Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139362e302f32332d3233203d3e20323632363137.roa
File:                     3138372e36322e3139362e302f32332d3233203d3e20323632363137.roa (raw, json)
Hash identifier:          UEQ7O44HnPfVKXSFP9Z39rN5ubMs9nt19CKWdfoaF1I=
Subject key identifier:   D7:A1:9D:9B:25:D1:3A:6C:B9:77:9F:64:4C:03:44:60:9E:6E:A4:D3
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       4E3738864621AA9A6BE24D04C1FEA9BC71132C3D
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139362e302f32332d3233203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:05 +0000
ROA not before:           Thu 03 Aug 2023 13:04:05 +0000
ROA not after:            Thu 01 Aug 2024 13:09:05 +0000
asID:                     262617
IP address blocks:        187.62.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:37:38:86:46:21:aa:9a:6b:e2:4d:04:c1:fe:a9:bc:71:13:2c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:05 2023 GMT
            Not After : Aug  1 13:09:05 2024 GMT
        Subject: CN=D7A19D9B25D13A6CB9779F644C0344609E6EA4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:eb:d1:66:72:4a:61:7d:a3:d1:5e:7b:2d:
                    35:02:94:ac:37:76:3c:18:1f:11:fc:81:41:12:05:
                    4c:75:5b:08:61:18:53:38:c3:49:8d:28:3d:0a:63:
                    59:d2:35:ff:e0:11:9e:12:3c:7c:f4:54:b3:89:7a:
                    08:dd:1d:9d:ed:34:fe:27:f2:74:a0:d2:4d:63:4c:
                    ec:bf:67:7b:57:26:08:8b:f4:1a:42:cc:9a:85:35:
                    c6:82:87:83:7e:eb:cd:d9:3a:2d:df:f0:7c:88:5e:
                    bb:12:a8:83:d5:ba:2b:13:c8:94:30:0c:11:96:a2:
                    e0:cc:e6:57:51:d6:59:22:a3:94:b0:5e:8c:23:06:
                    54:8c:a0:98:31:9e:b1:3c:09:4e:14:e6:5c:3d:d0:
                    af:8f:25:1c:44:12:c0:6f:b7:71:8d:1b:dd:69:5a:
                    e0:83:a3:4c:f1:b1:af:d9:48:a1:c4:9c:07:40:c0:
                    71:c6:18:66:4a:bb:74:3a:b6:b6:a5:d8:d8:a7:33:
                    45:da:ef:4f:9f:1d:3c:4c:73:55:f6:9f:e5:d8:9b:
                    99:82:be:7b:11:8d:bb:25:dd:b0:2a:6e:a2:64:b1:
                    33:7e:2d:cc:57:7a:dd:c3:48:68:ba:97:bb:76:04:
                    28:c0:1b:13:c3:1c:3a:dd:3b:97:83:b2:a4:28:2d:
                    e9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A1:9D:9B:25:D1:3A:6C:B9:77:9F:64:4C:03:44:60:9E:6E:A4:D3
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139362e302f32332d3233203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:27:b5:ce:13:28:81:e0:40:23:2e:61:f9:01:c7:ce:3f:4e:
         f9:7b:f2:06:4d:6c:74:67:30:f9:78:e5:d6:33:e0:01:11:65:
         78:e1:fb:06:8c:5b:9c:3e:26:12:1c:90:6f:dd:48:10:39:a2:
         b5:ed:11:b0:29:d7:84:75:fd:73:ec:20:65:5e:e9:46:42:ca:
         37:d4:ad:11:fa:99:61:93:16:3b:eb:ec:64:4d:71:46:c7:cd:
         ff:17:fb:87:e9:e4:3a:9b:b5:c8:bb:39:b2:65:53:9a:14:cb:
         25:54:bc:b6:4a:af:4a:27:f8:a6:b6:af:44:4c:38:23:8c:73:
         00:bf:f0:c3:16:37:03:83:fe:2f:a7:f6:31:73:81:d0:19:43:
         a0:eb:0d:5c:b9:8d:05:0d:a2:9a:95:de:de:b4:09:f1:db:d8:
         8e:a1:f3:35:3e:54:0f:16:51:aa:6c:d6:8a:61:e2:11:7a:3d:
         e3:f0:92:24:36:6b:24:a5:53:14:21:77:0f:9a:fa:27:34:a6:
         70:f1:9b:e2:e3:27:fc:47:aa:c1:69:97:e6:68:97:44:12:82:
         65:69:a5:55:5e:fd:73:b0:c9:b3:4e:19:c9:2f:0d:a2:cd:d7:
         fc:8c:6c:7d:e5:92:98:98:bb:ff:fc:8b:d6:ba:c3:cb:7c:73:
         e5:59:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org