Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/3138372e31372e34382e302f32302d3234203d3e20323632383031.roa
File:                     3138372e31372e34382e302f32302d3234203d3e20323632383031.roa (raw, json)
Hash identifier:          tU6cPgcxlgfHkCOgK84BB129B4/aKVOgWODCg9A3UFA=
Subject key identifier:   AB:8D:49:0C:EE:14:25:F5:C7:BD:FD:D5:4D:D8:F0:97:29:13:96:96
Certificate issuer:       /CN=29016D1E818D315FCD2DAEEADFBC589ED5EA9B95
Certificate serial:       2E3FCDFC097BA49C49664888367FE2589BB0D546
Authority key identifier: 29:01:6D:1E:81:8D:31:5F:CD:2D:AE:EA:DF:BC:58:9E:D5:EA:9B:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/3138372e31372e34382e302f32302d3234203d3e20323632383031.roa
Signing time:             Thu 04 Apr 2024 08:48:05 +0000
ROA not before:           Thu 04 Apr 2024 08:43:05 +0000
ROA not after:            Thu 03 Apr 2025 08:48:05 +0000
asID:                     262801
IP address blocks:        187.17.48.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3f:cd:fc:09:7b:a4:9c:49:66:48:88:36:7f:e2:58:9b:b0:d5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29016D1E818D315FCD2DAEEADFBC589ED5EA9B95
        Validity
            Not Before: Apr  4 08:43:05 2024 GMT
            Not After : Apr  3 08:48:05 2025 GMT
        Subject: CN=AB8D490CEE1425F5C7BDFDD54DD8F09729139696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:14:4a:77:83:19:36:c6:8e:e6:79:0e:27:79:
                    e6:59:e2:40:b9:79:d3:a7:e7:16:10:a6:24:6e:6b:
                    43:21:b5:03:b4:7a:76:4c:58:45:42:b3:43:d6:4f:
                    c4:21:6f:8f:4b:67:da:0a:17:ef:c3:80:32:f0:be:
                    10:5e:36:63:a3:e5:9b:95:12:2b:b0:56:c5:4e:53:
                    f9:2d:70:96:b5:ac:60:31:f8:06:c6:25:1f:de:37:
                    f8:7b:f6:38:97:2c:19:c1:6f:a4:53:b1:ca:a0:76:
                    be:25:54:3a:c9:5b:0f:f3:f3:1e:4f:3d:05:ab:75:
                    40:bd:c5:24:8f:71:bd:37:62:2d:ba:2e:01:34:c1:
                    33:59:be:6b:77:1a:ce:0a:ab:f0:d1:33:e6:09:2d:
                    de:9a:d5:e4:55:83:9c:8b:d7:4a:e9:be:88:77:c0:
                    0f:d7:15:b4:7a:55:f6:18:bc:45:56:bf:7e:14:65:
                    43:1a:c3:21:16:b0:d7:f5:b9:97:16:19:28:f2:29:
                    35:18:eb:47:a4:12:7f:db:d0:32:a6:d7:fa:fb:22:
                    81:09:9f:5c:ac:98:1d:ef:ab:af:46:3d:2a:b0:82:
                    7b:41:51:73:78:58:05:31:d2:c2:57:fe:f7:f1:a9:
                    95:22:cc:67:d0:b7:f6:de:50:be:82:c1:5b:10:a4:
                    39:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8D:49:0C:EE:14:25:F5:C7:BD:FD:D5:4D:D8:F0:97:29:13:96:96
            X509v3 Authority Key Identifier:
                keyid:29:01:6D:1E:81:8D:31:5F:CD:2D:AE:EA:DF:BC:58:9E:D5:EA:9B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29016D1E818D315FCD2DAEEADFBC589ED5EA9B95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/1/3138372e31372e34382e302f32302d3234203d3e20323632383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:cf:e6:4a:a1:53:44:21:18:17:64:7d:0d:96:72:9c:51:2e:
         aa:5a:09:e3:05:06:2e:b9:b3:92:17:0d:2d:03:2f:91:b8:d8:
         9e:dc:b6:f1:fc:12:67:91:fc:f5:a5:e4:6c:6b:db:19:c3:95:
         0e:44:d1:57:da:91:de:3d:eb:64:e0:b0:b7:91:30:8e:48:0e:
         e9:81:87:e6:f2:8e:f9:73:21:a4:ff:7b:58:25:a6:6c:0b:24:
         97:38:33:2c:16:79:6b:c7:3c:57:5d:34:10:c4:ad:f6:83:e3:
         4d:51:37:71:8e:d8:54:53:1a:12:d6:a7:f9:2c:6b:b6:3b:79:
         88:09:02:16:d6:b4:ed:31:da:7e:40:1a:a7:2d:87:ce:f1:a1:
         6b:c9:4c:04:b9:89:7e:a9:af:82:df:6b:07:fe:f1:07:7b:f1:
         db:9c:0e:fb:3d:09:8b:13:9b:2f:31:aa:8e:48:0a:b5:3e:ca:
         a1:b4:7e:92:e0:04:be:b1:e9:9b:15:17:d7:4c:ac:8d:a2:a2:
         db:68:e8:d0:7e:95:94:c0:7b:87:ee:6f:70:dc:e9:c8:19:ac:
         2a:47:ff:b8:73:5c:cb:b9:65:cb:e0:d7:38:d2:8c:6a:c4:7c:
         30:e5:58:51:9f:82:27:79:3d:03:eb:90:e2:ab:a6:17:a0:6d:
         44:72:ab:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 10:21:37 2024 by rpki-client on console-fra.rpki-client.org