Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135382e302f32332d3233203d3e20323730393138.roa
File:                     3138372e3132312e3135382e302f32332d3233203d3e20323730393138.roa (raw, json)
Hash identifier:          V/bpj+0R6bNtK69Bclsp9WsIMDgLtNHIpWACl3nehcQ=
Subject key identifier:   A3:CC:36:49:96:51:4D:63:66:5D:5C:C1:A9:5F:C3:30:E3:DC:86:D8
Certificate issuer:       /CN=7EBA18B989EF0306018F95CD7DDF58F4459F0A84
Certificate serial:       584533F267A24A68399F7E1EA8979301A2C87D97
Authority key identifier: 7E:BA:18:B9:89:EF:03:06:01:8F:95:CD:7D:DF:58:F4:45:9F:0A:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EBA18B989EF0306018F95CD7DDF58F4459F0A84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135382e302f32332d3233203d3e20323730393138.roa
Signing time:             Mon 04 Mar 2024 13:33:52 +0000
ROA not before:           Mon 04 Mar 2024 13:28:52 +0000
ROA not after:            Mon 03 Mar 2025 13:33:52 +0000
asID:                     270918
IP address blocks:        187.121.158.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:45:33:f2:67:a2:4a:68:39:9f:7e:1e:a8:97:93:01:a2:c8:7d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EBA18B989EF0306018F95CD7DDF58F4459F0A84
        Validity
            Not Before: Mar  4 13:28:52 2024 GMT
            Not After : Mar  3 13:33:52 2025 GMT
        Subject: CN=A3CC364996514D63665D5CC1A95FC330E3DC86D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:c4:70:3b:96:2a:4e:d6:82:80:69:0a:47:
                    ea:9c:56:01:93:cd:55:c4:25:b3:2a:2f:22:6b:39:
                    e9:21:dd:1d:65:b9:a9:28:68:1e:9b:c1:88:26:14:
                    dc:35:ff:5e:8c:51:77:29:29:15:02:aa:ce:14:ae:
                    ac:0a:2e:c1:e9:9f:2c:cf:b2:35:04:c2:24:5a:e3:
                    5a:17:bc:e8:e3:45:f4:df:9c:b2:14:2d:d8:14:68:
                    de:91:17:aa:d8:d1:2e:95:32:7c:bf:f5:49:35:f0:
                    9c:0e:49:b3:7d:df:39:50:e7:d9:23:24:1c:e6:c8:
                    91:8c:91:ee:7d:04:40:c5:a7:f9:08:df:d0:8d:8a:
                    cc:ce:cc:45:96:f5:53:37:71:59:fd:97:d2:f2:64:
                    f0:e4:68:cb:df:54:36:2e:42:49:09:40:93:cd:15:
                    2f:cc:95:ec:0b:5a:ad:13:82:c4:ee:48:3c:fd:49:
                    99:1a:55:ee:0a:b7:0c:64:51:c7:d6:ae:20:2c:21:
                    78:92:0c:0f:ed:55:1e:4b:da:98:7d:ec:33:5b:86:
                    69:77:0d:e3:80:c8:a3:97:ca:8d:b3:8a:0c:07:37:
                    d5:48:19:2a:71:03:da:74:cc:61:9e:86:83:fd:e7:
                    0f:ff:fd:49:52:43:4b:15:49:95:7d:d0:c8:73:5f:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CC:36:49:96:51:4D:63:66:5D:5C:C1:A9:5F:C3:30:E3:DC:86:D8
            X509v3 Authority Key Identifier:
                keyid:7E:BA:18:B9:89:EF:03:06:01:8F:95:CD:7D:DF:58:F4:45:9F:0A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/7EBA18B989EF0306018F95CD7DDF58F4459F0A84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EBA18B989EF0306018F95CD7DDF58F4459F0A84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135382e302f32332d3233203d3e20323730393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:a1:07:9b:a2:a2:9b:81:85:24:6b:8c:30:3c:91:0c:79:d1:
         37:58:39:a0:bd:a8:dd:05:09:e7:59:2a:82:96:2d:a0:41:8d:
         48:0d:4a:27:48:2c:11:b3:bf:98:df:5b:37:0f:11:5d:41:9c:
         b2:35:77:4e:51:83:9e:92:68:0d:d4:4e:a2:12:63:a8:69:94:
         e5:47:90:68:37:4e:20:86:15:0c:38:76:51:ff:64:84:a7:95:
         bc:97:12:48:a0:9a:38:fc:49:6c:c5:45:43:cb:8a:34:78:72:
         46:4e:2a:91:3f:5b:b5:e5:30:41:06:44:d6:da:0d:33:cb:c6:
         52:bb:58:24:a4:09:01:8c:8f:d6:12:ac:e2:fa:2c:6f:b7:36:
         ba:40:6d:57:41:fc:29:9f:4e:fb:a6:a5:c1:0e:9f:ad:bf:14:
         1a:48:11:ca:2b:43:da:e9:1a:62:ad:5a:29:82:87:43:fd:32:
         c5:09:e9:fe:68:d3:35:2e:be:3d:31:df:62:ef:c8:3c:b8:af:
         6b:96:7d:55:78:30:a0:db:43:79:6e:4f:e4:dc:1b:d0:2f:6d:
         bd:fc:8e:43:b2:1f:5a:ac:f0:70:03:28:e9:1d:d4:7c:34:65:
         d8:c2:de:36:41:c3:04:9d:17:94:d8:c4:37:f6:34:84:96:86:
         c8:6a:ca:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:15 2024 by rpki-client on console-ams.rpki-client.org