Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/2/3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa
File:                     3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa (raw, json)
Hash identifier:          1PgGERrQW7S2cNhHLI4+lbbZptmQDKlE+AUj5En+Y3s=
Subject key identifier:   0A:6B:50:7E:C9:EE:D4:25:F4:07:CB:99:9A:D4:39:E5:D6:8B:00:DE
Certificate issuer:       /CN=2B36A526D06D86847A393BEA10A2E899D81E57EE
Certificate serial:       40AEEC1A1E44C80EF12654412C71D1967728601F
Authority key identifier: 2B:36:A5:26:D0:6D:86:84:7A:39:3B:EA:10:A2:E8:99:D8:1E:57:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B36A526D06D86847A393BEA10A2E899D81E57EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/2/3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa
Signing time:             Tue 10 Oct 2023 12:24:07 +0000
ROA not before:           Tue 10 Oct 2023 12:19:07 +0000
ROA not after:            Tue 08 Oct 2024 12:24:07 +0000
asID:                     262676
IP address blocks:        187.73.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ae:ec:1a:1e:44:c8:0e:f1:26:54:41:2c:71:d1:96:77:28:60:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B36A526D06D86847A393BEA10A2E899D81E57EE
        Validity
            Not Before: Oct 10 12:19:07 2023 GMT
            Not After : Oct  8 12:24:07 2024 GMT
        Subject: CN=0A6B507EC9EED425F407CB999AD439E5D68B00DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1e:26:78:b9:18:a8:25:f1:da:2e:ad:ed:d5:
                    c6:89:ff:c9:0a:1d:13:5f:21:d4:07:45:6b:82:84:
                    e9:dc:f2:b8:5d:cf:c5:38:fe:03:52:06:4f:51:6a:
                    c5:e9:58:a2:ed:3d:65:8c:6e:07:4d:d2:39:ef:03:
                    ff:12:8e:b4:f9:23:15:8f:72:c7:46:1d:7d:e5:dc:
                    d9:43:7d:ac:cd:1b:fa:dc:7b:be:6e:10:0e:ab:7a:
                    23:8d:56:ac:0e:37:c0:e8:a4:4d:4e:66:75:3b:22:
                    ee:63:ff:ea:39:48:df:18:23:e0:9c:b9:b0:6c:28:
                    bb:d7:7b:13:5e:fe:4c:08:82:11:8c:23:e1:38:92:
                    7b:f4:30:ea:b8:9f:b2:67:07:83:30:90:6b:30:9a:
                    32:38:4f:7e:5a:32:75:aa:e9:e7:96:d2:a6:b0:f6:
                    89:27:8d:08:b3:82:c1:c8:5c:a8:09:12:ad:78:30:
                    a4:f4:4e:35:17:bf:3e:a1:8a:a4:ef:17:a1:1b:a0:
                    27:3d:fe:5a:f6:94:83:83:4b:d1:40:d2:c0:d2:99:
                    b8:b6:0b:f7:b3:e1:49:fb:da:32:38:41:45:34:ec:
                    d9:b0:f1:77:5a:b5:75:2a:73:ee:a6:47:6f:7a:e1:
                    7f:ef:4e:c5:04:47:3b:39:a7:e6:f9:12:8f:ae:fe:
                    f8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6B:50:7E:C9:EE:D4:25:F4:07:CB:99:9A:D4:39:E5:D6:8B:00:DE
            X509v3 Authority Key Identifier:
                keyid:2B:36:A5:26:D0:6D:86:84:7A:39:3B:EA:10:A2:E8:99:D8:1E:57:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/2/2B36A526D06D86847A393BEA10A2E899D81E57EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B36A526D06D86847A393BEA10A2E899D81E57EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/2/3138372e37332e3232342e302f32302d3234203d3e20323632363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:77:56:21:e7:bf:31:23:0d:4a:54:e4:fb:27:b4:10:c7:44:
         fe:4c:96:01:5c:fa:17:7a:64:f2:5c:b8:bf:8c:10:25:72:63:
         3c:c3:b7:9b:63:fe:a0:41:f2:f7:b7:23:4d:33:8b:7b:87:ab:
         39:f2:a9:1a:aa:f8:e1:88:f7:67:a5:7c:77:7e:f1:1f:97:8f:
         f1:ae:98:5e:b9:af:5e:1b:d0:46:8c:c1:b3:cb:4a:8c:09:ad:
         d9:b6:8c:d1:eb:a1:ab:10:ba:97:70:d8:5a:85:42:ba:7c:d9:
         57:7b:d2:02:86:cf:52:28:a9:bb:fa:1b:4d:a3:82:bc:c4:e8:
         33:fd:81:17:9b:ec:7a:3c:25:30:e5:94:6c:45:af:b5:73:6d:
         01:08:f5:52:c9:a8:5a:60:9d:cb:90:a3:e5:c7:d8:28:43:d6:
         ef:f4:ce:67:69:e0:b7:53:54:a4:53:b2:78:cd:c5:90:56:aa:
         34:78:a2:e3:21:0c:a7:2d:1d:89:85:60:15:b6:2a:bc:09:28:
         9a:f1:79:f9:af:03:45:90:c3:dd:13:ed:ec:f2:cc:5e:ea:02:
         5b:a3:7b:2b:b1:5c:90:5e:51:49:9a:54:48:4a:dd:f7:b4:7c:
         66:33:63:0c:42:77:9d:4b:2a:22:b4:e3:c5:e8:cf:16:a6:7d:
         ad:25:23:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org