Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/3138372e39352e3230382e302f32322d3232203d3e20323730353434.roa
File:                     3138372e39352e3230382e302f32322d3232203d3e20323730353434.roa (raw, json)
Hash identifier:          mWAmU0IGqOPvfk0VtAvOwr5CHpsiBv5CQsF4gUATr4U=
Subject key identifier:   04:A0:AB:C3:68:38:DA:57:36:CF:C0:69:98:02:EE:A3:F1:08:75:5F
Certificate issuer:       /CN=5A96080087CD6DEA60732C4BB764DEF86100C18B
Certificate serial:       3B892ADA5C0A36CADDCAF198CD0D0D523E5D10C9
Authority key identifier: 5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/3138372e39352e3230382e302f32322d3232203d3e20323730353434.roa
Signing time:             Thu 04 Apr 2024 09:25:23 +0000
ROA not before:           Thu 04 Apr 2024 09:20:23 +0000
ROA not after:            Thu 03 Apr 2025 09:25:23 +0000
asID:                     270544
IP address blocks:        187.95.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:89:2a:da:5c:0a:36:ca:dd:ca:f1:98:cd:0d:0d:52:3e:5d:10:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A96080087CD6DEA60732C4BB764DEF86100C18B
        Validity
            Not Before: Apr  4 09:20:23 2024 GMT
            Not After : Apr  3 09:25:23 2025 GMT
        Subject: CN=04A0ABC36838DA5736CFC0699802EEA3F108755F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:64:91:4c:ee:74:52:65:35:9e:37:52:05:04:
                    8c:fe:ff:0f:bb:30:48:55:f2:1a:88:be:43:ab:b7:
                    7a:5e:eb:e9:f5:3b:94:cf:f0:fe:1b:e4:5a:13:e6:
                    2c:1d:f7:1c:c0:e2:85:2e:ab:8c:0a:04:d9:3b:d8:
                    f9:e2:72:59:14:85:68:c8:ff:e1:2b:fe:e4:dd:bb:
                    04:c4:9b:e2:20:ab:32:ce:f5:8d:6a:c4:be:d9:53:
                    f9:c1:d3:c4:0a:97:9c:34:64:c3:4f:5c:7e:63:32:
                    3e:51:80:30:f8:b3:61:04:81:b9:1f:e6:e0:b7:a5:
                    5c:50:b5:de:d0:93:6a:1f:86:53:aa:dd:b3:37:73:
                    1a:2c:27:24:d5:6a:b0:be:b3:dd:d5:12:c8:5a:25:
                    98:3a:f2:4b:c6:50:eb:cd:73:63:31:ff:29:1d:d1:
                    17:6e:45:95:22:ce:84:f0:dd:ca:d5:61:9d:bd:4b:
                    ab:2b:78:a5:d3:91:17:a7:7e:14:5a:43:e3:ab:31:
                    7f:57:f4:25:ba:16:c0:c5:2f:7b:ea:f1:f2:8d:34:
                    e2:3f:57:c2:15:be:2b:a0:68:2c:11:58:53:2a:20:
                    bf:a9:2e:ca:4d:7c:7e:46:73:d5:05:4e:6a:e9:78:
                    d2:2e:c0:ad:7e:26:82:9b:3a:0c:5d:65:70:a7:6b:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A0:AB:C3:68:38:DA:57:36:CF:C0:69:98:02:EE:A3:F1:08:75:5F
            X509v3 Authority Key Identifier:
                keyid:5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/3138372e39352e3230382e302f32322d3232203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:36:b6:b8:49:c6:71:b1:e8:f7:b2:69:1b:81:7d:10:3b:e4:
         4c:cc:b0:0c:ed:29:07:b4:35:91:74:7a:cc:a2:34:b3:59:eb:
         56:f9:a6:03:d7:92:37:8f:20:4c:1c:cc:82:ff:55:60:0b:a7:
         79:79:fa:5c:d2:be:bb:c4:95:4b:de:4d:22:3b:5d:b9:8a:d0:
         20:97:28:5f:18:02:8c:55:05:cc:34:d9:9b:78:56:8c:42:3d:
         59:54:ab:10:12:4e:37:9b:18:45:fd:5c:10:6f:bf:7f:7f:a2:
         1d:6b:7e:5e:96:95:05:4b:71:8d:89:7b:16:4b:ac:a1:1e:67:
         10:65:28:44:f8:80:bd:d8:c4:64:71:5d:0f:d7:95:d3:f2:90:
         50:81:06:07:74:9f:6c:7c:73:bc:f0:7a:3b:8f:01:82:b5:8b:
         44:7f:a6:c7:6c:73:76:e3:47:26:e1:72:80:27:92:93:c0:59:
         a5:34:c3:ad:df:d0:85:4b:12:42:e1:53:84:00:ec:4a:0b:d1:
         c4:dd:ae:2c:3a:95:4b:77:7a:bc:e2:6a:64:f6:1e:55:8c:b2:
         8e:7d:03:03:1f:9a:5d:c8:e7:55:5e:60:c5:aa:cc:92:e0:0f:
         c7:06:46:f2:f5:b8:85:86:d2:3b:03:0d:c4:42:d4:61:28:15:
         33:75:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org