Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231302e302f32342d3234203d3e20323730353434.roa
File:                     3138372e39352e3231302e302f32342d3234203d3e20323730353434.roa (raw, json)
Hash identifier:          Y1KLU1MAehZULNOYhrDLEDFFKEdl/O/raTZkN4VuOhs=
Subject key identifier:   54:A7:CE:18:05:F8:29:3F:85:F9:9C:40:29:96:F2:D3:A9:F6:90:88
Certificate issuer:       /CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
Certificate serial:       31F563F590538D6C1F4BC6D2609CF9B3B80FD1F3
Authority key identifier: B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231302e302f32342d3234203d3e20323730353434.roa
Signing time:             Mon 30 Oct 2023 12:47:01 +0000
ROA not before:           Mon 30 Oct 2023 12:42:01 +0000
ROA not after:            Mon 28 Oct 2024 12:47:01 +0000
asID:                     270544
IP address blocks:        187.95.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f5:63:f5:90:53:8d:6c:1f:4b:c6:d2:60:9c:f9:b3:b8:0f:d1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
        Validity
            Not Before: Oct 30 12:42:01 2023 GMT
            Not After : Oct 28 12:47:01 2024 GMT
        Subject: CN=54A7CE1805F8293F85F99C402996F2D3A9F69088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:93:e4:5a:c0:eb:f6:4c:65:e4:7c:1c:a2:
                    ba:30:04:59:29:3d:df:ec:85:0e:1e:86:e3:76:56:
                    03:8c:d3:49:a1:f5:a7:d8:d8:a0:a2:82:30:98:e8:
                    96:e8:93:3e:70:5e:c0:b9:4a:32:7c:dc:e7:cc:47:
                    fe:64:9a:94:7d:98:cf:21:c7:06:0d:e3:3b:29:f2:
                    34:ca:85:58:12:b3:38:4a:4d:27:64:04:cc:ab:a4:
                    d3:81:e3:ea:9b:4e:3f:50:38:0a:1b:e6:c0:b1:63:
                    28:a9:21:1a:15:b2:9f:a1:56:de:f4:2c:00:d1:fc:
                    b2:a7:cb:7a:ed:54:45:d9:10:2c:f9:52:63:15:5e:
                    cb:5a:f1:d6:94:b4:32:20:c9:fd:c4:44:29:4e:a3:
                    78:0b:e2:51:a7:02:b5:ac:01:0c:d8:7d:67:53:ad:
                    0f:44:59:1c:62:30:79:72:45:d2:23:9d:f2:4c:33:
                    04:8b:01:e0:74:48:9e:61:4f:ec:c5:ea:16:88:22:
                    ee:1f:4b:8b:99:4b:1f:2b:1d:ad:db:3d:9a:cc:39:
                    02:44:dc:f5:fa:12:54:7c:c9:28:14:dc:d4:83:d7:
                    22:ce:54:41:7b:ff:fe:71:d2:d2:df:94:55:b4:5b:
                    73:75:9d:4d:ff:11:f1:67:57:ec:69:82:b7:42:a7:
                    db:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A7:CE:18:05:F8:29:3F:85:F9:9C:40:29:96:F2:D3:A9:F6:90:88
            X509v3 Authority Key Identifier:
                keyid:B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231302e302f32342d3234203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:fb:0c:dd:89:95:dc:ba:87:bd:ef:61:16:09:42:d9:0c:b9:
         e5:1d:ce:84:62:c4:b7:0e:79:08:9f:0d:55:f2:0f:9b:c7:32:
         a9:46:65:45:92:88:25:ca:48:0f:71:f5:ee:ed:8f:41:65:6c:
         4d:92:4c:91:8b:4a:c7:e8:b0:a2:22:d2:47:fc:90:45:13:35:
         1f:72:20:88:86:2a:7d:66:74:da:dd:15:c0:9a:a0:7c:54:c3:
         da:77:d3:18:00:5c:73:be:e8:18:fd:67:a0:c5:99:af:55:89:
         43:4c:53:09:19:7b:38:6b:64:f6:2a:92:12:54:dc:97:cd:69:
         db:64:3d:79:4d:4a:29:4e:bc:b4:84:db:89:2c:a0:0e:38:8b:
         8f:90:40:1f:48:95:cc:7d:79:c8:3d:53:a6:ba:c6:23:85:9c:
         91:f3:6b:23:79:1e:e4:6d:3e:9b:52:b4:a4:5d:96:4a:ef:f3:
         d1:c4:07:00:0c:31:cd:de:c0:80:83:a9:d6:e4:ae:5f:59:e8:
         f8:57:55:5a:46:f6:58:91:12:b5:bb:78:22:da:d2:5c:cc:5b:
         79:aa:3e:3e:08:b8:de:8e:1c:a1:e1:44:a8:53:e1:4b:74:f9:
         cd:41:01:2c:0d:51:f6:46:e8:d0:6a:34:3f:dc:bc:24:b1:df:
         23:d7:b3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:24 2024 by rpki-client on console-ams.rpki-client.org