Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135382e302f32342d3234203d3e20323730393138.roa
File:                     3138372e3132312e3135382e302f32342d3234203d3e20323730393138.roa (raw, json)
Hash identifier:          HRlejLAMZiUUuc9SJTIrQBl+NzgujZD95dSa1M3xXgU=
Subject key identifier:   40:53:79:F5:95:C3:BD:FF:12:BF:C4:EA:41:24:D4:7D:67:D7:4F:AA
Certificate issuer:       /CN=7EBA18B989EF0306018F95CD7DDF58F4459F0A84
Certificate serial:       5078C374F0EC2D350A29D3BE81CC667BEFE7736C
Authority key identifier: 7E:BA:18:B9:89:EF:03:06:01:8F:95:CD:7D:DF:58:F4:45:9F:0A:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EBA18B989EF0306018F95CD7DDF58F4459F0A84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135382e302f32342d3234203d3e20323730393138.roa
Signing time:             Mon 04 Mar 2024 13:33:52 +0000
ROA not before:           Mon 04 Mar 2024 13:28:52 +0000
ROA not after:            Mon 03 Mar 2025 13:33:52 +0000
asID:                     270918
IP address blocks:        187.121.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:78:c3:74:f0:ec:2d:35:0a:29:d3:be:81:cc:66:7b:ef:e7:73:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EBA18B989EF0306018F95CD7DDF58F4459F0A84
        Validity
            Not Before: Mar  4 13:28:52 2024 GMT
            Not After : Mar  3 13:33:52 2025 GMT
        Subject: CN=405379F595C3BDFF12BFC4EA4124D47D67D74FAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cc:0c:60:9c:e2:a4:73:fe:69:23:80:ef:2e:
                    c1:fa:2b:cb:be:80:0b:9f:f7:61:86:03:6d:af:4f:
                    ad:91:47:21:9b:cb:c0:70:d1:56:03:46:de:bb:4c:
                    2f:4e:6a:74:78:ba:b5:8b:b8:95:ea:51:bf:ae:ae:
                    53:42:e5:08:2c:cf:d8:f7:b7:e6:13:25:93:78:1c:
                    0d:d2:29:2f:d8:05:9d:fc:0c:55:e8:d5:71:bd:8f:
                    d1:0d:de:43:63:86:7c:db:dc:b9:dc:71:3e:c4:05:
                    37:0f:1e:cb:b7:46:d7:36:27:75:c5:ac:f4:96:bb:
                    96:44:24:83:f7:3d:9a:35:43:4c:65:50:ec:67:e6:
                    ad:f0:c4:4f:4a:5a:cb:3f:3a:67:72:d6:34:02:1f:
                    70:95:8c:69:db:5e:9a:2b:f6:9f:27:ab:9c:85:e2:
                    52:7a:6c:6f:4a:c8:3e:76:ce:e9:c7:a7:0c:80:6d:
                    55:9d:cd:8d:0e:c5:13:3e:6a:60:d4:2f:da:52:21:
                    a4:cb:84:2a:7b:43:de:25:4b:1c:0d:99:2c:79:9b:
                    10:92:74:9b:25:ec:01:4a:19:1f:bf:72:d4:4b:94:
                    de:8a:cb:76:e6:37:4c:15:14:bd:56:3f:18:95:ca:
                    87:2d:6a:f7:ae:cb:cd:19:2d:95:ef:ad:6b:d2:ca:
                    5b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:53:79:F5:95:C3:BD:FF:12:BF:C4:EA:41:24:D4:7D:67:D7:4F:AA
            X509v3 Authority Key Identifier:
                keyid:7E:BA:18:B9:89:EF:03:06:01:8F:95:CD:7D:DF:58:F4:45:9F:0A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/7EBA18B989EF0306018F95CD7DDF58F4459F0A84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EBA18B989EF0306018F95CD7DDF58F4459F0A84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/0/3138372e3132312e3135382e302f32342d3234203d3e20323730393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:03:c6:14:dc:05:91:d5:77:2b:18:c3:bc:fb:8d:fa:ca:77:
         b4:95:d7:19:9a:d9:87:8b:05:fa:87:23:2e:f2:3e:d7:a2:16:
         a2:40:f0:10:30:ef:ea:dc:4d:e9:5c:55:53:44:19:32:b9:f2:
         7f:63:6a:f2:14:a9:c7:b6:8e:4f:7c:ec:0d:b4:dd:eb:47:59:
         58:9d:7c:89:3a:ea:ef:f3:43:ff:52:f3:5d:61:08:5d:48:68:
         2c:2c:e2:df:91:57:17:60:a8:31:10:ec:b2:dd:dc:b5:7c:bc:
         6b:f0:f0:72:71:fb:24:68:bb:67:ef:58:cc:24:9d:03:dd:4c:
         e8:55:0c:cd:c2:e1:a2:d0:66:62:90:c8:11:e8:0a:e4:98:38:
         2d:aa:98:34:24:31:e7:89:60:64:87:91:1f:38:29:8a:40:0d:
         4d:16:37:1c:e8:dc:d2:cf:bd:47:ea:ce:0f:1a:d6:d5:04:29:
         c2:a1:97:4b:a7:e3:0f:56:dc:ab:0b:e6:60:21:25:6c:51:9d:
         36:0b:32:6b:a6:8a:7d:ef:70:2c:26:08:8b:bc:2d:8e:6d:41:
         95:44:3a:ca:1e:9e:1a:89:f5:6c:ad:84:31:26:14:43:06:98:
         9b:06:9f:28:87:34:e3:21:51:1d:9a:73:85:ed:82:88:f6:2f:
         86:3b:25:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org