Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/3138372e36332e3233382e302f32332d3233203d3e20323633363631.roa
File:                     3138372e36332e3233382e302f32332d3233203d3e20323633363631.roa (raw, json)
Hash identifier:          V1F44b1hnoVxCKD8uxKiYOBvvy5Wqny3rZWhkQ0Io4I=
Subject key identifier:   94:68:E3:C2:70:70:7D:4F:09:C9:98:46:4D:4A:6F:E9:E1:46:C0:B1
Certificate issuer:       /CN=1F461E0163E83106F84ADF1433865326051B09F5
Certificate serial:       4E22DE02EC11169506C9E0D9664614ED2EBACBA2
Authority key identifier: 1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/3138372e36332e3233382e302f32332d3233203d3e20323633363631.roa
Signing time:             Thu 28 Mar 2024 18:44:58 +0000
ROA not before:           Thu 28 Mar 2024 18:39:58 +0000
ROA not after:            Thu 27 Mar 2025 18:44:58 +0000
asID:                     263661
IP address blocks:        187.63.238.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:22:de:02:ec:11:16:95:06:c9:e0:d9:66:46:14:ed:2e:ba:cb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F461E0163E83106F84ADF1433865326051B09F5
        Validity
            Not Before: Mar 28 18:39:58 2024 GMT
            Not After : Mar 27 18:44:58 2025 GMT
        Subject: CN=9468E3C270707D4F09C998464D4A6FE9E146C0B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bc:84:f5:12:3c:50:9a:a3:b2:3e:87:a7:6c:
                    67:bf:da:43:d4:89:ca:58:8b:e2:04:a7:7f:95:22:
                    a1:df:72:b3:ec:0f:3e:5f:48:2c:fc:04:cb:5c:48:
                    83:a8:ae:2e:5d:cd:3a:09:27:05:3d:aa:78:a8:1e:
                    42:20:6f:64:da:13:76:4f:92:25:9e:97:76:3c:0b:
                    7c:e3:03:c7:4b:78:bb:8f:fb:6a:48:db:cf:b8:bc:
                    0b:3e:85:51:07:03:6b:86:64:ff:29:11:4c:9d:5b:
                    08:ba:7a:c2:55:01:18:fe:71:48:94:fb:c0:a1:f0:
                    be:a3:02:ba:cc:5f:d6:1f:b9:6e:94:17:ea:6b:28:
                    1f:30:57:8e:39:69:a2:33:f2:4e:a3:e8:a8:43:7c:
                    42:94:a6:a2:03:34:8e:13:a5:7b:24:ae:e4:c6:bd:
                    83:4f:dc:e5:e4:bf:f4:2e:9b:d7:82:ea:00:22:4d:
                    eb:ec:62:1c:cd:4f:5c:d1:0e:26:92:cb:de:f2:f0:
                    52:6a:98:c0:9d:75:26:b3:3e:76:84:f3:54:5b:97:
                    cb:2c:0e:3f:f9:04:28:dc:79:83:05:29:13:ce:87:
                    7c:1d:5d:4e:09:34:a8:bb:10:14:4f:cf:6a:9b:2c:
                    f6:d1:41:87:29:e0:cd:d6:62:a5:a7:4b:9f:00:0b:
                    af:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:68:E3:C2:70:70:7D:4F:09:C9:98:46:4D:4A:6F:E9:E1:46:C0:B1
            X509v3 Authority Key Identifier:
                keyid:1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/1F461E0163E83106F84ADF1433865326051B09F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/3138372e36332e3233382e302f32332d3233203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:c3:94:84:86:14:ff:65:8e:bf:3b:cc:e0:38:bf:2f:af:f3:
         0b:85:1b:06:d2:87:75:3e:05:af:c8:6e:87:cc:63:78:43:3c:
         f4:22:80:15:eb:a6:35:57:e6:18:01:f0:d3:31:8a:01:2e:5a:
         6c:99:a8:e3:24:4a:21:c6:a4:06:b8:33:ea:61:df:bc:a7:f4:
         d9:82:76:2c:ea:84:0d:24:0f:a8:f9:c7:6c:b4:52:72:9f:42:
         12:8f:cf:ad:1b:d9:e6:6b:11:b3:d8:cf:86:78:fe:9d:f7:04:
         af:e3:97:2e:08:8f:8f:58:5d:5b:07:dd:8a:7f:d7:e3:46:fe:
         b1:cf:f9:78:f1:ee:cf:4d:de:01:33:49:68:8e:19:93:89:33:
         fd:f3:00:5a:ae:42:3d:5b:ba:e5:26:2d:7a:f2:eb:b4:13:27:
         9d:b1:80:cb:de:d8:09:db:8f:61:f3:15:ef:7d:f1:24:73:0d:
         2c:b2:01:ce:78:bd:a1:b8:cb:b3:09:d9:37:cc:10:ab:b5:58:
         8f:24:ba:45:b6:e7:76:06:c6:c3:0a:39:ab:53:a8:c5:2a:b8:
         b7:ee:d1:70:69:36:67:e0:1e:73:a7:1b:e4:22:e6:53:ce:73:
         29:d4:ed:36:c5:81:c6:1f:3e:f8:68:78:ef:d4:4f:a8:10:f8:
         18:77:9f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org