Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34312e302f32342d3234203d3e203238323436.roa
File:                     3138372e312e34312e302f32342d3234203d3e203238323436.roa (raw, json)
Hash identifier:          YTqDbFBuxPUfR1SX5L4Yg+MUzl2XFtArmPfVfzrc9A0=
Subject key identifier:   5F:12:8A:67:D2:01:E1:C4:80:83:E5:8A:31:81:0D:60:7B:B5:37:D1
Certificate issuer:       /CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Certificate serial:       394A8581BF10D7AA2DEF5DE010EE58695CDBC23D
Authority key identifier: 42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34312e302f32342d3234203d3e203238323436.roa
Signing time:             Thu 14 Dec 2023 14:57:26 +0000
ROA not before:           Thu 14 Dec 2023 14:52:26 +0000
ROA not after:            Thu 12 Dec 2024 14:57:26 +0000
asID:                     28246
IP address blocks:        187.1.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4a:85:81:bf:10:d7:aa:2d:ef:5d:e0:10:ee:58:69:5c:db:c2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
        Validity
            Not Before: Dec 14 14:52:26 2023 GMT
            Not After : Dec 12 14:57:26 2024 GMT
        Subject: CN=5F128A67D201E1C48083E58A31810D607BB537D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:5d:ca:46:0c:0c:d9:9d:5d:7f:ff:2c:4c:
                    e1:ec:f6:a9:8a:70:82:2f:9f:82:e3:11:22:44:c3:
                    6c:3a:6d:74:76:f3:ed:ae:a6:a9:4d:e7:91:52:06:
                    ba:4f:4f:5b:5f:9a:98:86:8d:6c:58:57:97:e9:b2:
                    ed:98:94:69:b2:f2:6f:f1:cb:f0:ad:af:ba:d9:0f:
                    58:1a:e1:01:63:b6:15:b2:61:a5:9b:0e:09:79:9f:
                    87:85:92:c7:b8:48:a3:14:c0:74:9f:dd:27:16:fe:
                    e1:cb:cb:2b:9e:2f:92:e4:60:f2:86:c0:36:81:f7:
                    0a:75:47:be:0c:86:27:6e:ef:53:62:dc:d1:00:6e:
                    6a:02:32:8a:34:c8:61:8a:99:a9:1f:18:87:71:39:
                    29:fa:83:a1:73:6e:b8:db:5c:27:c3:9c:d8:a2:f5:
                    74:b7:9b:09:47:4c:bb:d2:48:94:07:c3:b3:af:80:
                    8f:97:e9:bf:ff:00:9a:a3:a2:9c:35:c6:91:ee:8f:
                    d9:ac:df:ea:d6:b4:33:d3:3d:ee:4f:f4:ab:e4:7a:
                    37:52:c2:bf:3c:f4:30:0f:99:a7:da:ba:ef:40:5a:
                    98:b0:94:17:8d:f0:c7:6a:bc:29:44:94:bc:a5:91:
                    3c:48:ac:d4:12:9f:0b:cb:91:22:42:08:7d:a1:21:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:12:8A:67:D2:01:E1:C4:80:83:E5:8A:31:81:0D:60:7B:B5:37:D1
            X509v3 Authority Key Identifier:
                keyid:42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34312e302f32342d3234203d3e203238323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c0:19:91:b2:02:4c:0d:8e:11:6f:e1:ec:67:97:00:58:bf:
         f3:e2:b7:e8:39:1f:8a:04:10:f9:b0:56:f1:88:2d:32:3a:df:
         e0:46:fe:48:43:6b:3a:3e:2d:bb:9e:18:58:d9:db:5f:db:d1:
         65:80:75:4d:7f:9d:94:43:44:83:34:42:90:98:fb:aa:b2:3f:
         66:79:d1:a1:d5:b4:b4:3d:ad:ca:f7:8a:0c:ec:99:a7:61:ff:
         bc:10:98:60:76:ee:89:fe:c7:dd:7b:94:c2:d1:84:38:68:97:
         f4:49:a8:a5:70:0c:a9:53:4f:1c:41:51:ec:64:88:17:61:29:
         18:a5:64:a6:82:17:67:fc:a5:ff:37:ed:7d:d0:e6:41:47:63:
         89:31:77:78:ea:03:c1:d0:fa:32:98:47:51:fc:a0:f7:cc:e2:
         31:c8:d2:ba:a5:7b:75:10:bd:27:4c:e8:ee:d6:c3:e2:7a:dd:
         07:71:4b:18:0f:a0:2c:6e:27:46:7d:ee:b6:a8:e9:58:0b:4d:
         a7:b5:5c:2c:af:c0:05:09:6e:25:29:f1:ce:86:47:d1:b6:76:
         f5:35:c4:72:20:8c:60:cc:c1:21:8c:0f:ce:72:19:72:f6:5a:
         5e:d7:c6:06:cf:70:66:05:29:bc:46:e3:55:01:b7:01:2c:79:
         c7:69:64:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org