Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32332d3233203d3e20323730353434.roa
File:                     3138372e39352e3230382e302f32332d3233203d3e20323730353434.roa (raw, json)
Hash identifier:          j/IkE2/iQADK6XcvT3+bavpGGo/usLDLigRZaBlU05c=
Subject key identifier:   7F:67:D9:8B:EF:DD:1E:28:BC:87:6A:72:47:E7:94:86:F0:66:9A:E4
Certificate issuer:       /CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
Certificate serial:       6FC8F98E4CB48C91092DDF432221A90819DCD74A
Authority key identifier: B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32332d3233203d3e20323730353434.roa
Signing time:             Mon 30 Oct 2023 12:47:00 +0000
ROA not before:           Mon 30 Oct 2023 12:42:00 +0000
ROA not after:            Mon 28 Oct 2024 12:47:00 +0000
asID:                     270544
IP address blocks:        187.95.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c8:f9:8e:4c:b4:8c:91:09:2d:df:43:22:21:a9:08:19:dc:d7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
        Validity
            Not Before: Oct 30 12:42:00 2023 GMT
            Not After : Oct 28 12:47:00 2024 GMT
        Subject: CN=7F67D98BEFDD1E28BC876A7247E79486F0669AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:13:3a:43:c7:e7:be:35:ea:b4:dd:d5:ba:
                    20:f2:ca:a4:b1:69:1a:27:cd:5b:cf:cf:44:c5:b5:
                    99:e2:0d:ce:fb:5a:6b:07:c2:0f:55:bf:07:e1:40:
                    ca:7f:95:bd:3b:66:41:19:e3:45:65:c2:41:a9:98:
                    78:5d:17:bb:be:d3:33:45:82:68:8f:d2:64:a3:b7:
                    f0:7c:13:bb:77:1d:32:5c:d7:dc:66:13:61:a2:17:
                    1c:bf:f0:cf:1a:77:cd:8e:7b:2f:2e:96:f6:bd:f6:
                    ab:d1:b4:98:a3:9f:20:dd:14:58:c6:d7:a3:00:a8:
                    e3:6d:76:22:b1:67:93:76:22:2e:39:6b:c3:e7:2d:
                    96:37:ad:b1:d0:5b:f6:43:c4:b8:a8:39:f2:92:4a:
                    14:ea:7d:cc:7a:aa:50:e5:b6:e1:54:a5:98:18:fd:
                    b0:41:52:0b:01:93:b1:f5:a6:66:fe:e1:a4:b1:e0:
                    ad:ce:7d:54:2f:3f:64:3b:9a:f7:1b:e6:15:51:86:
                    cd:c1:da:b3:8c:ba:bb:d2:36:60:54:44:8b:67:b2:
                    78:4b:57:37:c7:5b:a5:aa:7d:fd:db:7c:1d:fc:50:
                    e0:5a:dd:8f:bd:d1:09:c9:c6:3b:2f:d2:97:01:6e:
                    f2:cb:35:7f:dc:2e:70:bc:4f:f6:5c:97:bd:cc:d2:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:67:D9:8B:EF:DD:1E:28:BC:87:6A:72:47:E7:94:86:F0:66:9A:E4
            X509v3 Authority Key Identifier:
                keyid:B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32332d3233203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:28:e8:63:06:ce:0c:03:7e:4c:15:e7:15:b3:40:2f:1c:32:
         67:ab:f6:5e:94:70:8e:32:99:c5:a1:ac:04:38:31:d4:d5:ab:
         ab:80:a5:a8:93:07:a6:dd:76:23:f1:95:1b:06:02:aa:a4:5e:
         4c:a2:de:23:09:14:ed:20:81:fd:3c:b5:2a:de:80:19:e9:99:
         b5:06:cc:07:15:50:0a:53:71:87:96:48:2e:ee:7e:5d:1c:85:
         24:46:df:dc:0f:c0:fa:75:00:5c:8a:ba:38:b3:08:80:64:3b:
         23:d9:89:b9:27:16:b7:26:04:1f:74:2c:7c:0a:98:80:9d:5b:
         ac:d1:3d:e1:87:98:bf:ae:87:f5:af:c6:ee:c6:17:63:cc:dd:
         8c:8d:04:13:64:6d:0a:6d:50:d4:89:e4:45:c3:ee:a6:83:e6:
         ad:31:14:45:c2:c6:c6:36:e0:69:ef:b4:7e:13:b1:aa:94:fc:
         b9:a2:df:80:77:37:45:cc:52:d2:f7:ec:87:68:be:c6:68:8b:
         8f:26:8b:88:4d:5b:77:13:0a:b8:52:42:e7:57:c5:1d:9c:d6:
         71:76:7f:2f:cb:ec:25:da:54:7b:c9:f2:5a:8b:03:1e:ee:02:
         11:79:f3:bb:e2:29:25:cc:7a:10:9d:fd:e5:3c:fa:7d:ed:8d:
         01:7c:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org