Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa
File:                     3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa (raw, json)
Hash identifier:          TryNgXFjGBxqfrAtEF/Nk7wGpvoYf3XMIndIUJJUnF8=
Subject key identifier:   3F:9A:B1:37:10:B1:B4:1B:2A:C5:A3:B5:8C:7F:81:72:FC:60:DB:B9
Certificate issuer:       /CN=5A96080087CD6DEA60732C4BB764DEF86100C18B
Certificate serial:       3F292C803A4206A31A32567A41744890E2A9DAC0
Authority key identifier: 5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa
Signing time:             Thu 04 Apr 2024 09:25:25 +0000
ROA not before:           Thu 04 Apr 2024 09:20:25 +0000
ROA not after:            Thu 03 Apr 2025 09:25:25 +0000
asID:                     270544
IP address blocks:        187.95.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:29:2c:80:3a:42:06:a3:1a:32:56:7a:41:74:48:90:e2:a9:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A96080087CD6DEA60732C4BB764DEF86100C18B
        Validity
            Not Before: Apr  4 09:20:25 2024 GMT
            Not After : Apr  3 09:25:25 2025 GMT
        Subject: CN=3F9AB13710B1B41B2AC5A3B58C7F8172FC60DBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:62:e0:3c:f0:fe:21:6b:d1:1c:86:d3:50:
                    cd:1b:5f:fa:23:17:d7:bf:aa:bc:a2:19:3c:c1:36:
                    38:8b:11:1a:e2:fe:c8:1c:a5:28:3b:02:83:04:de:
                    1b:f3:22:89:6b:cd:3d:e3:51:c0:4f:82:55:02:4f:
                    12:39:36:29:76:c0:c8:d0:71:f2:61:c6:0d:5c:1b:
                    36:ef:32:9a:3b:df:eb:34:54:d4:3b:b9:ef:fb:a2:
                    67:36:91:2a:42:d7:0f:12:02:ff:fc:b3:53:1e:55:
                    95:9c:27:ed:27:c2:96:cf:a1:dd:30:2f:13:cc:7f:
                    03:5c:0c:c4:ec:da:dd:38:ab:e4:87:eb:13:65:fd:
                    b9:c1:3f:dc:e9:d2:03:03:a3:3e:6b:6a:75:27:7d:
                    6a:46:57:92:61:5f:8f:30:85:c4:0a:48:3b:e0:5f:
                    1a:86:20:15:a6:fd:ab:17:3c:b5:e1:df:96:80:60:
                    af:09:80:63:36:e0:55:75:14:d2:61:4f:22:df:a3:
                    20:eb:5e:d1:59:17:c2:9b:59:60:45:7a:09:c9:8e:
                    f4:60:aa:ec:2b:6c:60:b8:90:f0:43:30:0d:37:e3:
                    b8:c0:90:87:88:ef:22:b8:cf:66:d3:2f:69:46:75:
                    5a:23:47:b6:25:6c:99:0e:d3:ad:cc:02:82:79:24:
                    7e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9A:B1:37:10:B1:B4:1B:2A:C5:A3:B5:8C:7F:81:72:FC:60:DB:B9
            X509v3 Authority Key Identifier:
                keyid:5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/3138372e39352e3231302e302f32332d3233203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:63:7f:d2:5d:a8:63:20:6e:ac:92:47:5d:08:14:92:27:e0:
         cf:00:ba:32:c3:01:7e:7f:e3:18:31:f9:2c:a1:1a:dd:81:5b:
         b5:f0:f9:3b:b5:ce:e2:fb:dc:f7:c8:86:7d:7c:b4:dc:bd:92:
         bc:58:c9:6e:c3:8d:51:bb:ce:fb:82:64:62:45:b2:b9:ec:ae:
         47:a8:ff:3a:07:8b:39:31:11:36:e9:05:8e:ec:81:24:22:76:
         ed:c8:85:4f:17:c6:e6:02:ee:48:9c:16:6c:f0:63:5a:f7:aa:
         7d:dc:dc:a1:16:8d:63:82:eb:ac:76:49:c2:da:20:55:6e:ea:
         66:dd:c9:5a:83:96:d4:a2:dd:49:50:5f:dd:0c:96:c3:b7:85:
         5c:9e:a4:3c:0e:64:67:3f:0f:6b:ab:57:ab:8e:ae:79:1b:96:
         69:dc:ad:f3:26:53:c8:2a:a4:0c:88:2e:e4:b7:8a:d0:0c:9e:
         18:d1:65:aa:e1:b3:07:f4:c2:42:bc:f5:15:5a:d9:68:b5:55:
         13:ca:f0:8c:31:5d:42:d5:54:55:45:d9:86:2c:ba:3a:b7:93:
         6a:08:98:f9:b4:1d:ce:0a:da:c7:74:c1:98:a5:06:79:96:39:
         fe:60:ef:3b:34:cf:0f:49:cf:c0:17:61:d3:f4:61:c9:93:89:
         88:6b:47:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org