Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32312d3231203d3e20323632363137.roa
File:                     3138372e36322e3139322e302f32312d3231203d3e20323632363137.roa (raw, json)
Hash identifier:          u+oUfFrFfAOChk8nIPQYTEatZdXAsVJrgcm5LB4thfM=
Subject key identifier:   49:1D:D4:0C:C4:BC:8D:05:B0:9E:2C:42:7C:EB:C0:F9:60:8C:81:CA
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       33B1EA066B6DE5D78B9B885FDF4A4CAB360903A4
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32312d3231203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:02 +0000
ROA not before:           Thu 03 Aug 2023 13:04:02 +0000
ROA not after:            Thu 01 Aug 2024 13:09:02 +0000
asID:                     262617
IP address blocks:        187.62.192.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b1:ea:06:6b:6d:e5:d7:8b:9b:88:5f:df:4a:4c:ab:36:09:03:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:02 2023 GMT
            Not After : Aug  1 13:09:02 2024 GMT
        Subject: CN=491DD40CC4BC8D05B09E2C427CEBC0F9608C81CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:49:06:e4:da:a8:78:43:71:c3:d7:ba:16:94:
                    6c:b7:0a:3e:74:0f:8e:88:fb:4f:2c:b7:58:97:1c:
                    54:3e:69:b5:04:2b:75:9e:79:36:33:ba:bd:06:1d:
                    07:1c:df:58:05:67:35:ae:8f:14:c9:f9:36:14:22:
                    e6:dc:96:ad:2a:5a:9a:b8:8f:1a:39:3d:f4:14:cc:
                    8a:53:a5:b0:3e:41:b9:ae:a0:ff:75:77:8a:d5:06:
                    0b:18:1d:76:3f:22:f3:61:fb:fe:7f:96:c4:b3:ef:
                    8d:0d:a9:80:f5:df:1a:6a:ec:a5:06:46:b7:bd:4c:
                    cb:86:da:eb:73:04:16:84:0c:70:63:64:3a:c6:d9:
                    8b:8f:06:7a:9c:70:71:f0:46:9a:b6:19:df:35:70:
                    02:2f:eb:5b:ad:57:bd:4f:cb:51:8b:db:d0:77:56:
                    1d:7c:67:19:6e:5d:b8:da:85:30:11:bb:09:d4:50:
                    7b:97:4a:06:0d:da:ea:f7:6f:e1:45:7d:b6:63:a0:
                    da:1a:ef:38:0d:2f:9d:c9:3e:ca:88:4c:cf:60:75:
                    4e:d4:c3:1f:ca:6a:03:4c:c6:f1:b2:b2:a8:48:02:
                    83:5a:44:b4:5f:29:85:1e:84:ca:13:44:e6:da:f2:
                    30:f9:6a:86:6f:43:39:c6:2d:bc:80:2f:1d:83:af:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1D:D4:0C:C4:BC:8D:05:B0:9E:2C:42:7C:EB:C0:F9:60:8C:81:CA
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32312d3231203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:b4:38:6d:6d:18:52:f3:28:61:18:f2:07:4c:fd:a6:80:ac:
         e5:1d:1d:d1:92:e8:c2:fe:50:c7:d0:6e:fb:4f:24:d8:ba:9c:
         cb:6f:cd:1e:ae:76:e5:27:3e:62:d7:23:1d:6a:e8:7f:c8:e8:
         89:64:14:b3:13:cc:80:44:78:6f:8d:db:42:df:ed:96:be:f9:
         7b:ae:ac:98:f1:3a:ff:ce:87:c2:50:1f:71:e7:ed:67:3a:71:
         42:4a:49:bd:ac:ea:af:98:c9:42:cd:d8:54:6b:d6:d8:46:1b:
         0e:10:db:39:84:2f:aa:a2:44:84:39:82:c2:51:44:49:fb:4d:
         59:51:f1:0b:3a:22:1c:9b:1e:fe:3b:27:d8:d8:5c:b9:cf:38:
         3a:1c:2b:a3:f2:8f:ae:f9:ac:6a:0b:d8:93:3c:4c:4b:73:a9:
         2a:8a:47:dd:8d:c9:4a:83:0e:0a:57:39:01:05:b0:80:71:b6:
         02:4b:2c:cc:52:2c:02:13:32:a5:96:b1:53:c6:81:0b:fb:9a:
         c5:01:32:c1:c3:88:fc:a1:ba:20:21:bd:ea:cc:31:04:aa:ab:
         be:0e:4e:73:ba:db:84:74:02:8b:59:56:fd:70:a5:ea:2a:3b:
         86:cd:07:97:16:c4:01:b7:ca:b8:12:09:e8:7e:fb:02:ad:bf:
         90:14:d3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org