Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3138372e39352e302e302f32302d3234203d3e203533303830.roa
File:                     3138372e39352e302e302f32302d3234203d3e203533303830.roa (raw, json)
Hash identifier:          4hJiJjaFPVnkMos/CRXAwPcunbR/b8Q9PfXZidvbC4Q=
Subject key identifier:   3B:33:F5:AA:E0:F5:2B:4D:DE:2A:76:1F:CB:12:73:98:E7:73:7A:52
Certificate issuer:       /CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
Certificate serial:       0CFED2B5301F61433781C41C77CDDEF0BAD35691
Authority key identifier: F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3138372e39352e302e302f32302d3234203d3e203533303830.roa
Signing time:             Tue 23 Jul 2024 11:55:44 +0000
ROA not before:           Tue 23 Jul 2024 11:50:44 +0000
ROA not after:            Tue 22 Jul 2025 11:55:44 +0000
asID:                     53080
IP address blocks:        187.95.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fe:d2:b5:30:1f:61:43:37:81:c4:1c:77:cd:de:f0:ba:d3:56:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
        Validity
            Not Before: Jul 23 11:50:44 2024 GMT
            Not After : Jul 22 11:55:44 2025 GMT
        Subject: CN=3B33F5AAE0F52B4DDE2A761FCB127398E7737A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:fc:17:f5:66:19:aa:f2:fe:fe:93:e7:42:
                    eb:aa:e2:d0:ef:1e:ea:8c:60:6c:9b:3b:e5:ce:d0:
                    c5:b3:63:55:25:9a:fb:59:3d:8a:3b:a7:5b:f4:bb:
                    08:6a:8e:80:f8:3a:92:93:49:be:70:29:25:1c:35:
                    62:3b:26:47:f8:80:6b:60:d1:60:06:d3:08:f9:b9:
                    b6:a2:cd:04:17:8b:54:50:a6:20:5a:d5:de:85:ea:
                    e6:ab:cc:23:43:51:4e:81:9b:49:9c:64:1d:e5:3a:
                    60:31:5e:d2:b6:7d:f6:03:ff:26:73:0d:46:61:85:
                    47:90:60:6c:ba:de:f8:54:9d:81:7a:69:df:76:d4:
                    77:b4:f7:a2:97:69:ce:ee:52:c7:c8:ca:4a:e7:0c:
                    fb:1e:ab:07:ec:25:ff:c0:2e:67:5a:cf:09:2e:a4:
                    6e:90:22:17:5b:80:a2:d4:f1:00:7b:54:3a:88:90:
                    f3:91:a9:a8:c1:a9:2b:61:89:ab:df:05:9b:d1:27:
                    39:45:0b:bc:0a:6b:4e:c9:54:c3:96:7d:33:08:51:
                    67:a9:10:16:4a:bf:af:5c:6a:d1:3e:a0:f3:73:cc:
                    6e:b6:36:e9:3d:cc:a6:57:01:66:36:bc:5c:e1:2f:
                    32:57:61:67:0c:f8:d5:c5:a1:72:ca:7f:25:eb:eb:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:33:F5:AA:E0:F5:2B:4D:DE:2A:76:1F:CB:12:73:98:E7:73:7A:52
            X509v3 Authority Key Identifier:
                keyid:F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/3138372e39352e302e302f32302d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:87:50:a3:40:5b:6e:bc:a7:ca:d5:00:b2:38:41:41:9e:ce:
         1b:19:55:a7:82:d4:ef:4b:43:a7:65:98:73:05:7f:cb:16:5f:
         92:40:b7:46:5f:6a:38:f8:d1:59:d9:5e:4f:c9:73:6d:32:94:
         fe:f3:4b:c8:c2:46:27:ca:c7:2a:66:7a:88:f9:35:da:f0:d3:
         95:40:9d:a5:67:db:40:83:d6:8a:92:42:fb:c2:60:8d:83:a2:
         84:43:55:ad:de:e6:1d:a2:c7:18:50:42:58:a0:ae:50:85:a6:
         0d:12:a6:a2:3b:8a:41:67:ba:b7:09:ea:26:37:38:48:8e:ce:
         ad:19:29:ee:61:27:04:75:4d:0b:86:69:10:97:e7:f3:d4:27:
         7d:15:3d:ca:e4:a8:d0:d9:f0:c3:cd:53:92:14:62:5a:cb:37:
         4f:c8:df:9f:bd:a1:af:be:ea:bb:52:73:f1:0a:7c:ac:50:56:
         a4:d3:bd:84:0d:6b:ee:80:c9:4c:15:0e:12:b6:2e:06:63:f3:
         57:58:a7:54:44:07:0c:b0:e0:6f:76:19:7f:ca:72:48:80:6b:
         08:9d:65:c3:c2:89:5a:7c:03:d1:4d:11:52:1e:e9:5a:41:1f:
         70:79:26:72:55:07:69:3f:77:f8:f8:1e:0e:de:7b:1b:9f:7f:
         32:2e:92:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 17:47:12 2024 by rpki-client on console-fra.rpki-client.org