Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/3138372e39352e3231312e302f32342d3234203d3e20323730353434.roa
File:                     3138372e39352e3231312e302f32342d3234203d3e20323730353434.roa (raw, json)
Hash identifier:          nabcwITzRQ5TitXhi2gjn4TlNWfffs3NwPFoxbKLPmA=
Subject key identifier:   6A:17:87:28:C4:0B:C8:8A:C7:89:D5:16:FC:2D:ED:B4:20:EA:5B:75
Certificate issuer:       /CN=5A96080087CD6DEA60732C4BB764DEF86100C18B
Certificate serial:       61133F8FAFA45A6974DE04E88B81011373AEB846
Authority key identifier: 5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/3138372e39352e3231312e302f32342d3234203d3e20323730353434.roa
Signing time:             Thu 04 Apr 2024 09:25:23 +0000
ROA not before:           Thu 04 Apr 2024 09:20:23 +0000
ROA not after:            Thu 03 Apr 2025 09:25:23 +0000
asID:                     270544
IP address blocks:        187.95.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:13:3f:8f:af:a4:5a:69:74:de:04:e8:8b:81:01:13:73:ae:b8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A96080087CD6DEA60732C4BB764DEF86100C18B
        Validity
            Not Before: Apr  4 09:20:23 2024 GMT
            Not After : Apr  3 09:25:23 2025 GMT
        Subject: CN=6A178728C40BC88AC789D516FC2DEDB420EA5B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:a3:90:55:32:14:33:b7:d8:d3:0b:a9:8a:
                    13:f4:ad:3f:ef:42:8a:0e:57:51:a4:50:69:e0:93:
                    80:cc:37:b0:45:c9:5d:91:a7:ec:48:ba:17:12:ae:
                    b0:e9:85:a9:89:5f:09:03:bc:49:ba:f5:16:62:c0:
                    4a:71:f2:db:ea:28:87:74:d1:4c:3b:ad:4f:b6:cf:
                    1f:96:de:fd:87:e9:75:77:d0:86:2c:40:d4:a4:94:
                    7d:50:71:7d:09:ec:af:65:70:be:3c:35:cf:22:fb:
                    6a:f0:32:ec:25:c9:a0:83:2d:d6:2f:78:ac:42:9a:
                    bd:cf:07:c8:d4:3e:ff:02:55:cc:2a:6e:43:0c:ab:
                    5c:2c:85:92:ca:be:70:67:73:e7:af:a5:a8:98:e3:
                    2e:9b:60:8d:83:20:18:61:25:cd:8b:32:11:a1:e1:
                    0e:3d:fe:e4:30:c5:96:71:30:11:af:1d:e6:67:a4:
                    7c:c3:bc:dd:8d:99:d9:11:05:9c:90:40:4c:45:5d:
                    12:ec:5f:1d:2c:e8:83:d5:00:07:b9:ee:60:17:89:
                    8d:e3:9e:f1:8a:32:9a:f4:6f:92:8d:57:a2:c9:76:
                    3d:15:18:f1:db:51:19:cc:4b:fb:a6:7d:25:06:ad:
                    41:22:83:cd:8a:80:dd:3a:bf:de:34:cf:f1:65:04:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:17:87:28:C4:0B:C8:8A:C7:89:D5:16:FC:2D:ED:B4:20:EA:5B:75
            X509v3 Authority Key Identifier:
                keyid:5A:96:08:00:87:CD:6D:EA:60:73:2C:4B:B7:64:DE:F8:61:00:C1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A96080087CD6DEA60732C4BB764DEF86100C18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/1/3138372e39352e3231312e302f32342d3234203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:b5:ed:9a:40:f0:e8:e1:8d:7c:02:f7:91:5f:09:e8:00:4a:
         76:f4:cc:7a:d8:29:a2:d2:c6:db:36:04:dc:ff:94:e1:f2:df:
         b9:6a:a7:c4:6b:95:d2:a2:c0:37:7c:e1:42:23:07:8a:72:21:
         7a:2a:10:bd:5f:fa:09:a3:c5:91:d0:a6:8a:f6:9d:95:73:fb:
         bd:aa:09:0b:3b:af:6b:bf:40:77:f3:3f:5b:82:31:2f:cc:71:
         a3:75:a3:a8:be:f7:7b:94:22:81:56:65:70:6d:4d:1b:41:37:
         4d:63:3a:6e:4b:a2:fa:0f:c8:95:b8:a3:ed:e0:5b:19:44:52:
         59:80:ff:58:64:1b:41:99:58:82:fa:8b:46:15:9a:ce:e7:4e:
         84:a1:d8:67:8b:30:07:2d:2a:ab:2e:41:30:c2:a9:d7:a7:6c:
         2d:41:81:55:15:01:65:da:25:8f:9b:99:91:26:16:51:21:02:
         65:b8:73:05:15:80:a4:f6:66:b6:c7:8b:03:93:89:85:09:ec:
         49:ac:6e:23:09:54:8a:4a:13:3b:1e:e2:db:bf:3b:27:97:f3:
         39:d6:20:1e:2c:28:fc:0a:a3:12:d9:f5:03:c1:8c:72:7c:58:
         2e:d3:0d:ea:eb:b5:9a:56:78:60:99:17:98:dd:f8:8f:9d:28:
         c1:0e:59:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org