Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135362e302f32322d3232203d3e20323730393138.roa
File:                     3138372e3132312e3135362e302f32322d3232203d3e20323730393138.roa (raw, json)
Hash identifier:          m50DKdd9SS/qjBpPV9wlFldm0cuJ2YX4t6jjnuApAJM=
Subject key identifier:   8F:A6:9F:C1:81:50:AE:3B:5B:8F:D9:A3:4D:16:42:6A:E2:86:4E:47
Certificate issuer:       /CN=7EBA18B989EF0306018F95CD7DDF58F4459F0A84
Certificate serial:       7D7FB63510FF9D1DA96CDA1481A363BDBAE07126
Authority key identifier: 7E:BA:18:B9:89:EF:03:06:01:8F:95:CD:7D:DF:58:F4:45:9F:0A:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EBA18B989EF0306018F95CD7DDF58F4459F0A84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135362e302f32322d3232203d3e20323730393138.roa
Signing time:             Mon 04 Mar 2024 13:33:53 +0000
ROA not before:           Mon 04 Mar 2024 13:28:53 +0000
ROA not after:            Mon 03 Mar 2025 13:33:53 +0000
asID:                     270918
IP address blocks:        187.121.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7f:b6:35:10:ff:9d:1d:a9:6c:da:14:81:a3:63:bd:ba:e0:71:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EBA18B989EF0306018F95CD7DDF58F4459F0A84
        Validity
            Not Before: Mar  4 13:28:53 2024 GMT
            Not After : Mar  3 13:33:53 2025 GMT
        Subject: CN=8FA69FC18150AE3B5B8FD9A34D16426AE2864E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:5b:45:59:fd:ce:aa:b5:95:d6:57:ca:9e:
                    3c:99:dd:5e:04:9d:3f:85:b5:7f:a0:b4:53:59:5e:
                    97:bc:88:5b:46:85:08:e3:48:99:f4:4f:79:99:4c:
                    05:3b:d7:c6:08:7f:17:6d:95:0e:26:b1:94:b6:74:
                    ed:4c:29:65:36:fe:e0:a3:93:de:29:44:08:00:07:
                    c3:14:14:70:2e:4e:c9:ba:af:51:31:8d:8d:3f:1e:
                    3e:5f:20:a5:eb:5a:9b:29:94:31:11:d8:28:3e:a4:
                    e6:c1:cd:ea:62:9b:3a:3e:ab:10:1b:e8:cb:dc:3a:
                    21:e2:c3:b8:83:fc:f8:90:3b:a2:45:ad:3a:7f:bd:
                    88:bb:6d:12:d7:3b:64:20:ae:a5:5f:a4:cd:27:2a:
                    55:d7:8a:82:d1:b7:a2:79:87:1a:0d:12:a5:09:97:
                    8d:dd:48:b8:7e:77:8d:b4:bd:89:88:9d:6c:a9:ff:
                    f6:a0:87:b5:d5:d4:3e:36:79:a4:ce:d8:4b:89:74:
                    d5:73:de:51:ff:13:9e:27:8d:de:31:13:52:65:5c:
                    5c:e2:db:c7:8a:13:e7:f1:81:fa:f4:4f:59:47:5b:
                    e7:27:45:91:1e:a3:20:8a:de:cf:b4:ae:73:45:ad:
                    05:2e:bd:5a:90:31:ec:8e:23:d1:b4:a7:24:fd:73:
                    a1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A6:9F:C1:81:50:AE:3B:5B:8F:D9:A3:4D:16:42:6A:E2:86:4E:47
            X509v3 Authority Key Identifier:
                keyid:7E:BA:18:B9:89:EF:03:06:01:8F:95:CD:7D:DF:58:F4:45:9F:0A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/7EBA18B989EF0306018F95CD7DDF58F4459F0A84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EBA18B989EF0306018F95CD7DDF58F4459F0A84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135362e302f32322d3232203d3e20323730393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:a4:e4:09:a3:d7:db:17:57:20:80:05:8d:f1:ff:ef:2d:4b:
         26:38:12:a5:a7:ef:ab:2e:cb:bb:97:8f:62:e0:4d:c0:9f:65:
         13:4c:9f:39:b0:61:96:ea:31:20:1f:19:5e:08:20:f4:0d:54:
         8b:8a:f1:10:c5:50:b8:dc:2b:40:7f:f7:48:16:e1:15:e7:81:
         7f:31:77:18:7a:75:f8:35:d4:d5:ff:ee:1e:67:01:15:90:97:
         d3:76:24:99:ea:b2:4a:e6:1f:0a:c4:ee:17:ee:36:32:e6:c8:
         a6:ba:b2:1f:3f:d5:29:d2:c0:06:99:49:5a:96:d9:99:02:70:
         f5:c7:06:f6:7e:0d:32:4a:0f:73:c0:84:30:5d:50:81:a7:be:
         6b:c8:64:81:8d:4f:5c:4e:5a:ee:dd:84:af:2c:f8:b0:7d:25:
         bc:19:55:17:4a:c8:91:59:ce:01:36:1e:c6:3f:8a:d6:98:aa:
         54:19:ed:d9:55:ae:cd:42:f0:25:db:f3:15:9a:28:08:92:e0:
         ab:cc:80:40:4d:37:f8:c5:1a:3b:ab:8b:8b:64:27:9e:e7:69:
         a6:24:da:c9:2b:49:80:e7:03:76:0a:3f:ce:bd:36:db:05:97:
         22:cf:f0:f9:9d:03:95:8d:1c:27:82:f9:4e:b5:2d:8d:25:0b:
         15:0d:16:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org