Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3139322e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          xXM7IlfwcCN5jToU4lgJYL54rTFsr1QriBQ2L7x9k+I=
Subject key identifier:   D9:C8:4F:BD:CF:F6:93:7C:36:0A:0E:3D:1E:53:BA:C9:44:C4:FA:DE
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       157B30FEBEF532196387F097CCEE316E7FDA1A88
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:04 +0000
ROA not before:           Thu 03 Aug 2023 13:04:04 +0000
ROA not after:            Thu 01 Aug 2024 13:09:04 +0000
asID:                     262617
IP address blocks:        187.62.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7b:30:fe:be:f5:32:19:63:87:f0:97:cc:ee:31:6e:7f:da:1a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:04 2023 GMT
            Not After : Aug  1 13:09:04 2024 GMT
        Subject: CN=D9C84FBDCFF6937C360A0E3D1E53BAC944C4FADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:5f:f1:29:9d:79:63:9c:27:3a:56:22:a9:
                    ac:82:3d:7c:6c:d7:2e:6a:67:ef:20:10:d0:b7:6e:
                    6c:68:aa:be:91:78:67:1a:3a:ff:6b:bd:6c:87:62:
                    73:f6:15:bd:0b:81:90:9f:c4:e5:a6:0d:c2:11:b4:
                    6c:fe:18:0b:ac:98:69:d6:80:cf:fe:3e:ae:2a:48:
                    94:b6:4f:16:70:74:e1:ce:6b:b6:5d:65:e6:94:38:
                    d7:76:68:fe:19:03:4d:25:e9:a9:02:d2:76:a3:b1:
                    46:8b:40:4f:dc:af:01:46:76:25:f4:d0:a0:ec:f4:
                    55:cb:4c:c0:3b:59:52:c7:f8:db:43:b8:f2:ba:97:
                    33:81:49:72:08:66:7d:e5:20:15:7a:3a:17:a9:35:
                    ca:c0:35:b8:f2:db:af:43:2e:35:bb:7c:24:02:3d:
                    48:8c:04:b7:2a:85:2f:d6:cd:0a:c5:0b:c8:7a:3b:
                    1f:6d:25:da:23:ed:0a:2f:00:0d:f3:2e:c7:5e:d2:
                    9a:77:e7:9e:f2:f6:c4:5d:fd:95:97:e4:26:91:60:
                    d5:61:3a:d4:0f:6e:f6:23:d9:61:17:c7:5d:d3:63:
                    55:f9:b9:77:5d:83:96:19:ee:53:33:0b:ac:d1:38:
                    d4:7f:5f:61:34:89:61:3a:03:0e:33:0e:92:f0:33:
                    c1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C8:4F:BD:CF:F6:93:7C:36:0A:0E:3D:1E:53:BA:C9:44:C4:FA:DE
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139322e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:61:bf:22:4d:91:20:f1:42:bf:ac:4c:d5:67:44:e4:0d:
         be:17:21:45:94:d5:92:4b:34:77:d4:a5:71:fa:0b:fe:1f:35:
         c4:87:4a:d9:4b:42:e9:43:3f:75:28:df:af:8a:9d:d2:7c:c2:
         5c:81:93:44:4e:d6:dd:15:b5:4b:60:21:78:55:e9:80:90:87:
         c7:74:31:c1:f5:13:82:9e:54:ae:e3:c8:6f:a5:e0:6c:3c:94:
         11:de:d4:f1:5d:03:c2:f4:eb:29:50:30:7a:4a:dd:ac:cd:b9:
         4c:09:08:2d:d9:64:95:bc:8d:8a:d0:41:cf:77:10:75:ee:e7:
         f3:eb:c3:ca:39:64:6b:89:64:eb:5c:6a:90:ac:07:95:80:09:
         72:6f:2b:ee:2f:70:22:3f:e7:c3:e4:fc:24:7e:9b:cc:e1:2c:
         9b:ad:f7:81:18:61:63:eb:fc:fa:05:dd:d5:c8:05:99:19:56:
         1a:fd:64:41:3a:12:9c:d3:65:ca:ef:ba:a5:a0:ea:74:40:5f:
         2c:c8:03:44:f8:f6:d5:04:4a:cb:63:b4:ae:3b:42:56:a3:8e:
         b5:75:ad:82:45:15:35:ac:5e:2c:21:f4:7e:35:3b:55:ea:32:
         28:c0:30:18:e9:d9:a4:1c:21:13:55:5c:31:dc:3d:9e:08:80:
         67:cc:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org