Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230392e302f32342d3234203d3e20323730353434.roa
File:                     3138372e39352e3230392e302f32342d3234203d3e20323730353434.roa (raw, json)
Hash identifier:          vE0CgNWX2zmyJetnAyIGi/VJr/20tc6QppQqJRiVh7E=
Subject key identifier:   04:68:22:F8:AB:23:33:E9:CA:65:37:B4:4C:58:64:77:D8:CB:99:AC
Certificate issuer:       /CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
Certificate serial:       7DF62B29D0F255777D5295EBF09CF864D89381D9
Authority key identifier: B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230392e302f32342d3234203d3e20323730353434.roa
Signing time:             Mon 30 Oct 2023 12:47:03 +0000
ROA not before:           Mon 30 Oct 2023 12:42:03 +0000
ROA not after:            Mon 28 Oct 2024 12:47:03 +0000
asID:                     270544
IP address blocks:        187.95.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f6:2b:29:d0:f2:55:77:7d:52:95:eb:f0:9c:f8:64:d8:93:81:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
        Validity
            Not Before: Oct 30 12:42:03 2023 GMT
            Not After : Oct 28 12:47:03 2024 GMT
        Subject: CN=046822F8AB2333E9CA6537B44C586477D8CB99AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:e1:b5:2a:06:a3:27:6d:8f:38:20:8d:d1:
                    d8:7c:2d:7d:32:0f:00:46:4e:41:b4:50:b5:81:43:
                    b6:a1:80:c5:74:88:5b:4a:72:7a:ee:66:9b:8f:4e:
                    ef:09:82:b6:4f:f9:d8:e8:03:ba:0f:01:21:9a:00:
                    b6:34:95:18:33:ce:f9:ff:78:36:fa:5b:72:38:63:
                    9c:52:d2:1f:16:6b:b2:69:8e:0b:a5:55:7d:77:7c:
                    61:5b:b0:c5:70:9e:f0:7d:cb:cf:e7:51:a3:2a:6e:
                    5b:be:dd:7e:a5:27:2a:ba:d6:17:47:b0:60:af:c2:
                    41:0f:22:cf:bd:da:5e:b7:39:00:3d:d7:16:0f:02:
                    b9:34:22:b5:71:fe:9d:fa:6b:5f:05:ef:ce:7c:6c:
                    92:0a:83:63:ab:bb:36:30:35:f4:54:21:13:fe:f3:
                    fd:de:fb:2c:5d:9e:09:b4:64:94:88:af:c0:73:0b:
                    69:ad:15:51:d6:ab:93:2f:d3:e5:33:2e:d7:17:2e:
                    a6:1f:72:b6:f0:9f:8f:66:04:81:9f:3f:72:47:c1:
                    b9:75:69:e4:ad:ae:63:8b:d3:29:3d:30:9d:b9:4f:
                    ee:74:2d:e9:72:a4:e4:a0:c3:93:a4:cc:4f:83:53:
                    97:1d:12:c7:4e:68:1e:e8:19:cf:58:5f:90:6e:41:
                    a6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:68:22:F8:AB:23:33:E9:CA:65:37:B4:4C:58:64:77:D8:CB:99:AC
            X509v3 Authority Key Identifier:
                keyid:B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230392e302f32342d3234203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:96:43:9b:6a:fb:e2:74:c0:ff:14:11:28:41:ab:46:4b:
         76:9c:8c:af:34:c3:49:56:a5:9e:44:26:03:2b:e3:da:10:3a:
         34:c2:0e:96:39:d7:38:ed:6e:36:de:11:6f:37:e2:96:16:40:
         e0:e5:2a:74:4d:62:73:e1:c3:f2:ed:d4:45:9b:66:dc:72:ab:
         8f:2d:2f:f3:fa:65:fb:9a:94:c5:9e:73:8e:7b:9f:4f:1b:be:
         32:d8:49:db:1c:3f:81:27:15:b8:e7:d1:0b:2d:a4:29:f8:e3:
         4f:43:66:95:28:22:52:30:83:10:b9:9d:76:77:0f:0a:75:95:
         0d:f0:d3:31:79:af:56:85:16:0f:0b:03:6c:b1:8f:e5:c1:b0:
         b9:4a:c6:4d:9d:79:c7:90:5a:c7:6f:38:ff:3a:b8:45:1d:1d:
         f7:67:c7:c0:b4:6b:0d:49:1c:77:85:d2:f9:3f:60:b6:db:b3:
         78:19:80:75:bf:9a:07:1b:de:d9:59:47:2d:91:5b:8d:b1:33:
         e1:3a:49:82:fb:db:06:e0:1d:d3:52:dc:17:19:bb:12:2f:15:
         6a:30:71:10:e0:2b:ff:1a:a1:f6:60:c4:54:44:86:e9:f8:1b:
         69:1f:db:3b:32:7e:45:a3:0a:24:9b:ae:c5:94:91:40:9d:f9:
         41:25:52:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org