Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139342e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3139342e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          BfdPlWnnDRMMZyqfjqLviWqL8gpjC6m++9ycpEZQiYQ=
Subject key identifier:   41:FB:65:43:9A:BA:5D:42:9C:D3:D4:EF:C1:63:9B:4C:FE:31:32:E0
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       72153EF72178CED5C925D5CCA7686DDC074E89CA
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139342e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:10 +0000
ROA not before:           Thu 03 Aug 2023 13:04:10 +0000
ROA not after:            Thu 01 Aug 2024 13:09:10 +0000
asID:                     262617
IP address blocks:        187.62.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:15:3e:f7:21:78:ce:d5:c9:25:d5:cc:a7:68:6d:dc:07:4e:89:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:10 2023 GMT
            Not After : Aug  1 13:09:10 2024 GMT
        Subject: CN=41FB65439ABA5D429CD3D4EFC1639B4CFE3132E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:3f:4c:73:1b:4e:8d:58:9e:4d:2b:57:ec:
                    9c:36:48:e4:51:d4:61:b2:b1:d1:45:a3:d9:20:47:
                    c1:56:14:8b:1a:eb:f0:7a:f4:f4:94:c0:f4:fc:17:
                    0c:bc:cb:a9:09:4a:bd:34:82:34:32:59:21:d8:fb:
                    5f:4f:b7:6a:19:18:83:74:8c:59:a0:c6:89:40:15:
                    f0:31:33:72:7a:95:32:27:99:78:e3:02:1d:69:6d:
                    8a:75:d0:33:1c:90:02:dc:db:cb:0a:6e:e4:32:2d:
                    0e:64:aa:37:82:b1:3f:6c:67:d4:2e:14:75:83:ae:
                    c0:3f:ba:f4:84:07:86:8a:71:1f:72:d6:98:9d:80:
                    95:70:92:8d:39:05:bb:43:8a:b9:d3:72:5b:3a:5e:
                    ae:e0:42:af:f1:8c:94:1f:26:41:8e:13:31:61:03:
                    98:df:3a:c3:c5:77:95:da:13:b4:ae:f4:97:62:29:
                    e3:0d:53:62:c9:03:e2:e8:44:49:6f:ac:b9:60:c9:
                    3f:77:d0:fe:08:e7:89:51:f1:56:60:d4:24:33:06:
                    9e:ab:7a:5c:5f:4a:e8:21:24:fe:57:ea:85:e8:78:
                    1c:36:b8:6a:89:e9:0d:27:f2:26:82:7a:e6:5c:b7:
                    9d:df:89:4f:fe:97:9e:03:1b:a0:2b:d1:fe:80:ed:
                    c7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FB:65:43:9A:BA:5D:42:9C:D3:D4:EF:C1:63:9B:4C:FE:31:32:E0
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139342e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:47:0a:be:91:0a:c0:41:c9:76:a9:a8:f2:06:2d:8e:77:47:
         29:0b:1c:78:05:37:55:17:38:74:66:c2:e2:ca:e1:47:04:54:
         73:aa:00:69:84:a1:fa:b2:09:b4:11:5f:ce:72:fa:c8:6c:dd:
         2b:3b:ae:2a:41:8d:88:39:f0:ea:34:b3:d9:2c:d9:bc:4a:b6:
         7a:a7:71:53:cd:e9:5c:14:aa:75:09:ed:05:43:a7:b8:21:71:
         30:12:9c:eb:20:0c:0c:1f:79:1b:2d:2b:8d:73:76:c1:c8:b0:
         b7:6d:5c:1c:8d:46:88:4d:bf:7e:df:8e:c2:7c:58:bc:07:5c:
         ba:90:2f:65:45:5c:99:4e:61:4a:38:ce:c4:45:c8:1f:58:9d:
         d0:99:15:89:39:4d:10:b8:f0:a7:1d:f6:d2:cf:f7:95:73:e4:
         a9:f6:58:a4:0b:8d:36:06:5f:80:49:9a:91:e1:d7:d2:ba:90:
         71:49:fc:f3:73:0e:98:91:56:b8:2b:7d:1e:8c:5e:60:4d:f3:
         42:8c:fc:9d:e0:bf:ac:9f:99:7e:6e:b9:d4:eb:82:6d:3c:d9:
         f3:77:40:9c:6a:03:bd:90:17:c2:3e:38:1d:b3:39:dc:73:d0:
         e5:22:ea:df:e3:f6:78:f9:bc:b1:52:2a:fd:4e:50:4c:f2:09:
         1b:ff:5c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org