Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231312e302f32342d3234203d3e20323730353434.roa
File:                     3138372e39352e3231312e302f32342d3234203d3e20323730353434.roa (raw, json)
Hash identifier:          Qh1awaGp/8JTQVUOPfmJruFt86SwMbsZQ+KTMcUx7Q4=
Subject key identifier:   42:C9:82:D4:CA:54:CD:A8:69:CF:27:6E:EF:6C:D8:43:12:56:A2:9A
Certificate issuer:       /CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
Certificate serial:       3A24E4909D628A69CF38E31065866CF114FAF2C3
Authority key identifier: B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231312e302f32342d3234203d3e20323730353434.roa
Signing time:             Mon 30 Oct 2023 12:47:02 +0000
ROA not before:           Mon 30 Oct 2023 12:42:02 +0000
ROA not after:            Mon 28 Oct 2024 12:47:02 +0000
asID:                     270544
IP address blocks:        187.95.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:24:e4:90:9d:62:8a:69:cf:38:e3:10:65:86:6c:f1:14:fa:f2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
        Validity
            Not Before: Oct 30 12:42:02 2023 GMT
            Not After : Oct 28 12:47:02 2024 GMT
        Subject: CN=42C982D4CA54CDA869CF276EEF6CD8431256A29A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:3b:55:9d:90:78:66:33:3e:1c:4a:cf:f6:
                    3c:ef:6a:2b:1e:1b:21:57:10:45:dd:82:f1:95:d2:
                    f8:ae:59:23:4c:6c:fc:69:7a:59:7b:2a:7a:3c:a8:
                    36:65:b8:ad:7e:0f:31:29:1b:aa:6a:ce:74:78:b5:
                    a4:6c:fd:9c:a7:54:fe:87:46:9b:cf:54:f8:66:f2:
                    5c:31:6c:bf:00:4e:28:1d:12:42:86:80:fe:b3:06:
                    8a:77:5e:4f:7e:26:05:9d:bb:50:a0:75:2b:2e:bc:
                    f4:22:43:ec:61:13:5e:3f:d3:0c:b9:05:15:66:81:
                    e4:3b:7e:d1:8b:72:a7:4f:ba:ee:84:33:58:cc:6f:
                    32:8b:6d:b3:93:34:44:93:d8:ec:db:b1:50:82:ad:
                    d8:f9:be:fe:7f:6f:cb:a2:cc:86:36:6f:c3:45:45:
                    60:3d:88:e0:f1:24:ef:6b:8b:ad:ff:90:53:2b:13:
                    12:cc:50:ee:f0:fc:86:dc:ff:4c:7a:8f:14:10:40:
                    db:f8:7d:76:26:1e:b5:20:29:26:b0:d0:f3:94:9f:
                    8a:e9:cb:61:e9:3a:bc:58:e9:79:ab:c8:a4:24:cb:
                    67:6e:dd:3a:c6:f2:c0:22:7b:ae:1b:98:d5:59:26:
                    08:43:f0:c5:f0:9b:be:0c:f4:91:23:31:c5:10:10:
                    91:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C9:82:D4:CA:54:CD:A8:69:CF:27:6E:EF:6C:D8:43:12:56:A2:9A
            X509v3 Authority Key Identifier:
                keyid:B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3231312e302f32342d3234203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:75:d3:92:3c:29:44:bb:64:18:ce:eb:1b:d3:bc:08:e1:89:
         3c:fd:23:57:ce:20:ea:3e:0c:8c:3e:7e:60:80:3f:61:7c:27:
         42:7f:0f:79:34:4e:85:f7:2d:48:eb:c8:09:2f:c7:4b:ef:f5:
         16:ce:0b:82:6c:85:51:a1:b2:23:08:77:cb:2c:6d:75:84:3b:
         33:e1:66:63:10:c7:2a:d1:9f:9e:25:e8:9c:95:18:c2:42:67:
         b9:13:22:d5:fd:4c:47:18:13:d3:af:57:fa:84:79:0a:50:1f:
         f8:3c:0b:5a:93:eb:5c:f1:98:cf:74:c5:00:7f:18:21:5e:05:
         fb:db:cd:96:7a:e4:9e:b8:d8:32:ee:8f:16:a4:e4:64:b2:b2:
         a0:b0:cf:bf:38:39:37:35:b4:e9:9e:53:0d:04:58:2d:39:2e:
         cf:e9:6a:d6:07:df:7d:6c:3d:5d:fa:f2:bb:9b:4c:3c:fd:27:
         ce:1c:7f:f6:e5:ef:31:cc:1c:75:ab:c8:cc:27:e8:f9:c7:9d:
         de:37:1c:b4:ac:9b:a0:6e:46:32:85:4e:09:6e:8b:ad:3c:5e:
         6f:7e:6c:e8:61:d2:77:cf:3e:b4:97:89:2c:49:59:5c:71:bb:
         49:5a:eb:c8:85:6f:b9:5b:28:93:19:8c:56:08:6c:9e:9f:87:
         ce:68:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org