Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/3138372e31372e34382e302f32302d3234203d3e20323632383031.roa
File:                     3138372e31372e34382e302f32302d3234203d3e20323632383031.roa (raw, json)
Hash identifier:          UA71hENTcEe+xLNlQPDikxzVWu6k0LVyIM/EJ8Pl97U=
Subject key identifier:   53:7F:D8:F8:D6:84:C3:E1:86:4F:AC:EF:36:87:E4:7C:16:F2:32:01
Certificate issuer:       /CN=7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6
Certificate serial:       54A68462D3C8E7EE7E6E1E8C7EE8D73418ACDBAC
Authority key identifier: 7D:45:E1:D0:EB:BF:C0:C5:8C:5B:59:B5:14:11:98:B5:B3:2C:99:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/3138372e31372e34382e302f32302d3234203d3e20323632383031.roa
Signing time:             Sun 28 Jan 2024 00:17:35 +0000
ROA not before:           Sun 28 Jan 2024 00:12:35 +0000
ROA not after:            Sun 26 Jan 2025 00:17:35 +0000
asID:                     262801
IP address blocks:        187.17.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a6:84:62:d3:c8:e7:ee:7e:6e:1e:8c:7e:e8:d7:34:18:ac:db:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6
        Validity
            Not Before: Jan 28 00:12:35 2024 GMT
            Not After : Jan 26 00:17:35 2025 GMT
        Subject: CN=537FD8F8D684C3E1864FACEF3687E47C16F23201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:3a:d5:7b:72:5b:2a:bd:ce:29:11:4a:b7:
                    48:96:ff:b5:eb:f3:0c:a8:56:80:b1:af:56:0d:f9:
                    8c:fb:c2:95:1a:03:53:d5:b7:ea:f1:71:40:94:f0:
                    d3:fa:e9:34:fe:74:6e:44:e5:d1:0d:a6:d0:6b:1c:
                    bd:9f:e0:b9:be:59:e6:79:ac:43:12:54:f9:ea:a8:
                    90:36:8a:6f:f8:ce:aa:0a:83:c9:54:46:a9:15:28:
                    65:14:e8:b5:f4:f8:a4:5d:fa:e1:fc:4a:77:78:c1:
                    06:ec:33:d2:52:67:3c:9e:6b:2d:92:d7:eb:42:64:
                    29:3d:26:8c:bd:38:64:5c:35:b3:ad:81:03:0f:ea:
                    d0:27:6c:78:e2:ae:99:6e:1b:f9:64:b6:21:13:00:
                    cb:65:e7:1d:87:4b:2d:46:ef:7a:19:70:03:35:23:
                    88:71:1d:c0:a6:6c:35:f8:de:a9:11:12:2a:1b:4a:
                    30:dd:d0:d4:83:48:d5:a4:c9:0d:d7:60:cc:99:bb:
                    34:5c:e4:fb:7b:0b:24:55:26:f1:1e:9d:9f:e0:21:
                    3f:b7:f1:93:17:f6:71:18:bf:f7:7b:df:d1:dd:23:
                    04:a0:06:bc:45:02:9b:42:02:8e:27:c6:24:6d:63:
                    06:b6:e9:62:1e:1f:46:81:b0:d9:bf:d9:01:3b:36:
                    1f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7F:D8:F8:D6:84:C3:E1:86:4F:AC:EF:36:87:E4:7C:16:F2:32:01
            X509v3 Authority Key Identifier:
                keyid:7D:45:E1:D0:EB:BF:C0:C5:8C:5B:59:B5:14:11:98:B5:B3:2C:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/3138372e31372e34382e302f32302d3234203d3e20323632383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:ed:d2:c4:d1:44:2f:0a:02:87:c5:99:93:e0:27:5c:cc:7c:
         5f:80:19:bc:0c:16:f0:b1:7a:f6:4a:76:3f:b4:c2:a1:02:2c:
         1d:bc:1c:2e:42:bc:44:98:ab:cd:b1:39:f0:c0:57:7b:f5:80:
         2b:9f:81:de:6b:e5:59:65:b7:82:db:36:0f:d1:a0:44:b3:ba:
         f8:78:3c:6c:e7:ab:e5:10:94:24:1a:fd:e5:c0:a4:55:69:15:
         a5:d6:16:09:a7:47:0f:db:c6:40:cf:08:8f:73:14:22:b1:51:
         ad:3b:b1:ae:3a:7b:0c:d5:79:54:db:7e:95:61:26:ba:63:fd:
         f0:dc:33:05:8a:52:8f:af:7a:55:1e:a0:80:6c:f3:0d:d2:6c:
         94:d8:f2:19:49:49:08:a7:7b:e0:f0:77:62:fa:28:6c:1c:eb:
         6c:b6:cd:59:08:75:d5:c7:3c:c0:f4:66:35:1e:6c:5d:73:09:
         16:d0:d8:ae:51:bb:ce:11:bf:9c:8c:5b:aa:6a:f3:2e:0c:97:
         77:fb:20:96:86:87:16:59:43:5d:c9:41:c2:fa:b9:56:43:8d:
         3d:c8:36:18:52:60:5a:8a:cb:ba:4a:e4:38:51:26:99:c9:8c:
         13:a3:0a:a9:82:3f:e0:de:71:4f:10:da:2a:60:66:46:32:44:
         1d:8f:f8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org