Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/3138372e36332e3230382e302f32302d3233203d3e203533303937.roa
File:                     3138372e36332e3230382e302f32302d3233203d3e203533303937.roa (raw, json)
Hash identifier:          jUVaIkf/U2DH4N5Q5qX9GQz6REOgotOILM7l6L9eWs4=
Subject key identifier:   9B:A9:5D:DD:FF:48:33:07:FE:BF:4A:4B:DB:15:12:7C:0A:95:98:D7
Certificate issuer:       /CN=0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0
Certificate serial:       1B8DB7473239B0810F0B2883C184BEB3342D64AD
Authority key identifier: 0C:FF:9C:CB:B4:AE:CE:D8:75:43:2D:E6:7D:4D:72:CB:1A:F6:FC:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/3138372e36332e3230382e302f32302d3233203d3e203533303937.roa
Signing time:             Mon 11 Mar 2024 18:23:15 +0000
ROA not before:           Mon 11 Mar 2024 18:18:15 +0000
ROA not after:            Mon 10 Mar 2025 18:23:15 +0000
asID:                     53097
IP address blocks:        187.63.208.0/20 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8d:b7:47:32:39:b0:81:0f:0b:28:83:c1:84:be:b3:34:2d:64:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0
        Validity
            Not Before: Mar 11 18:18:15 2024 GMT
            Not After : Mar 10 18:23:15 2025 GMT
        Subject: CN=9BA95DDDFF483307FEBF4A4BDB15127C0A9598D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:67:3c:b9:e3:ab:97:71:c8:68:18:3d:e1:9d:
                    45:5b:9d:c6:09:dc:4a:9d:f6:85:eb:6f:de:24:47:
                    bb:05:38:60:1e:7d:2d:a9:e6:44:75:23:40:98:42:
                    8c:44:1f:f9:84:db:34:cf:c5:24:2d:58:df:88:e3:
                    50:35:5b:99:86:1d:e8:b6:1d:17:d0:a9:e4:51:8d:
                    80:a6:a0:9c:a3:5d:e3:cc:5d:25:3e:a0:3a:85:8b:
                    01:37:ae:a7:03:66:f1:11:48:81:61:14:67:49:2d:
                    91:ea:91:85:86:f5:82:51:ab:84:0e:a4:fd:f1:29:
                    c4:68:00:89:81:44:12:84:fb:53:02:2f:e9:c8:b1:
                    a7:62:9a:ab:2f:07:d6:f5:f4:a5:43:40:69:7b:09:
                    37:69:83:ac:5a:cc:e1:1f:0d:fc:4b:3c:83:57:4e:
                    2d:9e:fd:38:7d:7a:a6:d9:e5:2e:af:87:ca:84:dc:
                    3f:59:f8:bf:98:e3:2c:d5:a0:21:ca:80:d8:50:31:
                    03:d9:da:17:6f:ae:f5:d1:91:9a:92:8b:e5:b6:58:
                    76:0b:d2:2a:f7:c6:c0:5d:34:55:e6:4f:72:c8:ab:
                    79:78:9f:aa:81:a7:2f:5d:35:8b:f3:c3:7a:08:2f:
                    04:a5:fd:c3:94:7e:b4:45:d5:0a:1b:a4:40:1c:27:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A9:5D:DD:FF:48:33:07:FE:BF:4A:4B:DB:15:12:7C:0A:95:98:D7
            X509v3 Authority Key Identifier:
                keyid:0C:FF:9C:CB:B4:AE:CE:D8:75:43:2D:E6:7D:4D:72:CB:1A:F6:FC:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CFF9CCBB4AECED875432DE67D4D72CB1AF6FCF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/3138372e36332e3230382e302f32302d3233203d3e203533303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:a7:2c:ac:63:10:53:22:d4:81:f8:c4:40:b0:3c:82:21:41:
         1a:cc:29:03:95:46:09:8c:3e:ad:07:93:98:d6:11:a9:1a:05:
         33:d5:34:d4:de:2c:21:2f:6b:a8:44:d4:5d:06:e7:a4:b5:a3:
         08:b2:f2:10:47:5c:f6:b5:6a:fc:0f:a5:a4:5c:2e:af:f9:b3:
         1b:fd:9e:b5:30:f1:7b:31:5d:59:16:70:6b:31:c8:56:5d:6a:
         8e:b6:ff:7f:fa:16:7c:90:6c:7c:7f:6f:ae:ca:0f:67:cc:3e:
         a8:54:f9:9b:44:1c:14:05:ab:0b:8b:23:71:d4:0d:9f:c5:9b:
         67:47:91:eb:9d:b8:2a:46:0c:e8:41:f7:86:03:24:2b:90:25:
         b7:e6:ca:99:81:7a:18:94:b9:a7:35:f2:9b:ba:cc:37:65:50:
         38:5b:93:4a:55:42:25:51:45:dc:da:c9:c4:14:80:2c:99:0f:
         8e:25:91:49:9d:a2:0a:86:b6:a6:49:31:47:7d:bf:66:b9:a3:
         ff:33:d3:fb:67:97:4c:71:d9:5c:18:35:ed:03:cf:13:43:e5:
         bc:c2:02:1f:53:d8:91:28:7f:c1:94:e3:a1:39:84:06:a7:24:
         86:16:6b:40:c3:ae:14:dd:e4:f1:bb:53:09:3e:c4:0e:3a:03:
         36:ab:62:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org