Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230332e302f32342d3234203d3e20323632363137.roa
File:                     3138372e36322e3230332e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          JDDEcGq3Bk47GAEJU+/zsBKoIcR4IPjn8H5GtxpZAN4=
Subject key identifier:   79:55:9F:24:DE:82:3B:CA:48:75:1F:51:C9:C7:0C:DE:A4:78:C2:E4
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       0569050F773B38036ACE79C954AEE79263E020F6
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230332e302f32342d3234203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:19 +0000
ROA not before:           Thu 03 Aug 2023 13:04:19 +0000
ROA not after:            Thu 01 Aug 2024 13:09:19 +0000
asID:                     262617
IP address blocks:        187.62.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:69:05:0f:77:3b:38:03:6a:ce:79:c9:54:ae:e7:92:63:e0:20:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:19 2023 GMT
            Not After : Aug  1 13:09:19 2024 GMT
        Subject: CN=79559F24DE823BCA48751F51C9C70CDEA478C2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:1c:8d:cc:86:0a:56:4e:bd:15:b5:1f:c5:
                    7e:c4:13:d8:5f:a7:7c:84:f3:08:17:d6:73:f9:eb:
                    c4:29:3f:7b:cf:d6:1a:32:6c:b7:96:48:11:68:7b:
                    91:91:e1:44:ec:4b:d5:12:ca:64:73:16:fa:2b:75:
                    21:3a:9a:3f:46:24:7c:b7:7f:65:49:2a:00:65:84:
                    12:fd:a2:ca:13:7c:ee:21:3d:24:91:56:cb:81:c1:
                    91:88:44:90:76:05:fd:e6:a0:4e:fe:fb:1c:bf:4f:
                    6d:6f:a7:5d:67:12:ea:3c:af:0b:7f:e4:54:92:5d:
                    46:45:d3:a9:ad:d9:61:3b:80:b5:a4:60:23:3d:6c:
                    89:7e:a2:50:a7:5c:43:96:1b:17:95:30:68:e4:ee:
                    dc:c5:11:05:59:57:ec:ff:9c:99:c4:d8:3a:3d:4f:
                    ac:45:3c:d7:9f:20:4b:38:47:e3:c6:94:e4:54:88:
                    3f:b1:3d:24:af:aa:ef:31:3e:f7:c8:25:a4:0c:ca:
                    95:b4:ba:5d:a2:70:65:e2:26:5a:bb:57:50:56:fb:
                    42:dd:ad:ba:16:d7:d2:49:ce:9f:30:98:0b:e3:0c:
                    3f:66:71:14:cf:11:3b:39:fb:c2:9a:6c:51:49:fa:
                    e7:98:c6:3b:33:e7:63:36:07:bb:8d:ad:db:1c:4a:
                    df:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:55:9F:24:DE:82:3B:CA:48:75:1F:51:C9:C7:0C:DE:A4:78:C2:E4
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/3138372e36322e3230332e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:9d:aa:47:3f:d7:f1:0f:45:3b:e3:f3:63:1f:e3:d1:a8:1d:
         91:a0:86:e3:73:aa:b6:d9:d5:e7:49:f6:d7:c0:86:92:4d:31:
         fa:db:88:9c:2c:4a:1e:4e:a7:2f:40:9e:c1:aa:13:80:0a:54:
         0c:00:f9:10:b0:ec:53:a3:b3:05:f1:8f:22:69:77:51:ef:f8:
         16:e1:d8:70:30:96:48:4c:f7:ff:c1:64:62:e8:68:4d:8e:46:
         00:0a:9f:a4:be:16:11:2c:54:62:3e:28:25:3d:84:73:32:02:
         f8:84:16:4b:f8:1b:bd:94:53:87:cb:30:15:90:64:c0:29:2d:
         7f:b6:b2:b0:4d:67:a3:16:ad:e2:f9:95:dd:69:cf:2f:6f:dd:
         be:02:0f:8d:c6:dd:65:48:73:4a:6f:dd:e9:70:85:4b:b2:63:
         f8:07:ea:af:0f:de:08:5e:f1:d1:ce:61:e3:33:05:33:3e:0b:
         40:be:ab:c3:a3:68:0c:ae:6a:46:3a:45:fb:ca:89:7c:a4:13:
         5c:24:4b:ea:b5:fb:e2:1c:d6:8e:c8:d4:bc:74:a1:1a:bc:66:
         e8:63:77:ed:6d:ee:12:52:af:a8:d3:98:1c:ed:fe:ac:e0:4b:
         ff:9e:99:2e:7a:5b:a9:7a:a0:24:d7:5e:6b:ca:e4:b9:7b:58:
         d2:8c:70:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org