Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230302e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3230302e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          Uu0Wy83FPbJ93U8xw+9ceP7+cvie/dOwROY6DlA77dA=
Subject key identifier:   96:99:B4:1B:41:97:F4:7A:C0:2E:2D:F7:17:DA:0A:3F:F2:42:8E:CC
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       53CAC91C1CFD01A42CCFFBB40F2983098FE09815
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230302e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:09 +0000
ROA not before:           Thu 03 Aug 2023 13:04:09 +0000
ROA not after:            Thu 01 Aug 2024 13:09:09 +0000
asID:                     262617
IP address blocks:        187.62.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ca:c9:1c:1c:fd:01:a4:2c:cf:fb:b4:0f:29:83:09:8f:e0:98:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:09 2023 GMT
            Not After : Aug  1 13:09:09 2024 GMT
        Subject: CN=9699B41B4197F47AC02E2DF717DA0A3FF2428ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1f:ae:4f:f5:66:97:07:fc:88:19:f0:c9:5a:
                    1f:a9:a2:5c:58:21:50:28:8c:29:0f:65:3b:ec:3a:
                    d8:d7:d6:16:cf:d0:d7:da:1b:d8:50:65:ed:b4:7a:
                    c4:63:02:5d:f4:d9:3c:83:20:5c:ea:ef:52:65:2f:
                    1e:c1:8e:bd:14:56:9e:74:04:63:88:c6:c8:59:cf:
                    15:4c:02:f4:3c:7d:66:87:e8:a0:ca:97:58:6e:c1:
                    80:10:91:a4:55:bd:1a:db:64:4e:51:75:da:57:76:
                    77:41:30:79:15:ca:71:da:ff:e5:29:73:d2:0f:2d:
                    42:ab:24:70:3b:42:60:ed:90:bf:8a:a8:77:a3:d3:
                    fc:f5:d3:8d:f2:53:ac:f7:53:d1:36:b8:53:6f:b1:
                    94:8b:6b:6c:3a:52:83:cb:6e:d0:c8:9a:f4:46:e0:
                    1c:df:9c:12:a5:73:c6:9d:63:a4:c9:20:2c:9d:03:
                    68:fc:9b:fe:8e:fe:f5:a8:48:49:bb:76:5c:d4:e1:
                    b1:d0:2f:31:36:82:40:9e:0e:43:51:41:7e:21:3b:
                    dd:d4:ef:49:c9:fc:8a:02:91:65:dd:28:5f:a5:54:
                    bf:f5:55:d2:4d:69:ab:6d:0b:a6:0b:ac:38:89:45:
                    fd:54:5c:25:7c:94:07:6b:3f:5c:ff:aa:31:23:7c:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:99:B4:1B:41:97:F4:7A:C0:2E:2D:F7:17:DA:0A:3F:F2:42:8E:CC
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230302e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:7f:ff:94:db:2b:ad:32:7c:83:07:ea:af:70:73:07:60:e1:
         54:57:d1:97:9c:c7:dc:0d:55:0c:36:9c:ff:bd:b4:ee:9d:75:
         5f:4f:61:d4:7c:e3:93:af:88:05:ed:30:cd:aa:20:be:c0:4d:
         1e:2b:b2:b4:56:50:81:16:78:9e:36:09:4d:52:32:60:ab:8b:
         dc:91:f1:b7:fd:39:55:77:fe:80:48:54:6f:b7:49:2f:b5:2b:
         b3:1d:d5:94:74:0b:ad:e3:4d:69:f6:ce:0c:90:dd:14:1d:21:
         26:d5:1a:b0:9a:81:91:63:dc:03:53:56:5f:dc:b0:dd:08:6b:
         9c:60:eb:f6:0b:60:25:d3:ad:a4:8a:3b:a7:90:74:eb:4f:cd:
         25:ec:08:a0:5e:87:cf:9b:8b:45:33:78:3f:2b:cc:3b:21:83:
         3e:32:89:bc:fe:36:44:7e:bf:94:03:9f:71:ac:f1:ad:77:85:
         f8:c2:89:f8:09:ad:96:d2:f4:da:c3:03:70:b5:1d:f3:97:9b:
         98:07:0b:87:74:34:1b:7a:61:ee:73:a5:02:d0:c1:83:79:91:
         74:c1:99:6e:f5:2d:ac:58:9d:31:df:7e:fd:a0:8f:20:00:42:
         2a:10:f7:d8:c3:8a:2b:b1:9c:6b:22:04:2a:39:aa:01:46:22:
         a6:21:18:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org