Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138372e36312e3132302e302f32312d3234203d3e20323632393532.roa
File:                     3138372e36312e3132302e302f32312d3234203d3e20323632393532.roa (raw, json)
Hash identifier:          M35/t6s5ico2nShNYogfj7pdaZdBBWB35zeMOvDta0A=
Subject key identifier:   E6:B8:89:FB:08:E9:DC:5B:78:A2:40:AB:38:C8:E6:A6:9C:16:CA:42
Certificate issuer:       /CN=0159B28D943E30339BE3C46CC53E6B1C8FAE24DB
Certificate serial:       3E3CDED17045D4BC033498C60DEF886DDF166EE8
Authority key identifier: 01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138372e36312e3132302e302f32312d3234203d3e20323632393532.roa
Signing time:             Tue 31 Oct 2023 20:00:00 +0000
ROA not before:           Tue 31 Oct 2023 19:55:00 +0000
ROA not after:            Tue 29 Oct 2024 20:00:00 +0000
asID:                     262952
IP address blocks:        187.61.120.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3c:de:d1:70:45:d4:bc:03:34:98:c6:0d:ef:88:6d:df:16:6e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0159B28D943E30339BE3C46CC53E6B1C8FAE24DB
        Validity
            Not Before: Oct 31 19:55:00 2023 GMT
            Not After : Oct 29 20:00:00 2024 GMT
        Subject: CN=E6B889FB08E9DC5B78A240AB38C8E6A69C16CA42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9d:09:b8:52:a3:d5:65:10:5c:9f:22:32:7d:
                    9d:3f:64:5d:ad:9f:a1:46:ae:ad:e0:e8:aa:13:04:
                    a2:56:29:e7:ac:2d:65:de:b9:b0:de:7a:ae:69:d7:
                    91:76:ec:e7:b6:da:3f:9e:3f:b8:19:68:43:62:55:
                    3b:04:cb:a4:7b:ae:50:7d:c9:75:76:2f:22:0c:fe:
                    98:39:a5:e6:fa:db:86:50:79:e8:7a:55:9e:12:2c:
                    08:93:00:9f:5b:bc:2d:2d:ac:4e:81:13:3d:99:c1:
                    c0:b0:b0:01:6d:ff:65:33:ca:1a:03:7d:cd:68:39:
                    8d:f4:e2:1e:3b:bb:49:a6:aa:ab:8d:a8:d1:37:ee:
                    39:49:d9:93:3d:5d:da:3c:a9:95:99:3d:17:3d:ff:
                    47:e8:ae:ff:cc:7f:af:65:16:c4:d0:39:72:3a:9f:
                    a5:24:6e:fc:da:5f:84:08:44:10:6e:e9:5c:bc:6f:
                    72:d1:a6:57:5b:d6:7b:18:c9:13:66:ed:20:6c:cc:
                    85:f8:8b:6d:bb:a4:5b:60:ab:a5:ee:d5:7e:8f:9c:
                    9e:36:c0:92:97:2d:d5:da:b7:fa:9f:43:46:d5:a3:
                    9d:87:c6:83:9a:1a:11:66:6e:49:47:39:15:10:4c:
                    98:49:6f:c0:6b:d6:9f:1c:41:46:0b:1e:e3:da:f3:
                    45:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B8:89:FB:08:E9:DC:5B:78:A2:40:AB:38:C8:E6:A6:9C:16:CA:42
            X509v3 Authority Key Identifier:
                keyid:01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138372e36312e3132302e302f32312d3234203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:f8:44:56:40:b0:60:95:ae:a0:2b:58:d1:22:b3:32:80:55:
         3e:61:fd:cd:c1:9c:55:6c:c8:57:d6:87:87:27:ed:d4:0c:8c:
         e2:cb:2b:ac:e4:d8:4b:71:d2:a3:4d:e6:3f:82:f0:f5:3a:51:
         32:85:bf:d7:1c:0f:89:7d:a6:f0:aa:de:1a:51:7d:c7:79:01:
         30:92:24:33:b7:57:c9:e5:2e:f4:1b:7c:ff:bc:f8:07:4d:21:
         ec:33:88:22:aa:fd:cc:90:95:91:ef:76:fd:5d:66:e7:f7:31:
         4a:b3:18:78:48:93:e8:7c:e6:88:07:19:a9:37:21:1a:26:d4:
         c7:b6:ea:65:22:0b:8c:81:06:cd:70:06:4f:ba:33:18:14:21:
         91:d8:1f:9c:a3:b6:4a:80:78:66:11:11:dd:8a:70:3c:09:d7:
         d3:46:b8:64:fe:35:a2:4d:38:d1:19:c3:f0:24:95:99:ee:4b:
         6a:e5:9a:5b:6a:d7:c1:b8:af:f3:90:76:92:48:de:4f:1e:f4:
         bc:b5:08:34:8c:4a:76:5d:32:c6:3e:d5:58:3f:37:13:ed:9a:
         69:b6:7e:f9:58:cc:53:b4:ba:23:eb:15:83:bb:46:16:b5:e9:
         19:3c:98:e9:43:fe:ef:b4:ab:41:bc:c5:dc:88:02:d7:7b:8b:
         1c:b5:25:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org