Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33392e302f32342d3234203d3e203238323436.roa
File:                     3138372e312e33392e302f32342d3234203d3e203238323436.roa (raw, json)
Hash identifier:          /Di5XNa7OcOkLEO550RaxZ0dw+oU09zfOJOnGYVBmzA=
Subject key identifier:   65:1D:95:5C:70:C3:D3:E9:B9:59:B7:0C:AF:9A:8E:A5:38:07:06:B0
Certificate issuer:       /CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Certificate serial:       1E70B78BF1CF46283D14D8FF8F3E2F53421ABD04
Authority key identifier: 42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33392e302f32342d3234203d3e203238323436.roa
Signing time:             Thu 14 Dec 2023 14:57:23 +0000
ROA not before:           Thu 14 Dec 2023 14:52:23 +0000
ROA not after:            Thu 12 Dec 2024 14:57:23 +0000
asID:                     28246
IP address blocks:        187.1.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:70:b7:8b:f1:cf:46:28:3d:14:d8:ff:8f:3e:2f:53:42:1a:bd:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
        Validity
            Not Before: Dec 14 14:52:23 2023 GMT
            Not After : Dec 12 14:57:23 2024 GMT
        Subject: CN=651D955C70C3D3E9B959B70CAF9A8EA5380706B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:eb:96:70:c4:d8:f7:55:99:cc:6d:4e:d6:c4:
                    8f:0b:30:29:ac:c0:90:ac:3d:35:60:99:74:97:f5:
                    b6:4f:5a:1a:c1:33:58:6c:39:e8:49:4a:b5:8f:58:
                    42:c8:82:01:32:f2:a0:c7:ae:0f:f7:9e:08:65:59:
                    77:9a:3e:5a:de:69:1a:81:4e:92:08:e8:e0:de:e9:
                    2b:79:54:62:58:b3:e3:84:99:7f:de:86:ed:4e:50:
                    9d:63:c1:ff:a5:bb:99:4e:09:c5:7f:7b:a9:7f:f7:
                    36:d5:ef:df:6c:ed:6c:2f:84:fb:0f:04:b2:c9:d6:
                    f1:7a:f0:4f:80:21:b2:16:ca:a3:7b:57:37:e6:d8:
                    fc:4b:09:dd:c4:3d:ad:f6:b3:1a:b3:9f:d5:76:61:
                    c5:97:c8:37:8b:68:87:71:1f:22:46:fd:60:e0:b9:
                    94:58:6d:62:70:29:c7:02:2a:00:06:e0:5a:7d:6d:
                    1c:9a:b5:22:31:e2:d2:cc:7a:8e:de:82:b5:c5:80:
                    d5:ea:17:f0:00:d5:5f:a3:12:8f:a2:6a:c6:dc:f3:
                    6c:2a:bb:ac:b9:32:9b:62:95:7e:0b:40:b2:9b:4e:
                    31:27:7c:9a:7d:79:db:6d:41:7a:45:90:9f:fd:04:
                    59:a6:06:29:a8:e3:21:fa:b0:80:4f:47:08:4b:86:
                    97:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1D:95:5C:70:C3:D3:E9:B9:59:B7:0C:AF:9A:8E:A5:38:07:06:B0
            X509v3 Authority Key Identifier:
                keyid:42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e33392e302f32342d3234203d3e203238323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:6d:55:61:3d:9c:ca:99:db:4c:9d:87:6e:58:ca:a2:42:f8:
         87:4d:ee:09:cb:53:e6:ca:04:78:d7:2e:1b:ef:71:6b:eb:d0:
         92:ed:c3:e2:6a:df:3f:17:4a:38:75:cb:d5:67:24:cf:71:0e:
         64:ad:1f:6e:ca:17:8a:21:c0:27:7a:4a:27:ee:8e:20:49:e6:
         38:e1:06:fc:a9:3e:5d:f8:76:ab:1a:4c:36:4c:0f:77:67:4b:
         ac:3d:46:a7:96:87:13:a7:d6:0c:8b:78:61:ea:65:1e:ad:e5:
         d4:29:37:f9:6c:2e:98:75:95:25:98:d6:6b:42:1c:84:3a:00:
         cb:95:7d:e3:32:a3:00:f1:d1:0f:be:b2:f4:9f:ef:36:2d:c9:
         0d:27:d3:c8:05:58:6f:a3:ab:af:ce:54:bd:86:89:90:10:12:
         a4:63:a3:26:bf:b2:14:61:63:f5:6c:a9:df:f5:02:a8:d8:4f:
         7a:3e:24:bf:de:10:35:1d:c5:71:9d:c1:66:76:17:c4:20:38:
         74:f0:cb:d2:f9:55:67:c9:fb:8b:73:e9:d1:13:ff:d4:8e:51:
         59:25:6f:33:6f:c5:5b:ce:41:89:13:ce:1d:61:a3:93:3d:74:
         2e:52:66:7a:1e:f1:68:fb:2d:f7:c7:69:c0:d6:4a:fc:3c:8c:
         29:f5:c5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org