42:27:2b:
                    18:56:83:d5:a7:90:3b:a4:7c:72:f3:64:fc:64:5e:
                    f6:5f:32:97:c4:63:27:fb:c7:5b:5d:cd:a2:9b:28:
                    26:0a:9b:ce:52:25:cf:c2:87:92:93:12:8c:3d:b0:
                    c9:38:5a:2f:91:94:04:36:04:39:49:87:ec:12:11:
                    53:48:d2:b3:f2:8a:7e:04:85:de:ed:fb:bb:ae:f1:
                    12:07:fe:91:ce:4d:de:1e:ce:18:3c:d4:43:4d:c0:
                    27:97:75:b8:f5:43:df:f1:9b:54:10:cd:cd:9c:b1:
                    21:f0:9e:1c:46:13:b8:23:f4:64:f3:70:95:1a:98:
                    24:66:b7:9b:ab:66:f9:30:67:37:1e:cc:07:fe:39:
                    47:3c:94:21:87:cd:5c:a1:5c:e0:1d:c7:8a:3e:b8:
                    c9:97:b3:b7:e4:5a:92:e5:74:b1:fc:b1:7c:14:ca:
                    37:33:7c:4b:f2:3f:11:49:8f:ee:f8:4c:f8:9e:39:
                    98:c5:7f:80:50:55:91:b8:0f:0b:c3:1e:00:11:99:
                    2c:c0:49:40:70:ff:cf:58:bc:15:c4:eb:c0:88:88:
                    01:71:04:d9:86:12:71:2a:ee:fb:ce:a2:4b:ed:b0:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D5:9B:C3:E0:07:39:80:94:B2:E1:6B:83:32:C4:20:24:E0:CF:54
            X509v3 Authority Key Identifier:
                keyid:75:6B:76:77:AC:C3:9C:76:EF:D4:7B:63:61:6C:5E:CF:40:60:E5:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/756B7677ACC39C76EFD47B63616C5ECF4060E521.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38372e36342e302f32312d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:28:e4:d4:2e:06:f3:0f:a7:2a:83:3a:fd:94:8c:a1:76:4c:
         f6:70:c6:44:2e:ce:d8:76:ff:fd:c0:f4:b2:aa:2f:86:db:42:
         c3:70:ae:10:b8:33:b6:b9:ac:77:86:51:a7:03:d0:d0:a2:50:
         fb:63:8e:fb:d9:2d:5f:23:37:89:18:ca:f4:98:3c:bb:3f:62:
         b1:2b:9b:ae:45:56:ba:85:a9:b3:1e:b5:e4:58:62:66:5e:3f:
         5a:74:35:ac:b3:d8:80:13:bb:43:36:87:28:96:b6:8f:7d:50:
         e7:db:b5:31:09:a7:fa:0c:7f:c9:07:34:03:fb:d8:55:62:8c:
         07:23:42:ad:c9:31:46:c6:9c:51:7f:78:df:21:f1:82:29:3a:
         1a:08:9d:bf:cc:bd:fa:90:6f:65:de:05:2d:9b:b4:ee:23:12:
         6a:2b:2a:a3:8d:18:cc:74:c5:b8:7c:a5:34:eb:2b:0f:ba:3e:
         ca:7c:6d:59:fb:42:8a:dd:a7:08:7b:91:f4:67:00:c8:89:5f:
         b7:f3:e0:81:12:9d:b1:13:23:18:eb:bc:bd:a2:48:ad:b9:2d:
         28:94:e6:ca:d0:a9:ed:42:fa:57:a5:69:40:0b:7f:ee:82:c4:
         1a:50:80:0a:76:f4:af:43:88:7f:6e:7f:d2:4b:86:48:e6:f3:
         7c:11:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org