Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa
File:                     3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier:          12yVgJDaK5gHw0joZcUlNEMmnSIHkQy2oo8CIARcET4=
Subject key identifier:   15:8E:31:8F:69:D0:53:89:EC:3E:11:22:44:FA:FC:15:56:6E:0F:B3
Certificate issuer:       /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial:       5435A6B13D25669588CAB32D037CE67C3FCAE126
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa
Signing time:             Fri 03 May 2024 20:10:33 +0000
ROA not before:           Fri 03 May 2024 20:05:33 +0000
ROA not after:            Fri 02 May 2025 20:10:33 +0000
asID:                     28667
IP address blocks:        187.121.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:35:a6:b1:3d:25:66:95:88:ca:b3:2d:03:7c:e6:7c:3f:ca:e1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
        Validity
            Not Before: May  3 20:05:33 2024 GMT
            Not After : May  2 20:10:33 2025 GMT
        Subject: CN=158E318F69D05389EC3E112244FAFC15566E0FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:db:62:ad:94:1d:32:aa:e3:59:b5:e0:39:94:
                    c4:c2:da:eb:99:88:68:72:c8:ba:01:7f:1b:bd:fe:
                    a3:12:56:6c:2b:15:d8:2d:92:06:1f:02:bf:d4:0e:
                    f4:40:44:7a:0e:2b:16:42:14:b8:09:aa:54:b0:78:
                    45:b0:eb:d7:eb:5c:54:cc:95:dc:1d:22:cf:f8:06:
                    2e:7f:de:5c:5a:58:9c:94:92:f1:ae:ba:d5:ea:5d:
                    91:8e:ec:eb:e9:6c:32:b8:93:70:38:a1:88:c9:86:
                    95:71:c9:32:97:b8:74:24:da:52:eb:ac:1e:b2:65:
                    d3:78:50:c3:73:a5:cc:d6:1d:42:84:35:21:f7:86:
                    e8:c2:a7:a2:20:8b:06:be:9c:02:7f:9a:ed:6d:2d:
                    5f:b2:01:6a:4c:ae:d5:6e:a8:31:22:2f:ac:cb:61:
                    71:be:fc:de:4f:92:09:38:f5:38:4d:85:2c:7d:34:
                    0a:b4:a0:cf:e9:fb:53:dc:00:54:5e:b6:54:dd:e6:
                    5f:ff:ca:47:3a:28:73:32:e3:db:26:c2:5d:13:be:
                    a4:7c:12:5d:4f:24:84:75:23:11:4b:c4:59:5b:28:
                    3b:7e:70:f5:48:39:40:a3:62:9d:fa:26:7e:e7:af:
                    63:b2:ba:b5:44:63:ae:4c:73:3a:d0:00:89:38:e8:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8E:31:8F:69:D0:53:89:EC:3E:11:22:44:FA:FC:15:56:6E:0F:B3
            X509v3 Authority Key Identifier:
                keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:15:c3:07:30:39:8b:e3:6d:76:35:b0:78:fd:5c:0e:56:d7:
         2f:b0:42:eb:ce:65:56:e8:95:46:39:76:06:65:51:07:43:5e:
         8b:41:70:b2:a8:e8:0a:df:41:45:ad:5d:03:f3:53:49:63:e1:
         3d:0c:27:fa:58:5f:b0:7e:1e:dd:0d:e0:fd:a1:aa:99:b3:64:
         62:f0:72:73:4a:b2:e1:c6:72:fd:d4:4d:22:5e:46:48:2e:d6:
         07:25:6e:57:a3:56:fe:85:c6:70:d9:83:65:43:c7:b6:ff:21:
         e0:4b:4a:39:bb:d0:7b:64:b4:60:6c:87:42:69:0e:df:83:a9:
         e3:a2:c6:68:93:71:a2:35:89:4f:e2:e7:09:81:f1:a7:49:d3:
         66:50:05:b2:83:53:53:e1:62:b0:89:97:a7:34:8b:a0:db:a7:
         72:a2:08:45:31:ee:9e:e6:aa:cd:9e:82:fd:de:3f:0c:05:d5:
         8c:c5:70:e4:62:9c:06:40:ab:55:19:ce:d0:22:f6:f8:3a:ff:
         f8:eb:fa:5b:37:03:45:69:0b:dc:ad:46:36:29:3b:f5:25:5e:
         21:cd:7a:fc:b2:5a:9c:18:59:82:75:9e:d8:7d:4a:84:df:13:
         0a:20:b3:cd:47:46:d8:27:27:8f:97:7a:0a:6c:4d:8a:f7:92:
         bf:d0:f8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org