Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjvqBPCqDwGJ6D8J6i7DjofsvxkCed3TDBFWZBCi154h/0/3138372e39352e34382e302f32302d3234203d3e203533303930.roa
File:                     3138372e39352e34382e302f32302d3234203d3e203533303930.roa (raw, json)
Hash identifier:          ZyigOyFcqrvDYFIRV8QKHYRtAnqksdN7Z/J0Zgdxc5Q=
Subject key identifier:   2D:DD:55:DE:2E:57:84:C3:2E:20:18:F4:0D:B1:3E:52:BB:26:4C:13
Certificate issuer:       /CN=81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1
Certificate serial:       71198C5C4065767B25BD5673461B9C1FB564B4EA
Authority key identifier: 81:C1:E2:BA:A0:DC:82:F9:ED:22:47:D4:E5:D0:6F:2B:E3:1B:F7:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjvqBPCqDwGJ6D8J6i7DjofsvxkCed3TDBFWZBCi154h/0/3138372e39352e34382e302f32302d3234203d3e203533303930.roa
Signing time:             Tue 22 Nov 2022 17:16:00 +0000
ROA not before:           Tue 22 Nov 2022 17:11:00 +0000
ROA not after:            Tue 21 Nov 2023 17:16:00 +0000
asID:                     53090
IP address blocks:        187.95.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:19:8c:5c:40:65:76:7b:25:bd:56:73:46:1b:9c:1f:b5:64:b4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1
        Validity
            Not Before: Nov 22 17:11:00 2022 GMT
            Not After : Nov 21 17:16:00 2023 GMT
        Subject: CN=3082010A0282010100AEE09B6A9DC0830EF320F56FA3C4EA1013233D88EAD7D66B192E08F0E137EC93A4D125664D2AB59298BD20E63CF014094FA6ACEB074F870D9F4007081ECD7ABC79134AC5DA1B46891F827304690C5DBA7125B8B76745CCB4E9208AA87AE20B9347988A03241F5FCCC6C8A40E6683D9AD4D06F4AF5FD4FEE811CDB2376C9CD7B7D77BA5C5E47BEB2FF9157F695E752D90ECD38DFE1F030984654A8A70A58608C7B8613B5C02F48D6420E454E12CDBE0BE859B88A0D61DB8A89EA74B5CF35103202D4FBC7671E3C0A9878E168A10F82D4641C1E740E7BA2376B73946DA0577C45B3555C140E5E23312FCD355DAE634181255D6140910E4CFC1A908C93D7D1853890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:9b:6a:9d:c0:83:0e:f3:20:f5:6f:a3:c4:
                    ea:10:13:23:3d:88:ea:d7:d6:6b:19:2e:08:f0:e1:
                    37:ec:93:a4:d1:25:66:4d:2a:b5:92:98:bd:20:e6:
                    3c:f0:14:09:4f:a6:ac:eb:07:4f:87:0d:9f:40:07:
                    08:1e:cd:7a:bc:79:13:4a:c5:da:1b:46:89:1f:82:
                    73:04:69:0c:5d:ba:71:25:b8:b7:67:45:cc:b4:e9:
                    20:8a:a8:7a:e2:0b:93:47:98:8a:03:24:1f:5f:cc:
                    c6:c8:a4:0e:66:83:d9:ad:4d:06:f4:af:5f:d4:fe:
                    e8:11:cd:b2:37:6c:9c:d7:b7:d7:7b:a5:c5:e4:7b:
                    eb:2f:f9:15:7f:69:5e:75:2d:90:ec:d3:8d:fe:1f:
                    03:09:84:65:4a:8a:70:a5:86:08:c7:b8:61:3b:5c:
                    02:f4:8d:64:20:e4:54:e1:2c:db:e0:be:85:9b:88:
                    a0:d6:1d:b8:a8:9e:a7:4b:5c:f3:51:03:20:2d:4f:
                    bc:76:71:e3:c0:a9:87:8e:16:8a:10:f8:2d:46:41:
                    c1:e7:40:e7:ba:23:76:b7:39:46:da:05:77:c4:5b:
                    35:55:c1:40:e5:e2:33:12:fc:d3:55:da:e6:34:18:
                    12:55:d6:14:09:10:e4:cf:c1:a9:08:c9:3d:7d:18:
                    53:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DD:55:DE:2E:57:84:C3:2E:20:18:F4:0D:B1:3E:52:BB:26:4C:13
            X509v3 Authority Key Identifier:
                keyid:81:C1:E2:BA:A0:DC:82:F9:ED:22:47:D4:E5:D0:6F:2B:E3:1B:F7:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjvqBPCqDwGJ6D8J6i7DjofsvxkCed3TDBFWZBCi154h/0/81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/81C1E2BAA0DC82F9ED2247D4E5D06F2BE31BF7A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjvqBPCqDwGJ6D8J6i7DjofsvxkCed3TDBFWZBCi154h/0/3138372e39352e34382e302f32302d3234203d3e203533303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:6c:77:9b:7f:12:60:df:9c:f8:8f:f4:c7:0e:ed:d4:85:1d:
         af:a2:07:e1:a4:56:32:9c:de:c0:06:9e:71:38:26:20:fc:8a:
         2b:16:03:94:68:10:70:c7:68:73:c3:9d:85:2e:9b:4f:5f:79:
         97:75:5d:cc:b8:40:3a:a8:99:d2:b7:9b:59:06:07:49:3e:20:
         ad:23:d0:49:ae:9c:84:79:d1:04:78:5c:0c:20:05:41:da:d0:
         1e:65:3a:43:bd:fc:f4:8e:7c:79:7e:ae:8b:2f:ce:17:19:99:
         3a:dd:ed:d5:3e:03:75:73:9a:65:aa:67:50:67:36:9e:a7:5a:
         7a:72:c0:6c:c4:83:ad:c2:f5:85:63:1e:e4:ad:30:70:67:46:
         b5:36:72:d3:8d:b9:69:0e:2c:6a:1b:70:de:1a:fa:4a:70:1d:
         03:60:e9:d4:51:09:02:5c:49:63:e4:82:9e:c9:8f:27:eb:e9:
         e4:95:3b:ad:38:40:43:9d:ec:0c:77:03:62:e9:2e:d4:dd:f8:
         21:64:8c:0d:17:d7:02:eb:2e:cd:8c:0c:e0:50:a7:bf:a6:54:
         43:1d:57:43:a1:b5:0d:f2:7a:c9:78:b4:91:74:02:60:a5:04:
         18:74:98:a3:c7:7e:27:ee:e6:c5:a5:e7:49:54:d1:8b:a1:32:
         d4:6c:3d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org