Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138372e31362e39362e302f31392d3234203d3e203137323232.roa
File:                     3138372e31362e39362e302f31392d3234203d3e203137323232.roa (raw, json)
Hash identifier:          3iUipAFAS1Yu2Uh7hQ4ucaIv2W1PxnK8jn+jvxDZG+0=
Subject key identifier:   71:E7:95:42:77:87:52:74:92:8A:32:2F:7F:26:23:4E:AD:48:05:9A
Certificate issuer:       /CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
Certificate serial:       58E7D80BB43A94ADB13DAC71223DA27F63DB5384
Authority key identifier: 43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138372e31362e39362e302f31392d3234203d3e203137323232.roa
Signing time:             Mon 25 Mar 2024 22:55:40 +0000
ROA not before:           Mon 25 Mar 2024 22:50:40 +0000
ROA not after:            Mon 24 Mar 2025 22:55:40 +0000
asID:                     17222
IP address blocks:        187.16.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e7:d8:0b:b4:3a:94:ad:b1:3d:ac:71:22:3d:a2:7f:63:db:53:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43F9BFBF53CB666AAF76FE73276B701C7E237A6E
        Validity
            Not Before: Mar 25 22:50:40 2024 GMT
            Not After : Mar 24 22:55:40 2025 GMT
        Subject: CN=71E7954277875274928A322F7F26234EAD48059A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:3e:11:ee:21:89:74:b6:dc:c0:be:ba:6a:
                    89:8b:4a:7c:52:a7:71:56:7f:10:79:de:81:42:ec:
                    87:15:36:f1:92:ca:dd:b0:5d:92:b5:5a:e3:76:6c:
                    40:58:3e:32:23:e0:79:ec:78:b0:9b:da:19:be:ba:
                    6a:e5:d0:9b:0c:90:83:86:eb:18:79:33:5e:02:39:
                    c9:81:15:87:40:f9:65:dd:7e:75:c3:bb:02:b8:8a:
                    4f:f2:08:a3:83:a8:ab:f1:a7:75:2a:cb:f3:c2:78:
                    8c:2b:5a:16:8b:4d:22:f2:75:7b:62:eb:2c:be:c0:
                    58:42:c8:10:69:b0:e0:bb:bc:90:a0:64:07:60:3a:
                    8e:ff:67:42:1d:d3:db:95:2b:1c:28:40:25:1b:1d:
                    a3:ef:fb:3c:ee:b3:38:46:df:76:8a:ac:bc:25:d3:
                    e5:90:1b:a2:b6:ac:1c:29:d1:ab:74:eb:43:ce:0b:
                    81:c2:10:79:72:d0:36:f8:a9:43:d5:0a:c1:42:f1:
                    c5:9a:d3:cc:59:8a:66:44:d5:cb:53:02:08:a9:72:
                    20:39:ff:b2:de:b9:ea:4b:81:11:02:4a:b7:15:6a:
                    b2:e9:9d:d9:80:d8:69:ac:9b:fb:bb:31:b5:47:e7:
                    87:0e:92:4b:b4:c6:ea:b5:ea:c9:47:76:33:84:9b:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E7:95:42:77:87:52:74:92:8A:32:2F:7F:26:23:4E:AD:48:05:9A
            X509v3 Authority Key Identifier:
                keyid:43:F9:BF:BF:53:CB:66:6A:AF:76:FE:73:27:6B:70:1C:7E:23:7A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43F9BFBF53CB666AAF76FE73276B701C7E237A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDMAecSFF7DjTGqe8xLWpP2HkgYUTGMgmMa5Q7wNX4Z4/0/3138372e31362e39362e302f31392d3234203d3e203137323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:37:4a:0a:c6:11:b3:8d:6d:63:ef:b4:9b:ac:cd:81:8f:7c:
         7f:56:5c:ed:4e:0c:46:76:c4:08:d1:d6:46:1c:60:11:35:a5:
         e2:42:eb:47:ee:23:0f:7f:81:4f:3e:14:55:21:c3:78:d3:0f:
         65:10:e6:1d:21:2f:73:e4:14:3a:fe:58:fd:61:13:59:c4:0b:
         57:e7:3e:d6:78:49:44:e9:95:5c:3a:29:d6:3f:0a:5b:ec:24:
         04:f7:1f:12:65:46:fa:c8:ea:1a:f8:fe:d5:54:41:49:c4:3c:
         75:a9:b5:e9:5e:2b:01:b6:93:f9:03:20:76:fe:18:06:6a:53:
         69:80:34:0b:ed:58:73:88:a3:ee:7f:80:8c:43:88:9b:f7:bc:
         6e:7f:58:27:68:f7:dc:70:e9:f1:68:28:7c:a5:04:9f:6f:df:
         90:c7:55:e8:b9:13:a9:c1:3f:37:94:dd:42:79:a2:12:2c:91:
         13:b3:22:49:d9:fb:c2:6b:e7:ed:0e:65:19:ff:16:d2:50:56:
         15:49:9d:d6:50:34:54:8a:2d:b3:28:0a:ad:7e:b2:af:03:1d:
         03:c0:93:e4:21:a9:2d:88:2f:fe:a6:09:ad:5c:e7:46:d4:34:
         e6:d9:e2:9e:04:47:51:0f:a6:56:7e:48:b9:48:df:81:60:2f:
         8d:26:89:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org