Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139382e302f32332d3233203d3e20323632363137.roa
File:                     3138372e36322e3139382e302f32332d3233203d3e20323632363137.roa (raw, json)
Hash identifier:          vHV+g9tFRSwxlecooPPZVNybPa+9I17wMRgFZ4bCzO8=
Subject key identifier:   98:59:51:DE:00:12:CC:80:F5:CD:68:D4:49:E1:D2:4C:ED:80:1A:8A
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       6683D978CAD173DF30AA9E55D0FBF605CACAA68B
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139382e302f32332d3233203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:18 +0000
ROA not before:           Thu 03 Aug 2023 13:04:18 +0000
ROA not after:            Thu 01 Aug 2024 13:09:18 +0000
asID:                     262617
IP address blocks:        187.62.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:83:d9:78:ca:d1:73:df:30:aa:9e:55:d0:fb:f6:05:ca:ca:a6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:18 2023 GMT
            Not After : Aug  1 13:09:18 2024 GMT
        Subject: CN=985951DE0012CC80F5CD68D449E1D24CED801A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e6:a3:0a:1e:84:2b:ea:49:06:93:ac:b0:67:
                    83:61:9f:5a:6d:4e:e2:2c:4b:13:84:c0:e6:1e:61:
                    c8:b3:db:a8:ad:53:c7:d5:75:2c:0c:67:07:cc:a3:
                    f2:62:10:74:4a:ce:35:bd:b2:e8:3b:c3:86:3c:dd:
                    c3:dd:41:de:2e:2f:98:5a:70:4d:c2:b9:6c:22:b7:
                    e1:88:74:23:38:a2:41:c8:7b:92:fe:dd:b6:75:25:
                    fd:de:ac:fd:a6:5f:a8:b2:85:b0:5c:21:fc:63:db:
                    28:0c:e8:10:e2:ed:da:02:2c:35:e4:78:05:33:b5:
                    57:ec:e7:a5:87:79:46:43:18:49:f8:f2:a5:15:5a:
                    26:17:85:45:8b:97:3f:2a:71:6b:d0:34:e5:64:d5:
                    57:e9:0b:c1:5e:ce:dc:37:03:8a:4b:0a:be:6e:17:
                    18:c6:04:d5:40:39:56:0f:85:80:8a:ff:80:a9:d1:
                    27:60:e1:2b:e9:b8:fc:28:b1:9c:f5:a5:b2:b2:0f:
                    26:15:28:96:7e:74:21:a8:07:ab:90:d3:1c:c1:d0:
                    7b:b6:be:05:a2:46:53:e7:a9:56:a8:57:e5:86:e7:
                    49:cf:11:a6:1f:65:d5:06:81:e6:06:90:99:00:b2:
                    29:d4:4d:0f:d4:7f:55:75:93:16:e7:e7:df:4d:38:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:59:51:DE:00:12:CC:80:F5:CD:68:D4:49:E1:D2:4C:ED:80:1A:8A
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139382e302f32332d3233203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:e5:a6:62:32:98:eb:73:ce:1e:d3:51:f3:5a:59:c4:8f:
         4c:45:a2:70:5b:ea:43:25:6b:32:67:63:ea:14:4e:fe:19:8a:
         c6:d2:b0:5f:a3:e6:83:dd:fd:40:33:5f:6d:aa:95:3b:d0:26:
         1a:33:95:5d:b8:f1:c2:73:d6:22:bb:aa:4c:0a:bb:2b:85:78:
         97:76:3e:6f:87:91:b9:a2:76:86:db:35:b3:4c:63:3d:b9:5b:
         25:0a:ad:7d:e9:56:c4:f0:1a:3d:28:ef:0b:16:a3:18:4f:55:
         62:3b:6e:cc:91:31:4f:8c:3b:9a:de:21:5f:68:b6:50:98:6d:
         a8:1b:e4:5b:03:25:95:aa:b2:f4:95:b5:d1:d4:e4:67:37:3c:
         eb:0b:7a:9b:13:da:7f:8c:cb:a7:50:21:5b:7b:fd:22:42:64:
         85:9e:31:24:d3:d9:0f:f8:c1:4a:15:5d:53:e3:b9:56:8e:e6:
         7b:63:32:ce:ec:63:55:9a:82:48:ed:fa:d0:e7:b5:53:4c:68:
         e5:9c:66:2e:80:c1:9a:81:3e:68:af:d6:c3:b6:6e:b8:6a:fc:
         17:6d:b4:22:d9:b9:1b:f3:60:f4:1a:12:85:c8:2b:60:6a:63:
         54:cb:75:2e:03:a4:8c:f8:7f:a3:c5:56:2b:01:11:67:fb:a2:
         c0:25:7b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org