Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139362e302f32322d3232203d3e20323632363137.roa
File:                     3138372e36322e3139362e302f32322d3232203d3e20323632363137.roa (raw, json)
Hash identifier:          D5p6/feGoO/gPm46+aKszLTkm0JfC888kpLcWmPRJIE=
Subject key identifier:   5C:45:FA:5B:FB:2B:13:00:C3:24:53:3F:10:91:01:43:3A:2A:8A:CE
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       17CD5F9C9756631F281AC91CEF82A99198A16BC4
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139362e302f32322d3232203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:08:58 +0000
ROA not before:           Thu 03 Aug 2023 13:03:58 +0000
ROA not after:            Thu 01 Aug 2024 13:08:58 +0000
asID:                     262617
IP address blocks:        187.62.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cd:5f:9c:97:56:63:1f:28:1a:c9:1c:ef:82:a9:91:98:a1:6b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:03:58 2023 GMT
            Not After : Aug  1 13:08:58 2024 GMT
        Subject: CN=5C45FA5BFB2B1300C324533F109101433A2A8ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b2:61:20:66:bd:29:a7:dc:c5:c9:36:c2:af:
                    09:cf:95:5a:db:2d:50:01:fb:c7:b1:66:6a:da:0e:
                    9c:12:75:5c:5e:73:b2:02:23:3a:9c:86:65:55:d2:
                    af:d5:91:62:c5:c8:6b:70:dc:23:21:be:d2:13:9d:
                    6c:5f:64:a8:a9:59:13:1b:48:ed:c3:9e:9a:74:c4:
                    57:ca:58:28:39:30:e8:c1:f0:e7:e7:05:e6:ff:80:
                    6d:da:93:3e:37:a4:0c:5b:66:a2:48:d2:43:21:bd:
                    b3:39:00:a4:a8:35:ac:fc:e4:48:36:1d:45:d6:4a:
                    28:19:84:d1:c9:49:4b:9c:2b:5b:f7:df:03:15:6e:
                    16:9d:b1:7f:1d:cf:fc:37:a5:e3:f4:a7:5b:98:00:
                    f6:07:1c:7c:36:0a:c4:24:bd:70:e1:0a:b4:91:a8:
                    c7:02:d3:36:7e:ac:af:5c:b4:38:24:01:62:0e:ee:
                    78:19:e4:96:65:af:01:0b:82:83:62:d1:89:55:f6:
                    01:ab:ea:3c:68:b4:c4:60:31:09:ef:2f:47:b0:73:
                    3a:c9:e7:7c:fa:86:d3:95:89:8c:f2:98:20:20:63:
                    ec:12:13:88:a8:ed:25:b8:39:02:4e:fa:6e:60:2e:
                    67:2c:62:63:65:b7:fd:fc:30:da:e0:65:22:55:18:
                    e6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:45:FA:5B:FB:2B:13:00:C3:24:53:3F:10:91:01:43:3A:2A:8A:CE
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139362e302f32322d3232203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:e1:05:83:5f:52:73:5e:d1:7e:b6:bf:c0:91:1a:1c:0f:0f:
         fd:66:f0:49:9f:c3:82:ca:fd:32:2c:2d:b5:c7:bc:4d:26:cc:
         5a:9d:76:80:22:85:8f:39:52:be:4d:80:8d:58:a6:4e:8f:92:
         98:d5:c5:55:54:0b:48:2e:81:83:9e:75:48:b0:41:5f:d0:55:
         4e:3a:9e:1a:42:a4:35:f7:fe:eb:b0:be:34:45:33:dd:c8:be:
         d6:22:e6:5d:c1:f9:db:c9:3d:fd:64:e8:16:bb:01:55:ae:c9:
         72:69:24:51:21:3a:06:72:12:d9:10:10:71:ad:97:9a:89:e2:
         53:52:da:e2:5f:2b:2a:c4:c8:55:b8:b8:68:78:0c:5e:f2:76:
         5d:0b:c9:e1:72:0b:41:ab:62:84:e6:6e:65:e1:10:ff:5e:33:
         17:0f:14:16:db:a9:39:e2:4c:02:a1:4a:e6:f6:32:76:26:52:
         73:6f:64:55:f6:56:b1:fa:96:25:37:46:52:fa:0b:7e:1d:26:
         69:07:25:5b:0f:a3:6b:a9:be:7f:d0:f1:99:c8:b7:f5:5d:60:
         32:f1:31:e7:cd:61:bb:8b:e1:b0:2c:c6:bf:a7:3d:96:58:fe:
         ea:06:d0:90:cc:93:fc:a9:d2:1b:44:e4:b0:b6:f3:3a:df:9e:
         ab:d6:7e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org