Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138372e31362e36342e302f31392d3234203d3e203137323232.roa
File:                     3138372e31362e36342e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          Qr4li/a01x5hheoxR0km22VV3Qhz/C2yKRAMrwe2jjI=
Subject key identifier:   CD:59:9F:98:2C:CD:A4:F1:FC:AE:A6:85:6E:7D:E1:70:F9:3B:3C:EA
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       2AF6A11E120FB2B0273E85FF9333E4AF1AEB3EFA
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138372e31362e36342e302f31392d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        187.16.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f6:a1:1e:12:0f:b2:b0:27:3e:85:ff:93:33:e4:af:1a:eb:3e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=CD599F982CCDA4F1FCAEA6856E7DE170F93B3CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:69:8a:be:7f:92:65:2e:c7:ac:36:2c:58:93:
                    88:c0:8b:ff:85:65:f2:71:6b:a1:73:5d:e3:ff:f1:
                    c1:17:76:1e:ad:1d:ae:dc:3e:70:24:92:9d:e8:97:
                    91:60:a0:f4:7d:9b:d0:af:12:94:96:80:f1:b4:cd:
                    5e:7f:49:f3:97:ac:b8:30:92:9d:41:d1:47:d5:62:
                    75:ae:3e:35:0d:2a:c2:57:77:36:18:48:49:37:e1:
                    89:1d:b2:8a:ae:61:08:a4:c7:08:24:15:df:9c:ea:
                    b6:ef:07:d1:5c:ef:cb:1b:3f:07:1b:c8:e0:cb:98:
                    e8:1a:54:a8:71:ed:f6:58:39:fd:ec:85:f3:fe:41:
                    ed:0d:84:c6:54:b0:da:0a:c7:37:62:b5:ec:86:ea:
                    b5:29:03:c8:00:20:b3:29:4d:64:03:97:4f:04:9c:
                    2e:e0:96:45:05:30:36:93:45:fc:5c:ef:34:c4:66:
                    ec:02:d6:57:93:8f:e7:cc:85:12:7b:62:01:57:4f:
                    ca:3d:7c:71:e9:6a:3f:68:2f:b7:e6:b9:60:a1:9e:
                    69:86:9d:f3:c9:b8:ae:76:89:2c:2c:ea:b2:e2:c7:
                    85:ad:cc:ff:e9:81:eb:f9:32:5a:83:f5:67:9a:0f:
                    7f:19:06:2d:20:98:35:f9:79:c1:9d:24:83:37:4b:
                    e3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:59:9F:98:2C:CD:A4:F1:FC:AE:A6:85:6E:7D:E1:70:F9:3B:3C:EA
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138372e31362e36342e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:93:ef:11:24:69:fc:46:c6:d6:76:24:19:69:1a:4f:04:e8:
         19:04:f4:80:82:4f:e0:ad:47:09:d4:6a:e8:96:e1:4b:5b:ef:
         1f:2b:d8:1a:89:16:c9:aa:17:8b:13:0a:4b:49:6a:25:90:a6:
         4f:51:fe:71:ce:cc:c5:c2:2a:3a:41:80:3d:34:aa:bb:f5:cc:
         f2:1d:40:95:e0:be:f1:a4:ad:c5:1a:b4:e1:d5:d5:62:d4:4d:
         7b:4f:03:94:58:ac:46:90:37:ac:93:f7:f5:a4:81:40:01:65:
         eb:61:5a:a9:cf:8e:8d:38:f4:22:51:52:73:2d:2f:13:47:46:
         16:e4:e7:f8:31:c7:e1:78:2a:af:2c:61:ec:60:79:b5:56:de:
         eb:32:5f:12:0d:c8:24:26:6a:74:6b:84:3d:c4:da:3c:0b:63:
         a1:8b:63:25:34:6b:b7:29:4d:55:cb:9d:a9:93:d9:7b:ca:7e:
         63:79:b4:91:c6:8d:58:e2:f8:f5:5b:8b:6c:cb:8a:59:c1:9e:
         fe:c5:02:80:9e:34:cf:04:cd:61:70:44:a9:bd:69:bf:e0:82:
         f2:ee:c4:28:86:7c:4d:54:85:3a:0f:57:ed:5d:e9:a8:27:12:
         09:80:30:64:45:6e:14:96:e9:f9:9f:2c:20:a4:4e:44:0f:37:
         77:11:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org