Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139362e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3139362e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          aglXetwxHu6RcpFwiOs0uu9sshGMS0GdpZtZ+I8Gxrs=
Subject key identifier:   C0:24:8B:5F:20:9E:3D:93:62:28:78:5C:4E:2D:E0:68:11:13:AF:65
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       7E83D1373BEBD20B18F7F1A50C66A17827E41915
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139362e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:04 +0000
ROA not before:           Thu 03 Aug 2023 13:04:04 +0000
ROA not after:            Thu 01 Aug 2024 13:09:04 +0000
asID:                     262617
IP address blocks:        187.62.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:83:d1:37:3b:eb:d2:0b:18:f7:f1:a5:0c:66:a1:78:27:e4:19:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:04 2023 GMT
            Not After : Aug  1 13:09:04 2024 GMT
        Subject: CN=C0248B5F209E3D936228785C4E2DE0681113AF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:86:ae:0f:d9:bb:da:d1:c7:84:c6:a9:39:13:
                    91:83:ef:01:dc:72:92:55:b7:aa:07:34:b8:65:37:
                    ea:cc:92:eb:73:e5:e0:fa:a2:26:fb:09:ba:15:6e:
                    bb:b6:c3:c7:4f:89:b6:f1:33:3d:8d:b9:36:d9:45:
                    53:fc:6b:bc:39:0e:ff:88:66:de:b2:ab:e1:a3:36:
                    de:63:f7:fe:c3:05:a9:e0:36:46:a7:c0:9b:86:dc:
                    42:fc:fb:6a:d2:58:c2:69:39:8c:1f:be:34:3f:f2:
                    32:ea:0e:30:60:2d:07:37:5d:b2:a0:62:0e:1a:dd:
                    b3:87:1e:5f:3a:49:92:26:65:0d:09:6c:a7:38:03:
                    1b:be:97:f7:74:09:40:94:66:8d:7a:79:04:00:59:
                    41:67:1c:28:3b:fa:1c:90:01:dd:f1:5e:8c:3c:78:
                    d0:48:79:15:44:e4:15:fb:54:9f:4b:81:e2:bb:8a:
                    14:cd:ee:cc:52:f0:8b:65:9a:3b:e5:1d:68:06:c7:
                    c1:5e:56:d2:c2:d6:c0:96:29:9e:8e:07:86:37:24:
                    05:63:1d:20:9a:c2:c0:72:f1:27:7c:18:33:33:09:
                    13:56:5c:19:f1:3a:ee:cc:29:b4:e4:eb:d0:34:5f:
                    e2:43:9b:ef:11:84:f2:d2:90:9c:bf:d8:86:dd:c2:
                    c6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:24:8B:5F:20:9E:3D:93:62:28:78:5C:4E:2D:E0:68:11:13:AF:65
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139362e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:32:19:fe:93:88:d3:64:c4:e3:d1:15:ff:33:f2:a3:be:26:
         6a:85:8a:18:b4:d6:3b:82:3c:af:6c:70:0d:ca:fe:58:45:6b:
         93:22:bd:49:cf:97:ba:fb:13:4c:1b:33:36:f9:a4:ac:fa:3b:
         d1:a3:93:a8:73:71:f3:72:12:0d:3d:7b:a7:ca:c0:d0:d3:69:
         96:ad:01:d4:12:f3:4b:27:f7:99:13:27:63:b7:da:54:68:4c:
         30:e5:81:9d:3b:9b:e8:74:53:8b:66:da:6c:8a:de:ce:8e:71:
         65:64:71:3b:6b:2d:a6:13:a1:1e:32:b1:21:ad:43:bc:f6:a7:
         9b:ad:7a:24:99:ee:82:d8:b7:5a:ca:6a:2c:c5:49:5d:d7:0e:
         99:fc:5f:53:22:24:86:ed:64:77:00:46:06:dc:c7:0e:ed:48:
         95:2f:de:56:b8:89:e6:f9:d0:48:0a:5e:e9:43:93:c7:16:1c:
         ce:2d:2a:27:b4:e1:53:e3:5b:6d:9e:9b:4b:21:c2:3d:c3:67:
         f7:ab:af:10:8c:f9:b0:75:05:b9:ef:82:ec:66:77:86:6f:73:
         3c:0b:71:af:a2:c5:6d:51:ee:6f:1e:45:7d:4e:64:b6:30:cd:
         b5:47:b9:97:79:ac:75:f2:46:f4:8e:4a:13:83:99:62:eb:04:
         28:b5:61:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org