Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138372e36332e302e302f32302d3234203d3e203238363538.roa
File:                     3138372e36332e302e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          SXEmoXKz1SVQ8/gOkcNKN2AtERyboHWD94gT18+6as0=
Subject key identifier:   7E:5D:8F:AE:51:86:DE:EE:F6:5A:81:B7:65:4D:58:67:A9:EE:CB:9D
Certificate issuer:       /CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
Certificate serial:       51BE754883FC4D52525902213684D6D2E6CA0D42
Authority key identifier: E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138372e36332e302e302f32302d3234203d3e203238363538.roa
Signing time:             Sun 12 Nov 2023 19:40:19 +0000
ROA not before:           Sun 12 Nov 2023 19:35:19 +0000
ROA not after:            Sun 10 Nov 2024 19:40:19 +0000
asID:                     28658
IP address blocks:        187.63.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:be:75:48:83:fc:4d:52:52:59:02:21:36:84:d6:d2:e6:ca:0d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
        Validity
            Not Before: Nov 12 19:35:19 2023 GMT
            Not After : Nov 10 19:40:19 2024 GMT
        Subject: CN=7E5D8FAE5186DEEEF65A81B7654D5867A9EECB9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fb:52:b9:e3:bb:dd:4d:3a:24:c5:5e:22:94:
                    f0:93:7e:b2:66:17:99:2a:1e:f3:10:23:77:dd:68:
                    50:c2:84:3b:5e:da:5b:47:f5:7d:82:12:0b:28:af:
                    1f:9f:4f:34:ca:36:48:1a:a5:0b:4c:31:e7:69:36:
                    ab:3a:83:d2:32:78:c2:c9:e8:46:2f:af:1e:b9:5f:
                    5e:1f:fd:13:6d:d6:c6:3d:33:d9:d3:71:e5:6c:9c:
                    0d:e1:1b:e3:c0:3d:b0:63:3c:61:8d:a5:22:ea:44:
                    ed:6f:9e:d1:be:33:7f:b6:fa:7a:03:9f:c3:fe:77:
                    f4:f2:8e:cc:98:fe:cd:83:79:7c:72:15:2c:3a:4d:
                    6e:08:70:de:f5:c2:43:d6:0d:29:60:92:4c:3b:a0:
                    44:52:e3:a6:c0:21:10:b6:19:4b:ec:5f:72:72:68:
                    36:5b:9f:cd:7c:01:c3:cb:da:f6:43:04:9d:77:9b:
                    9a:30:1b:50:4d:fc:3b:ca:73:8e:3c:1d:3c:46:9f:
                    42:26:4c:60:7d:36:90:e7:97:a0:69:dc:38:85:b3:
                    b6:43:75:11:0c:2d:04:c9:f2:d0:c3:f9:e4:63:ed:
                    73:53:37:ed:9f:93:b4:3e:f3:ec:27:2f:4f:e9:21:
                    ba:5c:1f:4b:a2:6c:48:9c:2c:64:00:9a:cb:e4:8c:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5D:8F:AE:51:86:DE:EE:F6:5A:81:B7:65:4D:58:67:A9:EE:CB:9D
            X509v3 Authority Key Identifier:
                keyid:E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138372e36332e302e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:6d:b2:ae:a2:86:f7:ed:45:9a:09:c9:60:91:7c:f3:b5:77:
         12:98:b6:16:12:4d:7a:5a:ca:8b:76:7c:37:c9:20:9c:ef:0a:
         00:a0:02:47:77:86:53:5e:ab:70:ab:b2:09:4c:77:9e:0e:ad:
         b0:67:9b:da:16:50:96:ca:11:c8:74:04:0b:54:4d:e2:4a:89:
         25:39:69:1f:6b:3e:7e:6d:c2:91:f8:20:9e:5c:c4:16:d8:98:
         4e:5c:f5:8a:ee:82:68:06:b9:ce:74:8c:e2:f8:e7:a1:90:02:
         e0:64:e0:78:82:5d:02:55:3e:94:97:64:08:7b:7a:2d:fc:0b:
         5a:7a:ea:3d:4d:6e:51:99:00:27:0e:8e:dc:40:6d:42:19:8b:
         08:12:3f:84:9e:3c:b2:ba:ef:61:fe:68:44:3f:d0:b7:37:27:
         c3:16:64:d1:b6:8e:82:ce:5b:bc:7c:40:cc:22:18:75:a9:ea:
         60:cb:04:4c:6d:9c:12:ea:e6:d0:20:2a:09:b8:a9:7c:fd:f3:
         ab:52:c2:68:f5:3e:7e:8a:79:df:bc:60:9a:35:a0:38:a6:89:
         33:91:28:64:ff:31:a8:e1:ce:1b:78:26:fe:ff:62:be:cc:07:
         d5:c0:09:a7:e5:2c:d9:88:37:db:84:01:fc:22:62:7e:97:f3:
         46:e4:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org