Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139382e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3139382e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          TFxIHfxWJnWKwFfTfQWn/B5YmPoVI7roVThawvT6zoc=
Subject key identifier:   5E:E7:11:48:B0:86:72:30:07:F4:13:82:6B:CE:CD:DE:31:8C:2E:66
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       5B26704DB54C7B8F23D74F781CA353FD712981B2
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139382e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:05 +0000
ROA not before:           Thu 03 Aug 2023 13:04:05 +0000
ROA not after:            Thu 01 Aug 2024 13:09:05 +0000
asID:                     262617
IP address blocks:        187.62.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:26:70:4d:b5:4c:7b:8f:23:d7:4f:78:1c:a3:53:fd:71:29:81:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:05 2023 GMT
            Not After : Aug  1 13:09:05 2024 GMT
        Subject: CN=5EE71148B086723007F413826BCECDDE318C2E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:b3:14:59:b4:cf:c2:73:89:b4:17:a5:d1:
                    7c:02:72:c2:87:62:87:66:67:8b:53:f4:35:9d:db:
                    09:e3:85:29:f4:a1:58:89:71:91:3b:5d:8a:8f:54:
                    24:b6:d5:57:83:82:3c:74:8b:08:a2:f3:39:ee:49:
                    47:3c:79:0f:d4:63:fe:3a:b5:50:1e:d2:5d:da:f2:
                    44:9a:23:dc:fb:32:0e:73:99:cb:f1:00:db:d5:86:
                    cd:0d:a0:34:03:dc:8b:5c:74:b0:1c:68:0e:4d:2a:
                    0f:13:36:1b:64:01:d0:b8:0d:85:1c:e8:c3:29:9c:
                    48:cb:07:50:fd:4b:12:94:ec:6f:bf:57:d9:ac:ad:
                    3c:cc:39:dd:28:a7:b9:27:f1:b2:7d:49:e0:c9:84:
                    e0:e3:50:9a:5a:d1:6c:9b:9e:1d:07:57:0a:43:95:
                    87:88:20:4d:a7:46:03:47:31:46:db:a5:66:f4:98:
                    c5:06:4e:02:db:6f:fb:b1:6a:9d:af:71:18:f7:1e:
                    34:8a:d2:89:16:31:09:41:5c:e1:8a:84:3b:23:70:
                    a4:4a:c4:3f:80:b5:dd:56:67:a6:45:59:e8:c8:1b:
                    b4:2d:ae:16:48:a6:10:5c:80:f8:56:a9:1c:9c:2c:
                    74:fa:1a:71:b6:f9:eb:bd:86:7d:4f:62:de:09:68:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E7:11:48:B0:86:72:30:07:F4:13:82:6B:CE:CD:DE:31:8C:2E:66
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3139382e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:11:c6:35:16:3f:8e:41:69:4c:ca:a0:a3:71:18:96:bf:c7:
         8b:12:98:87:68:08:1c:5d:48:e3:5d:7b:50:13:00:0e:f6:cf:
         9c:8e:58:ee:3f:36:7a:6b:c0:60:46:6b:f4:1f:89:a0:aa:bb:
         b5:3b:b1:7b:b9:b0:e2:98:b6:9a:a4:83:ae:e8:14:0e:f7:68:
         cb:94:c1:e1:24:ca:b9:a5:24:0c:c7:99:5b:3a:69:a5:30:73:
         a0:9e:9a:8e:67:85:a9:44:4f:b0:6f:58:2d:e3:a5:d3:92:db:
         9c:70:40:85:c2:76:d3:92:45:40:4f:fa:c3:60:78:33:af:c5:
         3a:87:6c:5b:d5:e6:62:7a:1d:8c:b7:bf:4c:2a:e6:a6:97:84:
         15:d5:e1:d3:25:4f:6d:ee:93:cd:97:e1:36:9b:5a:24:b5:81:
         00:48:be:d9:9e:bc:d9:ff:d6:28:9c:d0:15:7c:c8:7c:fa:29:
         1d:00:cf:03:e9:54:fc:59:e2:27:82:57:7c:cf:1e:7a:df:f0:
         50:ca:94:f8:24:35:71:0b:1c:1f:41:6c:0f:3f:2d:da:e4:f3:
         55:71:94:06:e5:28:a5:d0:6a:0f:52:0c:d6:aa:0f:f3:1b:1b:
         41:7d:85:22:a3:75:fc:ef:8c:51:ae:1d:50:46:81:f8:63:ee:
         f7:84:3e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org