Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQx7AsG4MJF4qYCipc8YvXzP52151VHbGPYP7Wh7fFac/0/3138372e34392e3133362e302f32342d3234203d3e203238313435.roa
File:                     3138372e34392e3133362e302f32342d3234203d3e203238313435.roa (raw, json)
Hash identifier:          NL2HJ31w/mC1hvrkm0EdFFt4IPQwi04w4hs1NrMXlr0=
Subject key identifier:   7D:7F:C6:03:2A:CB:A6:98:54:B6:AC:80:54:46:44:0B:E0:4E:CB:8B
Certificate issuer:       /CN=39191597A25E742319780241FC2D1B7500DCCEDA
Certificate serial:       11ED8F7FBAFD8B16FE1CE20C9A9BEA0919D3E92F
Authority key identifier: 39:19:15:97:A2:5E:74:23:19:78:02:41:FC:2D:1B:75:00:DC:CE:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39191597A25E742319780241FC2D1B7500DCCEDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQx7AsG4MJF4qYCipc8YvXzP52151VHbGPYP7Wh7fFac/0/3138372e34392e3133362e302f32342d3234203d3e203238313435.roa
Signing time:             Wed 17 May 2023 14:00:00 +0000
ROA not before:           Wed 17 May 2023 13:55:00 +0000
ROA not after:            Wed 15 May 2024 14:00:00 +0000
asID:                     28145
IP address blocks:        187.49.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ed:8f:7f:ba:fd:8b:16:fe:1c:e2:0c:9a:9b:ea:09:19:d3:e9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39191597A25E742319780241FC2D1B7500DCCEDA
        Validity
            Not Before: May 17 13:55:00 2023 GMT
            Not After : May 15 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:c3:b2:63:4c:e0:f7:41:48:d6:b3:02:38:
                    ad:4f:2f:62:99:7e:76:7c:86:c8:16:62:d2:67:7b:
                    fe:4e:1a:bd:d9:d9:ab:1c:4e:30:f9:77:be:b2:93:
                    2f:cc:3b:c0:36:3b:08:78:97:c3:c0:73:93:82:d6:
                    ea:5a:73:66:20:83:35:25:1f:5f:0a:2d:cb:b6:30:
                    d6:e5:87:af:df:0e:15:77:ef:1b:27:21:b1:92:7d:
                    4e:f3:58:35:1e:f2:23:bf:6f:3e:b3:0c:3f:b9:85:
                    74:4d:00:e7:20:a8:87:16:54:76:6f:43:c4:f5:b3:
                    d5:bc:ab:70:b2:7c:02:95:38:04:d1:26:7d:f8:94:
                    3a:43:ad:e9:c4:e6:e3:3d:5f:d5:96:22:ec:46:a5:
                    31:53:13:ac:89:24:6b:ef:ce:7b:d6:f9:4a:85:00:
                    90:2d:3e:72:78:1d:89:95:93:c3:a2:08:ae:ce:3b:
                    2f:54:7d:73:ec:36:7c:b0:cc:d8:d7:45:dd:53:4f:
                    88:a9:d9:d9:7b:53:d3:27:f1:cd:ce:83:6d:88:d0:
                    ad:0b:d5:2b:06:d2:b1:1d:75:54:2b:f9:34:10:55:
                    61:19:9b:e9:1b:61:9c:21:0d:fb:98:39:52:a7:fd:
                    95:67:08:04:fb:64:2b:fb:91:b8:e4:4b:bc:88:d9:
                    1f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7F:C6:03:2A:CB:A6:98:54:B6:AC:80:54:46:44:0B:E0:4E:CB:8B
            X509v3 Authority Key Identifier:
                keyid:39:19:15:97:A2:5E:74:23:19:78:02:41:FC:2D:1B:75:00:DC:CE:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQx7AsG4MJF4qYCipc8YvXzP52151VHbGPYP7Wh7fFac/0/39191597A25E742319780241FC2D1B7500DCCEDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39191597A25E742319780241FC2D1B7500DCCEDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQx7AsG4MJF4qYCipc8YvXzP52151VHbGPYP7Wh7fFac/0/3138372e34392e3133362e302f32342d3234203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f5:e4:0a:1a:35:9e:70:02:b3:88:cd:a8:f3:73:ce:a2:aa:
         25:52:6e:d0:f0:59:bc:e7:60:60:7c:a0:64:61:8e:d1:a2:60:
         d9:80:71:8f:1e:c8:8a:e5:97:e7:67:09:bb:b2:e4:37:07:78:
         72:f3:8c:b0:15:12:95:40:13:04:cb:ca:d9:f9:a9:55:93:6f:
         72:d3:95:ef:b8:28:ce:f4:88:33:d1:e6:11:bb:8e:8d:17:21:
         a3:4a:a2:36:23:89:59:e4:2f:e4:ea:1d:87:f3:28:3e:70:86:
         99:3c:4f:41:ed:59:04:66:e0:95:54:b2:5a:ed:71:92:10:3c:
         d8:bd:a2:11:65:46:e0:fe:90:64:8a:6a:79:65:f2:cd:83:2e:
         b5:3c:1b:40:5f:10:01:84:bd:8e:ea:c6:b8:c4:b1:a4:4d:0e:
         86:3a:0f:f1:22:9b:39:ab:60:cc:dc:3e:22:ff:b2:08:ef:94:
         71:75:8e:04:3f:4b:c1:40:bc:13:83:be:e8:44:5e:0b:73:9d:
         84:cf:bf:bf:17:79:89:22:81:89:00:1b:e9:dc:ba:b1:81:88:
         c1:49:8f:4d:b9:e3:35:c4:df:71:43:84:74:bf:05:2d:77:3a:
         a7:23:7f:d1:51:03:eb:80:25:2c:47:12:1f:9d:4b:31:cd:fb:
         72:34:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:53 2024 by rpki-client on console-ams.rpki-client.org