Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjvqBPCqDwGJ6D8J6i7DjofsvxkCed3TDBFWZBCi154h/0/3138372e39352e3137362e302f32302d3234203d3e203533303930.roa
File:                     3138372e39352e3137362e302f32302d3234203d3e203533303930.roa (raw, json)
Hash identifier:          hKy5LNVKqP46PVI1ynycpmxIdMUky/fi9yIwpDe1kSY=
Subject key identifier:   6B:97:44:BC:24:B3:DB:98:E7:37:B4:07:FA:B4:36:42:2A:2E:00:06
Certificate issuer:       /CN=81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1
Certificate serial:       05DBE0B8A0C9241B27D5AE0CE2460BB1EA6948A2
Authority key identifier: 81:C1:E2:BA:A0:DC:82:F9:ED:22:47:D4:E5:D0:6F:2B:E3:1B:F7:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjvqBPCqDwGJ6D8J6i7DjofsvxkCed3TDBFWZBCi154h/0/3138372e39352e3137362e302f32302d3234203d3e203533303930.roa
Signing time:             Tue 22 Nov 2022 17:16:00 +0000
ROA not before:           Tue 22 Nov 2022 17:11:00 +0000
ROA not after:            Tue 21 Nov 2023 17:16:00 +0000
asID:                     53090
IP address blocks:        187.95.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:db:e0:b8:a0:c9:24:1b:27:d5:ae:0c:e2:46:0b:b1:ea:69:48:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1
        Validity
            Not Before: Nov 22 17:11:00 2022 GMT
            Not After : Nov 21 17:16:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:2a:d1:d1:50:75:36:40:9d:94:f0:8b:0c:
                    2f:8e:4d:0a:9a:69:4d:1b:01:8c:31:b7:e6:1e:3e:
                    62:92:34:d7:89:3f:fb:26:e8:85:64:dd:5d:86:a4:
                    51:86:63:b8:73:48:14:49:01:0d:cc:6b:58:d5:89:
                    c3:48:de:5b:a4:0f:87:c4:bf:53:43:31:d4:ba:e2:
                    31:9d:09:e9:04:f4:d2:1a:d4:e1:b6:d8:fe:38:36:
                    51:d0:5b:fa:c2:d6:da:fe:f3:47:6e:04:37:1b:26:
                    f6:3f:09:f1:9f:d2:49:1a:0c:df:bf:d1:78:70:c6:
                    8a:fd:06:af:fe:14:b5:b5:37:8f:dc:80:2b:aa:58:
                    fc:9f:d1:38:20:53:a4:cc:3b:82:a5:b5:20:cf:ec:
                    ed:13:38:00:a3:13:68:95:80:7d:a7:dc:19:43:0c:
                    96:a8:bf:f2:8a:a0:4d:c2:69:60:08:d7:b6:4a:f2:
                    8b:ac:e3:69:03:83:b3:a3:47:7d:97:bf:25:c0:68:
                    6a:88:cf:4f:ca:d1:f0:80:02:06:14:0b:d2:ca:a8:
                    24:d2:27:bf:e7:f8:f6:ce:10:26:b0:63:77:0d:d7:
                    0a:3f:e0:9f:9e:b0:c6:80:16:88:a3:3b:6e:99:fd:
                    13:0b:37:29:17:51:5f:7d:4d:ca:2f:de:7f:a9:76:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:97:44:BC:24:B3:DB:98:E7:37:B4:07:FA:B4:36:42:2A:2E:00:06
            X509v3 Authority Key Identifier:
                keyid:81:C1:E2:BA:A0:DC:82:F9:ED:22:47:D4:E5:D0:6F:2B:E3:1B:F7:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjvqBPCqDwGJ6D8J6i7DjofsvxkCed3TDBFWZBCi154h/0/81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjvqBPCqDwGJ6D8J6i7DjofsvxkCed3TDBFWZBCi154h/0/3138372e39352e3137362e302f32302d3234203d3e203533303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d2:ed:73:80:98:6b:00:b8:d9:26:32:c9:37:24:a4:36:6f:06:
         ab:00:93:f2:e7:d9:3c:c8:24:69:ea:96:d8:dc:4b:2c:6e:74:
         64:3a:e3:4a:e2:51:1e:41:70:47:e5:b8:8f:b8:29:5b:34:9d:
         4e:45:a2:20:d5:44:ba:09:14:a5:60:b7:ea:e1:33:03:62:05:
         34:58:04:b2:8c:b6:ad:ff:bb:be:9f:c1:24:d4:bd:01:e8:bd:
         78:8d:51:4f:82:05:31:fd:03:85:f6:68:f4:21:29:9b:36:2a:
         d2:7d:c9:ad:74:96:bb:fb:63:b3:e5:e1:e0:d8:bc:78:27:57:
         01:77:e3:5a:94:34:9f:33:bf:e6:be:a2:6a:7b:11:a2:20:2d:
         53:6b:f3:99:08:0d:63:37:47:74:93:54:aa:7b:52:ea:62:5a:
         d0:08:23:0c:22:dc:63:dc:e3:78:a4:d1:6a:fe:23:e2:fe:30:
         a7:7f:27:68:43:02:c6:7e:48:ab:f7:a8:98:90:15:f0:7d:71:
         08:c4:09:0e:39:8d:9d:fc:56:46:0c:0e:5e:fc:48:36:81:f6:
         f6:ab:97:db:e3:00:60:86:4c:5f:08:4d:8d:ff:5f:ce:c0:1b:
         03:5f:24:b6:44:35:15:9d:4c:e7:5d:3f:f4:92:51:60:c3:73:
         78:03:c3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org