Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa
File:                     3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (raw, json)
Hash identifier:          AHkkl37lNrUW8XaNJjP9nxx6q34TIuQkYGkXdJeWalk=
Subject key identifier:   5A:EA:C1:E5:FB:9A:52:F3:C2:75:13:A5:2A:F2:84:B3:11:DB:12:15
Certificate issuer:       /CN=6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C
Certificate serial:       1FB9A7899A1C1CE66E6F1CF5145D822D5FC63E6C
Authority key identifier: 6F:07:DA:04:12:45:CE:BD:5F:00:CB:D4:AD:DA:5C:DC:A7:EE:DE:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa
Signing time:             Thu 24 Aug 2023 15:03:21 +0000
ROA not before:           Thu 24 Aug 2023 14:58:21 +0000
ROA not after:            Thu 22 Aug 2024 15:03:21 +0000
asID:                     53130
IP address blocks:        187.120.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b9:a7:89:9a:1c:1c:e6:6e:6f:1c:f5:14:5d:82:2d:5f:c6:3e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C
        Validity
            Not Before: Aug 24 14:58:21 2023 GMT
            Not After : Aug 22 15:03:21 2024 GMT
        Subject: CN=5AEAC1E5FB9A52F3C27513A52AF284B311DB1215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4e:35:97:f7:03:21:dc:fa:1b:42:13:6b:bf:
                    fb:2b:3a:8f:b5:ac:6b:ed:d5:9a:8e:48:90:85:60:
                    46:77:4d:ab:b6:22:76:f9:55:2c:2f:83:fd:74:2b:
                    cf:79:47:42:80:c4:62:54:74:a8:dd:1f:b9:30:74:
                    27:64:98:e4:65:28:b7:39:75:b9:af:62:93:91:70:
                    70:35:29:1c:15:0d:ee:80:76:33:d7:c9:b9:09:6e:
                    36:41:0f:49:71:fb:57:74:99:ae:49:ed:34:41:fc:
                    7a:70:7a:af:9a:5f:80:3a:28:f5:35:09:31:a4:59:
                    90:03:c2:1e:1b:40:44:91:82:bd:37:5a:86:e3:a0:
                    17:aa:f0:61:04:79:81:34:ad:77:6d:19:dc:9a:77:
                    24:75:2e:69:70:81:61:1f:2f:fb:28:e3:ed:3c:9d:
                    d2:84:b7:ac:48:d5:85:eb:a1:2a:8e:76:4c:95:dc:
                    bb:93:9c:63:7a:cc:65:ab:f4:59:b5:55:c9:a1:d9:
                    30:01:00:06:02:39:e3:94:58:f0:57:5b:af:17:0d:
                    d7:c0:1a:84:a2:ae:c2:ce:1a:50:68:24:cf:b3:3c:
                    37:c9:45:12:a2:73:e9:e6:03:2f:22:a9:fa:7a:b4:
                    c7:d2:8f:7c:39:99:9d:ef:d7:af:5d:27:d6:bb:06:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EA:C1:E5:FB:9A:52:F3:C2:75:13:A5:2A:F2:84:B3:11:DB:12:15
            X509v3 Authority Key Identifier:
                keyid:6F:07:DA:04:12:45:CE:BD:5F:00:CB:D4:AD:DA:5C:DC:A7:EE:DE:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F07DA041245CEBD5F00CBD4ADDA5CDCA7EEDE5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/0/3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:1c:28:a0:6b:31:e3:0b:76:39:45:34:d0:e8:cc:a0:9b:67:
         d9:6b:d2:dd:67:bf:bf:3b:c2:21:cf:6a:39:86:53:35:01:08:
         e7:64:af:a5:9a:d0:78:c5:b0:91:49:0c:6e:84:e0:7b:31:34:
         c4:dd:5d:fc:30:07:fc:9b:e7:fe:90:07:e9:d0:de:8e:b0:b0:
         05:82:74:30:93:1e:5a:5a:cb:d8:82:10:08:07:94:65:d3:03:
         86:c0:52:23:1d:8b:e2:01:e1:7f:31:8a:fc:e1:86:ad:cd:06:
         48:91:d4:4a:1d:17:2d:2c:b5:9b:29:cf:50:75:19:4f:0e:61:
         12:26:ad:73:21:9f:fe:99:dc:e4:ca:6f:fb:a5:17:b5:6c:6a:
         6d:d1:b0:e2:00:4e:17:47:da:30:1a:0f:a0:cd:2a:f4:f7:d4:
         57:cd:33:50:e4:bf:70:6f:0a:d3:13:d8:48:9d:a4:2e:18:5b:
         94:28:3e:6b:66:d1:ea:42:f3:42:2a:62:77:ed:c9:30:3f:18:
         95:b4:e2:4d:2b:7d:c9:95:83:14:7b:c0:a4:cc:2b:ad:25:c4:
         9c:3f:e1:67:d7:6d:ba:52:bc:80:51:13:fe:03:38:77:16:ef:
         f2:e3:cf:99:65:74:a8:45:2e:8b:c2:11:3c:89:8b:ff:14:6d:
         e5:a3:c6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org