Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/3138372e36332e3230382e302f32302d3234203d3e203533303937.roa
File:                     3138372e36332e3230382e302f32302d3234203d3e203533303937.roa (raw, json)
Hash identifier:          3yKxn2bJ+MhjDSScXwBRLtiwRb0S00zQSChq94lsgsw=
Subject key identifier:   82:75:A2:BD:91:2B:6A:7E:68:4D:CD:16:C6:5E:03:9A:5B:CC:48:01
Certificate issuer:       /CN=65BACEDBEA80E642364A002C1A1E5158217E7B5D
Certificate serial:       44B005BEC04D4C78597CCB2F90E4B5C1F4CCA2BA
Authority key identifier: 65:BA:CE:DB:EA:80:E6:42:36:4A:00:2C:1A:1E:51:58:21:7E:7B:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65BACEDBEA80E642364A002C1A1E5158217E7B5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/3138372e36332e3230382e302f32302d3234203d3e203533303937.roa
Signing time:             Mon 27 Mar 2023 13:08:25 +0000
ROA not before:           Mon 27 Mar 2023 13:03:25 +0000
ROA not after:            Mon 25 Mar 2024 13:08:25 +0000
asID:                     53097
IP address blocks:        187.63.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b0:05:be:c0:4d:4c:78:59:7c:cb:2f:90:e4:b5:c1:f4:cc:a2:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65BACEDBEA80E642364A002C1A1E5158217E7B5D
        Validity
            Not Before: Mar 27 13:03:25 2023 GMT
            Not After : Mar 25 13:08:25 2024 GMT
        Subject: CN=8275A2BD912B6A7E684DCD16C65E039A5BCC4801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:37:11:06:e1:9d:91:62:00:98:33:7f:6a:
                    e8:db:72:fa:0e:52:7d:26:60:5a:f0:b3:54:8e:5a:
                    6b:da:7c:66:11:83:d9:52:7c:e4:c7:e2:79:36:23:
                    ed:2d:50:07:e9:72:a1:86:20:92:b0:b8:a4:fa:05:
                    77:8c:cc:8a:7c:d9:f2:72:3b:cd:51:e1:9e:2e:33:
                    4c:0a:02:79:c5:c5:e8:0f:92:34:3c:7e:46:82:5e:
                    e2:c0:22:de:51:d2:a1:5b:a0:33:54:df:50:2b:38:
                    34:45:36:20:68:e1:5b:b3:d9:90:62:ca:a8:d7:b8:
                    fb:1a:2e:4b:65:44:e8:2c:13:2a:40:76:53:7a:57:
                    b8:04:7e:4a:3b:8a:bd:51:9d:97:68:9e:ef:a6:a1:
                    a2:bf:20:54:62:bd:6d:ee:d0:03:01:26:f7:c7:0d:
                    e7:d2:a3:ed:24:72:99:21:24:87:13:27:7e:d3:70:
                    29:67:94:f4:c9:08:f0:66:02:f1:16:f6:c6:e5:f0:
                    5a:61:9c:7f:91:9d:31:c3:0a:fc:fa:2d:30:f1:ea:
                    48:c9:df:f3:02:41:b9:88:24:9e:5c:6d:18:45:76:
                    39:ee:a8:b5:2c:0d:7a:25:20:40:28:3e:65:dd:d2:
                    20:b7:c1:30:32:97:a1:96:fb:f1:b4:a0:aa:ba:ca:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:75:A2:BD:91:2B:6A:7E:68:4D:CD:16:C6:5E:03:9A:5B:CC:48:01
            X509v3 Authority Key Identifier:
                keyid:65:BA:CE:DB:EA:80:E6:42:36:4A:00:2C:1A:1E:51:58:21:7E:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/65BACEDBEA80E642364A002C1A1E5158217E7B5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65BACEDBEA80E642364A002C1A1E5158217E7B5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/3138372e36332e3230382e302f32302d3234203d3e203533303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:e9:3f:03:93:3d:43:f8:02:be:9f:c2:d2:4f:7e:2f:a0:
         16:be:52:4f:7b:17:a7:b5:b7:e7:e4:a9:23:65:0a:38:c0:0b:
         f9:de:8c:3e:bf:7b:09:02:f1:c3:22:c5:8d:60:e3:9a:50:f0:
         29:c1:2c:c8:66:00:50:fe:97:05:ed:92:b5:be:73:a6:f5:b8:
         45:02:73:a8:ad:ed:d6:59:67:fa:b5:db:bd:6b:2b:a8:25:ae:
         b8:3c:39:19:83:c8:1c:c7:9d:0f:8b:6c:6d:46:20:c7:73:09:
         30:f4:a2:24:00:81:b3:7c:03:23:57:fc:91:37:f4:b4:15:dd:
         bb:7e:2f:d4:84:92:a0:7c:7b:13:c9:1d:d8:f3:94:da:6a:16:
         a3:ec:e8:46:32:46:ca:32:ad:82:bf:1c:df:2c:5c:c2:0b:5f:
         ed:41:c5:92:37:b3:5c:1b:3b:20:c0:bd:ec:84:9f:1e:3a:a7:
         c9:67:68:f4:d2:f5:62:23:e3:c6:61:26:4a:f8:bd:3e:e4:0e:
         90:c3:f9:cc:c8:06:b6:c6:1c:4d:78:f4:42:78:d0:fc:85:9d:
         4c:c0:6c:96:1b:04:30:f2:fa:50:bb:b2:6e:9c:70:22:d4:e4:
         ab:1d:ce:68:03:6e:79:62:49:00:19:9e:51:4c:2b:80:8f:90:
         21:71:27:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org