Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138372e38362e39362e302f32312d3231203d3e203533303539.roa
File:                     3138372e38362e39362e302f32312d3231203d3e203533303539.roa (raw, json)
Hash identifier:          oNKodsFjjr+dkb0L8H+ZPLrmISWsGHHUjJ3fldLKBtU=
Subject key identifier:   42:5E:FA:E2:52:DB:F1:0B:C3:69:2E:39:09:7F:B0:85:2B:B6:ED:75
Certificate issuer:       /CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
Certificate serial:       2DFE3DA527EF44EA658CA08CC4436031E6559B2E
Authority key identifier: 8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138372e38362e39362e302f32312d3231203d3e203533303539.roa
Signing time:             Mon 23 Jan 2023 22:14:35 +0000
ROA not before:           Mon 23 Jan 2023 22:09:35 +0000
ROA not after:            Mon 22 Jan 2024 22:14:35 +0000
asID:                     53059
IP address blocks:        187.86.96.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:fe:3d:a5:27:ef:44:ea:65:8c:a0:8c:c4:43:60:31:e6:55:9b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C51D86B9680AA2A78981AECD45959BAEE0144E6
        Validity
            Not Before: Jan 23 22:09:35 2023 GMT
            Not After : Jan 22 22:14:35 2024 GMT
        Subject: CN=425EFAE252DBF10BC3692E39097FB0852BB6ED75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:31:6b:d8:8e:9c:53:f5:9d:91:d5:62:b8:
                    91:64:2f:2e:5a:41:d3:71:b5:e9:f2:a5:1c:e0:e7:
                    5c:64:3a:00:23:6e:53:4d:36:b6:1f:f6:8e:12:f1:
                    44:d7:95:b4:d8:aa:c3:ff:e7:a4:0a:44:c7:a7:cb:
                    73:8f:48:64:4c:62:3c:d5:48:39:00:c1:4f:cd:2c:
                    ea:ba:72:b5:08:50:c8:15:34:e9:0c:77:ab:c7:b0:
                    0e:e3:7a:f9:cd:57:8e:a4:bd:0a:81:d8:d1:37:3f:
                    3f:37:82:a3:dd:76:0a:7d:d8:c4:79:4a:75:ea:71:
                    e5:ae:f7:9a:f0:83:b5:da:e0:d1:c2:b9:ce:ef:7e:
                    c6:31:d5:c7:14:71:14:1d:61:73:36:f1:4b:71:77:
                    37:58:3b:70:c2:a4:8e:33:c0:c4:1e:03:28:a0:7d:
                    0e:a2:1c:2a:89:9c:2e:e1:bf:7e:3f:59:a5:f4:04:
                    f1:f6:48:af:b3:18:7c:8f:a5:36:ed:75:9f:33:9b:
                    61:5a:ad:f6:8a:5e:d1:c3:c6:26:61:d8:cc:42:5f:
                    8c:e1:94:54:90:1e:73:c3:fa:c5:82:c2:e8:09:8b:
                    8c:d4:45:5e:04:67:cc:48:f6:67:59:c3:46:05:2c:
                    27:54:f2:dc:ef:ef:8d:40:91:47:96:d1:f8:38:6d:
                    2f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5E:FA:E2:52:DB:F1:0B:C3:69:2E:39:09:7F:B0:85:2B:B6:ED:75
            X509v3 Authority Key Identifier:
                keyid:8C:51:D8:6B:96:80:AA:2A:78:98:1A:EC:D4:59:59:BA:EE:01:44:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/8C51D86B9680AA2A78981AECD45959BAEE0144E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C51D86B9680AA2A78981AECD45959BAEE0144E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6M24PGbfcRFKHJ5YxvqZQ7pUHFRpJPTmaYi219ez336/1/3138372e38362e39362e302f32312d3231203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:16:de:f2:fd:da:b9:d7:06:db:a7:24:78:eb:53:74:13:78:
         0d:32:cb:3f:45:9d:63:61:e3:6d:77:3c:0b:86:d1:ec:2b:dd:
         f5:69:ba:12:1f:1e:b8:c7:2e:50:4c:77:a4:39:a8:72:15:bd:
         41:4c:d5:4a:a1:ee:40:86:e2:79:72:f1:1b:82:72:da:6c:aa:
         47:a3:77:ee:43:38:59:46:27:12:41:30:61:f6:89:fe:e8:57:
         41:8f:59:ff:17:e5:93:57:de:27:e4:76:e2:3c:79:7b:50:ea:
         13:c5:74:0e:3e:1d:89:af:88:d6:12:5c:df:0c:4b:2b:8b:5f:
         03:18:e7:8f:16:ec:f6:3b:9e:80:ea:7e:a4:e8:45:c4:f1:e2:
         e1:98:56:bf:2c:0a:c7:78:8b:23:bf:c9:cd:92:1d:fe:4d:91:
         26:37:15:0e:b5:dd:c8:2f:2d:55:a6:11:b7:a4:61:67:11:b6:
         c6:21:66:29:42:48:f9:7d:16:af:91:c0:a8:6c:7e:19:b6:9e:
         ad:88:b8:c1:5b:2b:f8:4b:43:d9:94:3a:a7:6c:ec:c7:af:b6:
         4a:03:13:c8:68:5b:1d:e5:ec:2d:12:8a:f8:3d:0a:c1:65:fb:
         83:7b:2d:e0:82:83:c2:86:7f:4f:c9:85:65:07:d3:6b:9d:8d:
         6c:64:cf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org