Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139322e302f32322d3232203d3e203533303836.roa
File:                     3138372e33332e3139322e302f32322d3232203d3e203533303836.roa (raw, json)
Hash identifier:          MSmBWU920sWVqYG6mfLUkc3qbCfhfkc5F980PxnINOU=
Subject key identifier:   9F:53:91:24:79:D4:AE:EB:22:99:B3:11:BC:60:26:78:AB:06:1D:82
Certificate issuer:       /CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
Certificate serial:       2D23546DA8B734C652B33C968603515FFACB36F8
Authority key identifier: 6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139322e302f32322d3232203d3e203533303836.roa
Signing time:             Thu 29 Jun 2023 14:13:32 +0000
ROA not before:           Thu 29 Jun 2023 14:08:32 +0000
ROA not after:            Thu 27 Jun 2024 14:13:32 +0000
asID:                     53086
IP address blocks:        187.33.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:23:54:6d:a8:b7:34:c6:52:b3:3c:96:86:03:51:5f:fa:cb:36:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
        Validity
            Not Before: Jun 29 14:08:32 2023 GMT
            Not After : Jun 27 14:13:32 2024 GMT
        Subject: CN=9F53912479D4AEEB2299B311BC602678AB061D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:47:6d:b3:7f:5a:1a:05:bf:86:7d:80:33:7d:
                    47:5b:41:2c:7c:be:5d:a1:3d:5f:0a:33:ac:55:2b:
                    0b:6d:9c:ee:ea:8c:3a:1e:4f:97:b6:e0:b9:a0:31:
                    c3:6b:ca:22:75:3f:ce:fa:a8:4b:c6:0f:7a:94:f0:
                    3d:b4:7c:0f:86:63:70:1c:bb:0b:b4:d5:22:74:7c:
                    85:e4:f1:91:60:3c:1e:ec:3f:8c:58:bf:d7:be:50:
                    82:f4:bc:02:4d:6a:f0:df:2d:17:ad:46:f6:0d:c5:
                    f0:be:e2:33:23:47:5d:65:28:0f:88:24:c4:af:34:
                    54:86:ec:2a:44:a2:d1:4b:08:60:9e:7c:a2:fb:54:
                    fb:0e:f0:fb:f7:e8:6d:ac:aa:a7:63:fb:c0:fe:43:
                    f4:61:e1:3d:8a:9e:4f:8e:99:1c:63:51:ee:ab:ca:
                    cc:75:df:9d:78:9d:3e:b7:7d:21:b8:c7:ee:50:11:
                    e7:e9:cb:96:9d:a0:40:b5:ec:ae:62:b2:2c:3b:ce:
                    81:62:57:43:1b:09:ab:99:d0:33:cf:0b:fa:f3:51:
                    7b:38:9f:98:7d:13:12:2a:32:51:2d:39:09:7d:e5:
                    2e:9c:6a:62:46:ff:4d:bc:dd:87:80:b9:e8:4d:6e:
                    f8:ab:7c:d6:66:48:35:f1:57:38:b2:4b:1e:1a:8a:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:53:91:24:79:D4:AE:EB:22:99:B3:11:BC:60:26:78:AB:06:1D:82
            X509v3 Authority Key Identifier:
                keyid:6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139322e302f32322d3232203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:b6:74:39:3d:e5:8d:ed:fa:82:2f:ef:a6:23:4d:ac:e6:
         88:99:6e:0f:af:24:3b:0d:29:9e:da:5e:75:10:3b:b3:5e:89:
         74:ed:43:8c:9a:00:16:8a:1f:ad:99:d7:02:3a:f7:da:27:2c:
         60:a6:f8:62:66:07:2b:96:eb:4e:8c:56:b1:cd:ad:4f:36:c1:
         00:e4:67:33:53:d8:57:a8:d9:51:b1:6a:00:68:c6:60:d5:1e:
         89:4e:a7:43:f4:6f:e9:28:7d:fe:87:13:0a:f3:cb:9b:3e:ce:
         5b:9b:75:e2:66:65:c3:d3:dd:82:b6:cc:01:29:d9:af:79:92:
         fa:3f:25:54:4a:e8:8e:22:ab:a3:aa:ad:3a:bd:9e:1d:d7:b2:
         c5:a9:e7:4d:6d:bd:89:02:68:ce:c7:89:a6:61:99:1e:d3:ab:
         14:6b:4f:9d:fb:6f:84:d4:36:6f:9d:db:b4:c9:10:47:ed:52:
         a3:91:26:ee:e7:3c:d8:85:e6:02:3f:34:2c:4c:3c:03:e9:5f:
         ef:b3:ca:ee:87:0d:aa:a5:04:86:e0:18:86:1f:d2:21:f7:a7:
         bd:44:a1:ec:90:d5:18:e9:cb:2b:3f:10:eb:81:67:38:b1:35:
         e9:12:12:af:d7:7d:b7:a5:ee:e1:5b:b3:6f:1d:02:48:a7:3c:
         15:a8:c2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org