Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa
File:                     3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa (raw, json)
Hash identifier:          8WC1ILuJX6PJ4gD5Q0C7DBGTcyMBUWufju/WsAYlSNI=
Subject key identifier:   1F:01:F8:72:1C:91:9F:E8:A7:51:4D:14:8C:BB:D1:48:9D:41:3D:D4
Certificate issuer:       /CN=80E3A3B152CAAE5EF9A4BF135D95342709013716
Certificate serial:       7229783ED0A669A6E7CD234D8EF4CF9807C5CD53
Authority key identifier: 80:E3:A3:B1:52:CA:AE:5E:F9:A4:BF:13:5D:95:34:27:09:01:37:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80E3A3B152CAAE5EF9A4BF135D95342709013716.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa
Signing time:             Tue 12 Mar 2024 14:10:16 +0000
ROA not before:           Tue 12 Mar 2024 14:05:16 +0000
ROA not after:            Tue 11 Mar 2025 14:10:16 +0000
asID:                     271694
IP address blocks:        187.111.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:29:78:3e:d0:a6:69:a6:e7:cd:23:4d:8e:f4:cf:98:07:c5:cd:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E3A3B152CAAE5EF9A4BF135D95342709013716
        Validity
            Not Before: Mar 12 14:05:16 2024 GMT
            Not After : Mar 11 14:10:16 2025 GMT
        Subject: CN=1F01F8721C919FE8A7514D148CBBD1489D413DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:87:bf:83:2b:cb:88:0e:96:e1:4f:c8:eb:
                    90:89:ba:47:51:73:f3:04:c1:e8:12:95:1d:a3:b4:
                    3d:ad:62:43:00:00:1b:ef:fe:4f:99:fc:6a:8a:63:
                    a4:0b:d9:c2:06:ce:ad:ee:75:5e:2d:e5:09:3a:7a:
                    1d:4b:2d:81:0c:44:b6:a9:7d:e5:30:78:8c:d0:2a:
                    d0:c8:cf:7d:75:aa:a2:c0:9a:94:a2:cd:c1:44:dc:
                    52:d4:87:5e:40:54:3e:67:d4:7a:4b:ff:09:66:8b:
                    5f:46:d0:d6:74:b3:ed:c5:1e:80:9c:c7:89:42:6c:
                    e4:d2:a1:4f:75:f5:56:c2:e8:65:a3:3c:7c:51:2b:
                    fb:7f:d1:de:df:ec:62:da:6c:15:21:80:69:c5:4d:
                    dd:33:9a:56:cf:4c:03:b5:32:b3:6a:5f:94:25:f0:
                    dd:15:df:fc:ec:0c:c7:0f:f7:46:05:5e:99:5d:5e:
                    6c:56:78:d1:41:16:43:05:14:e2:d5:a2:7a:5e:66:
                    8a:dc:a6:54:56:8a:ac:97:d1:c5:82:fb:42:ae:46:
                    36:33:3c:0d:18:95:fb:dc:54:eb:fb:bf:c8:5c:83:
                    d2:9d:b6:1f:72:71:03:6d:5a:8c:23:9e:b8:ba:da:
                    ec:2f:49:60:d3:1f:cf:cc:b7:ed:fa:e1:46:5d:fc:
                    4d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:01:F8:72:1C:91:9F:E8:A7:51:4D:14:8C:BB:D1:48:9D:41:3D:D4
            X509v3 Authority Key Identifier:
                keyid:80:E3:A3:B1:52:CA:AE:5E:F9:A4:BF:13:5D:95:34:27:09:01:37:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/80E3A3B152CAAE5EF9A4BF135D95342709013716.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/80E3A3B152CAAE5EF9A4BF135D95342709013716.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/3138372e3131312e3132342e302f32322d3234203d3e20323731363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:78:c2:50:33:d3:d9:a0:04:3f:4b:6b:fc:d9:63:7b:83:3a:
         fa:08:7e:15:b2:a1:32:32:9a:ac:0d:61:75:09:15:48:32:a9:
         38:da:76:36:32:f6:ff:91:2a:2e:73:da:03:00:d6:11:a2:ac:
         bf:9e:db:ff:67:20:88:31:e5:07:b9:b4:95:46:69:11:46:b6:
         76:52:0d:eb:9d:00:18:11:de:36:e9:43:f1:b0:30:f5:72:af:
         b4:0c:71:a2:48:f2:26:73:2a:c3:18:c9:5e:3e:ec:1e:a8:93:
         9d:2a:30:4f:cc:c3:f1:fc:27:85:d1:d4:24:9f:57:24:16:d7:
         8d:ab:9b:ff:28:fd:ac:eb:73:31:66:ea:85:15:00:ff:30:ee:
         24:f8:74:e8:41:c2:32:5a:29:78:43:47:22:9f:1b:38:3f:90:
         1e:52:6e:22:be:1e:36:0a:12:b4:c0:a4:bf:bf:30:24:af:10:
         47:31:1d:46:8b:47:2d:a4:53:f8:e1:2a:c2:77:23:22:f0:af:
         7a:1c:3e:12:7f:eb:3e:b0:71:9c:44:28:a9:00:06:ae:b7:68:
         b3:9e:f2:33:6e:9a:dc:db:16:e4:78:61:64:f7:66:f3:3b:8c:
         30:96:7b:a1:d6:4c:98:8b:aa:d2:aa:10:89:cc:be:d0:de:1b:
         63:d2:55:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org