Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/0/3138372e3130332e302e302f32302d3230203d3e203533303938.roa
File:                     3138372e3130332e302e302f32302d3230203d3e203533303938.roa (raw, json)
Hash identifier:          dBatRS4F9a6wSRr7w93wpEYehqyvwppVF0z5Gb7RImo=
Subject key identifier:   E5:4A:4C:B7:30:AD:7D:CA:76:A1:F8:3E:35:1C:ED:27:EE:5B:6D:8A
Certificate issuer:       /CN=86D72561641EDDB824839C4F967D551D74F96C39
Certificate serial:       35385CAC20A0862478762BA9023B018982EBBBA0
Authority key identifier: 86:D7:25:61:64:1E:DD:B8:24:83:9C:4F:96:7D:55:1D:74:F9:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86D72561641EDDB824839C4F967D551D74F96C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/0/3138372e3130332e302e302f32302d3230203d3e203533303938.roa
Signing time:             Mon 25 Mar 2024 15:00:00 +0000
ROA not before:           Mon 25 Mar 2024 14:55:00 +0000
ROA not after:            Mon 24 Mar 2025 15:00:00 +0000
asID:                     53098
IP address blocks:        187.103.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:38:5c:ac:20:a0:86:24:78:76:2b:a9:02:3b:01:89:82:eb:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86D72561641EDDB824839C4F967D551D74F96C39
        Validity
            Not Before: Mar 25 14:55:00 2024 GMT
            Not After : Mar 24 15:00:00 2025 GMT
        Subject: CN=E54A4CB730AD7DCA76A1F83E351CED27EE5B6D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:f2:2e:9a:5e:07:a7:06:f3:88:e0:2a:de:
                    1c:8f:cb:3e:e5:09:65:0e:a5:e7:6d:6b:4c:0f:dc:
                    f8:03:27:25:80:2e:43:af:64:db:74:df:63:d6:fb:
                    38:73:cb:e1:e1:f4:bc:cd:31:4b:83:01:7a:31:fc:
                    4f:77:f9:3c:d7:b3:c2:23:de:e8:08:7b:a7:fb:a1:
                    17:5a:c7:c4:da:f7:d7:d7:b7:23:03:fd:e1:df:b2:
                    3d:e8:a5:92:d9:07:68:e5:74:09:6e:9c:73:ed:c5:
                    99:1d:93:c1:bb:c8:44:b5:f6:0b:73:30:0e:27:10:
                    db:69:f2:48:02:e4:f4:1f:74:bb:00:f7:24:eb:91:
                    5f:5d:ef:2e:8e:40:eb:d0:09:ba:b1:05:d2:35:ad:
                    aa:9f:05:87:ed:0f:2b:6a:81:3f:6b:c3:bd:a4:00:
                    93:55:f0:ef:b8:ed:61:ac:3a:43:ac:c7:d4:51:c0:
                    b7:b9:84:c4:7d:46:a7:d9:cc:54:ef:69:13:69:c7:
                    55:af:27:e8:ef:0b:db:74:d9:e2:3b:3c:89:71:03:
                    b8:2d:21:92:72:82:69:be:26:6d:f2:86:c5:37:6a:
                    d6:27:1c:3e:5e:58:5f:44:43:5d:f0:cc:59:00:49:
                    bd:6a:52:e6:e3:e6:3a:55:9d:97:a5:97:04:df:71:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4A:4C:B7:30:AD:7D:CA:76:A1:F8:3E:35:1C:ED:27:EE:5B:6D:8A
            X509v3 Authority Key Identifier:
                keyid:86:D7:25:61:64:1E:DD:B8:24:83:9C:4F:96:7D:55:1D:74:F9:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/0/86D72561641EDDB824839C4F967D551D74F96C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86D72561641EDDB824839C4F967D551D74F96C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/0/3138372e3130332e302e302f32302d3230203d3e203533303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:92:6a:14:0b:32:bb:0d:a4:98:25:cd:cd:81:f0:90:8f:0e:
         5c:87:5d:4e:c6:d8:58:dd:b5:6f:2f:79:cd:d9:90:4b:cb:fa:
         11:38:25:55:35:70:85:7c:80:74:9e:62:a0:58:cf:de:30:43:
         3a:11:b1:97:77:d3:d3:5f:42:6a:6b:35:84:92:9a:13:66:83:
         bb:de:63:03:76:4f:71:43:4a:ba:77:bb:0d:62:80:71:f3:e8:
         71:36:82:72:1b:6b:83:38:07:9d:3a:56:a9:f5:d1:45:70:48:
         12:a0:8e:f7:71:49:25:2f:9f:b2:af:bc:96:e3:53:04:3f:76:
         35:af:b4:c4:4e:4d:e2:6c:93:51:bf:14:71:60:c6:f7:c7:4d:
         31:c8:5e:7b:90:0c:7a:1a:a3:df:c2:0e:df:59:61:73:99:f7:
         2c:29:46:49:19:58:cf:d8:bf:0f:3c:60:21:c9:3d:70:13:0d:
         5c:e7:31:89:4f:36:df:c7:f5:3d:f3:f3:69:e0:e4:72:d9:ec:
         11:f1:fb:85:95:2d:7a:68:da:15:e0:93:5c:b0:81:c1:6e:b8:
         05:e8:a7:21:de:17:e6:7e:37:83:1e:80:a2:11:af:68:ec:42:
         6c:a5:0d:f5:51:8e:4c:dc:5e:64:71:a5:77:e8:0c:b2:d9:88:
         df:56:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org