Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35362e302f32312d3231203d3e203238313238.roa
File:                     3138372e31392e35362e302f32312d3231203d3e203238313238.roa (raw, json)
Hash identifier:          59ZNXlKtx008HbyL1n67IAP8SebQBlQ8yBwGt4S1BUM=
Subject key identifier:   6F:8D:25:6E:8A:3C:D7:80:9A:32:B0:72:19:B2:EC:B4:88:2F:18:BA
Certificate issuer:       /CN=4C6908F71A052F14E85F80A052AB5AF7B61D6E2A
Certificate serial:       256A0CE3300FAA9ACCDC39562C803FD88B2ED4D4
Authority key identifier: 4C:69:08:F7:1A:05:2F:14:E8:5F:80:A0:52:AB:5A:F7:B6:1D:6E:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C6908F71A052F14E85F80A052AB5AF7B61D6E2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35362e302f32312d3231203d3e203238313238.roa
Signing time:             Fri 04 Nov 2022 20:29:19 +0000
ROA not before:           Fri 04 Nov 2022 20:24:19 +0000
ROA not after:            Fri 03 Nov 2023 20:29:19 +0000
asID:                     28128
IP address blocks:        187.19.56.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6a:0c:e3:30:0f:aa:9a:cc:dc:39:56:2c:80:3f:d8:8b:2e:d4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C6908F71A052F14E85F80A052AB5AF7B61D6E2A
        Validity
            Not Before: Nov  4 20:24:19 2022 GMT
            Not After : Nov  3 20:29:19 2023 GMT
        Subject: CN=6F8D256E8A3CD7809A32B07219B2ECB4882F18BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:66:30:89:f9:3b:87:f6:0e:85:c3:79:a6:14:
                    be:59:59:7c:c5:b0:2d:f1:e2:12:9e:79:0f:30:34:
                    1e:9c:ae:be:52:44:7c:f8:1d:29:ec:0a:b8:06:42:
                    ed:37:7a:10:ef:c8:9a:5c:d1:90:52:af:e3:d5:6f:
                    db:28:ee:0b:6e:8c:85:38:d7:b4:13:1d:80:d2:b2:
                    83:1d:71:54:98:4e:54:6f:d9:cb:d0:ac:af:c1:05:
                    53:de:45:41:e8:f4:1d:da:cc:48:4a:8f:b2:fb:da:
                    51:3f:1a:fe:a0:bf:a7:c2:6d:18:e7:74:09:1a:1b:
                    5a:4b:cf:8a:37:9e:36:f1:e8:b6:ac:86:7b:91:25:
                    67:14:b8:3b:bc:35:1d:f2:ed:0a:bf:62:43:04:fa:
                    02:b3:39:d2:8b:f4:b6:30:ef:f3:f8:41:b0:09:08:
                    ba:c8:14:c8:9f:28:8a:b9:18:d2:69:4d:0a:50:f1:
                    a1:9c:92:82:17:90:34:3f:3e:e0:83:92:6f:86:3a:
                    45:ee:7f:ce:4a:f6:3b:d4:68:17:50:1a:3a:2d:69:
                    87:40:6d:e7:3e:24:35:0e:36:a3:07:44:bf:d1:57:
                    3f:eb:0e:c9:eb:6a:99:c9:1a:9b:e4:f7:ac:27:02:
                    f9:7f:7f:7c:f5:45:a0:a9:dd:24:7c:df:40:79:ee:
                    1f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8D:25:6E:8A:3C:D7:80:9A:32:B0:72:19:B2:EC:B4:88:2F:18:BA
            X509v3 Authority Key Identifier:
                keyid:4C:69:08:F7:1A:05:2F:14:E8:5F:80:A0:52:AB:5A:F7:B6:1D:6E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/4C6908F71A052F14E85F80A052AB5AF7B61D6E2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C6908F71A052F14E85F80A052AB5AF7B61D6E2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ejsw7b4xpEaFLMQtUZP2MvxNFX4FecShXpkiabtab19D/0/3138372e31392e35362e302f32312d3231203d3e203238313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bc:a8:1c:ad:be:6d:9a:aa:18:c2:ce:b6:cf:52:a4:f9:8f:37:
         97:02:7f:d8:66:57:2c:7c:e9:85:72:d0:df:00:a0:a1:19:8e:
         fd:bb:a4:dd:bc:4e:99:70:96:cd:89:f8:f4:4d:6b:97:18:71:
         2f:42:47:06:91:93:e3:10:15:20:18:e6:52:c2:19:f0:8d:c4:
         70:e8:e6:04:19:1a:21:9a:79:8d:fd:c4:95:bc:6c:2f:d2:f7:
         cf:91:88:ed:7f:a1:96:53:56:56:dd:5c:8c:07:f6:5b:f7:5c:
         40:65:e3:59:92:da:51:12:40:7d:9d:1e:ae:e0:54:25:62:a9:
         96:2e:d7:3a:54:f6:26:b4:73:0d:bf:17:77:b3:1e:97:2f:f3:
         67:65:ea:08:be:57:d4:10:99:0c:c1:74:7d:c8:71:a9:b6:0d:
         84:a1:bb:82:b5:d0:bc:d6:2f:b1:2b:0b:fc:ad:6c:35:3e:e4:
         2c:b2:ec:86:3d:cf:cf:05:4a:e8:18:bb:17:28:3f:fe:1c:ee:
         f6:43:9d:c0:b9:bf:ba:37:3f:42:fb:88:66:83:12:fa:89:60:
         0a:5c:06:6a:43:7d:64:7d:01:63:d1:51:65:86:9d:60:e3:94:
         61:8b:e5:0a:d7:47:d3:c7:6e:cc:2e:f1:32:73:af:4a:ef:c0:
         42:84:b4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org