Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3138372e38342e36342e302f32302d3230203d3e203631383332.roa
File:                     3138372e38342e36342e302f32302d3230203d3e203631383332.roa (raw, json)
Hash identifier:          MAoPhoDs4Luiooq1fvD1RwK9l9Lhud0E7K1ObnDg+o4=
Subject key identifier:   5E:F5:94:20:86:23:2C:87:4C:7E:92:C1:8D:D1:F9:0B:55:A7:37:83
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       7658D5ADB08779D1B6C52ED8F39677EE3040B150
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3138372e38342e36342e302f32302d3230203d3e203631383332.roa
Signing time:             Thu 27 Jul 2023 17:41:28 +0000
ROA not before:           Thu 27 Jul 2023 17:36:28 +0000
ROA not after:            Thu 25 Jul 2024 17:41:28 +0000
asID:                     61832
IP address blocks:        187.84.64.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:58:d5:ad:b0:87:79:d1:b6:c5:2e:d8:f3:96:77:ee:30:40:b1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Jul 27 17:36:28 2023 GMT
            Not After : Jul 25 17:41:28 2024 GMT
        Subject: CN=5EF5942086232C874C7E92C18DD1F90B55A73783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:58:11:a1:ea:cc:a3:99:45:1c:aa:f5:60:18:
                    87:09:b5:34:ce:5f:df:e3:28:79:91:6b:80:ed:a0:
                    4d:f2:6a:fb:04:43:6c:11:ed:d5:d1:e2:fa:33:d9:
                    05:d6:26:dd:22:9a:9d:cf:1c:03:ee:17:d4:32:e2:
                    7d:b3:ba:75:8d:15:dd:87:5b:7c:4a:84:f5:d0:b5:
                    ce:64:81:ee:9a:a4:61:82:3c:3a:3d:71:4a:ee:61:
                    11:64:5c:d9:5e:3f:66:0d:56:67:29:65:8b:9e:d4:
                    4c:57:fb:4e:cf:d3:42:00:f4:a4:18:46:e2:be:20:
                    86:07:7d:53:83:d8:41:91:97:3c:15:21:6f:97:b0:
                    e4:1a:d2:2a:13:c7:35:a5:78:15:8c:92:e6:eb:9e:
                    87:fc:1a:19:21:8b:de:f7:59:76:7a:73:e2:af:02:
                    3d:7c:5d:38:ab:c8:a1:f6:9b:8e:71:df:f0:ed:96:
                    b2:47:97:be:89:68:da:09:77:bc:51:9b:f6:bc:f7:
                    63:9d:05:c3:83:50:98:fa:6e:67:25:c4:e1:0c:5b:
                    cd:c4:67:fd:05:a7:6a:46:aa:4c:5c:3f:00:c8:99:
                    d3:69:cf:6c:3d:6d:07:63:32:de:b8:d8:d2:2b:b7:
                    b5:52:9c:73:8b:ff:fd:bb:26:c1:2c:37:59:48:11:
                    ed:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F5:94:20:86:23:2C:87:4C:7E:92:C1:8D:D1:F9:0B:55:A7:37:83
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3138372e38342e36342e302f32302d3230203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:78:08:60:4e:90:92:f5:37:b2:8c:6e:94:1a:b0:a7:49:6e:
         84:c9:cc:1b:f5:46:a2:2a:13:e0:90:4c:1e:22:84:e6:b3:8c:
         33:b7:9b:a2:6b:d9:24:36:7d:07:13:89:0f:64:20:ea:b2:22:
         83:23:0e:85:2d:29:7e:99:dc:6d:de:6a:96:53:8c:d7:a3:5d:
         69:93:41:f9:76:e9:28:63:9f:f1:ec:18:2c:da:9d:87:56:61:
         e1:14:25:cd:f7:c0:14:06:90:32:af:7c:b0:4e:c7:8a:75:0a:
         fb:61:34:f3:2a:9c:29:3e:1c:ca:26:8f:f9:92:02:90:c0:6c:
         25:65:b9:2e:95:6a:94:7d:89:5b:aa:89:59:47:e3:d3:f4:bc:
         ae:71:5b:94:39:35:7d:4a:95:5a:67:e9:73:e5:ba:d3:53:76:
         6d:9b:7c:53:c7:c2:bd:fe:86:7d:0f:12:4d:ea:31:ea:09:14:
         79:1c:14:81:ad:2a:77:e5:3f:27:89:4c:be:ea:27:d9:62:7c:
         80:ad:a5:d5:d3:94:fa:83:8b:54:d6:86:94:42:17:90:db:df:
         78:ac:ed:dc:ed:8c:a6:5c:f6:66:e0:9d:92:22:bb:96:01:63:
         6a:7e:2d:8d:52:56:18:0f:19:78:ae:e0:55:de:6f:61:13:be:
         2f:9d:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org