Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139362e302f32332d3233203d3e203533303836.roa
File:                     3138372e33332e3139362e302f32332d3233203d3e203533303836.roa (raw, json)
Hash identifier:          IfjrM3/dt4kpy8yxg/ko+3F1nOmZh/Ub2lXj24pV7iE=
Subject key identifier:   67:21:F0:97:8D:2A:38:7C:CD:48:C1:24:E8:B5:A1:62:DA:58:F1:41
Certificate issuer:       /CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
Certificate serial:       76C215185026B2FF865982B1C1705D749B332A32
Authority key identifier: 6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139362e302f32332d3233203d3e203533303836.roa
Signing time:             Thu 29 Jun 2023 14:13:32 +0000
ROA not before:           Thu 29 Jun 2023 14:08:32 +0000
ROA not after:            Thu 27 Jun 2024 14:13:32 +0000
asID:                     53086
IP address blocks:        187.33.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c2:15:18:50:26:b2:ff:86:59:82:b1:c1:70:5d:74:9b:33:2a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
        Validity
            Not Before: Jun 29 14:08:32 2023 GMT
            Not After : Jun 27 14:13:32 2024 GMT
        Subject: CN=6721F0978D2A387CCD48C124E8B5A162DA58F141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:53:45:50:bc:59:35:6e:da:b8:b6:54:fb:
                    0e:e9:3b:2e:5b:1a:35:c9:86:f1:bd:b1:40:aa:ce:
                    e9:49:be:ea:03:f3:d4:94:31:6e:e3:6e:34:80:3d:
                    b9:86:62:a0:53:bc:8b:08:5b:31:07:27:95:66:f8:
                    52:0d:d6:af:09:c8:5e:66:97:c6:1a:7a:75:4f:65:
                    db:6e:07:0e:ba:d0:8f:d0:e4:fb:5d:8a:ab:45:86:
                    b1:b3:a9:74:b8:f2:46:be:12:81:18:36:64:a9:60:
                    4a:db:99:33:f3:34:49:ff:3a:17:69:60:07:c3:a9:
                    ad:ff:74:3b:e1:3a:08:5c:8f:bf:35:1c:da:db:27:
                    55:52:36:32:46:b2:7a:b8:c8:98:23:ba:5e:19:4e:
                    ad:a7:0c:77:a7:b3:21:42:ca:68:e5:82:df:68:51:
                    67:79:df:9a:95:6b:9d:3c:88:d4:95:7a:b7:70:d4:
                    0a:e4:0b:c0:7a:ff:4f:d9:5b:a4:20:c8:e1:6e:c8:
                    4d:4c:05:bb:7b:25:6a:b1:1a:a3:e2:6b:be:78:c3:
                    be:f6:f2:31:a0:87:95:c8:b7:7b:ef:ad:c9:41:ad:
                    67:df:b4:cb:34:6c:6f:c0:63:54:fd:56:7e:3e:dc:
                    5e:2d:4e:ee:e1:4a:60:2a:8e:e2:8a:60:18:00:fd:
                    b6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:21:F0:97:8D:2A:38:7C:CD:48:C1:24:E8:B5:A1:62:DA:58:F1:41
            X509v3 Authority Key Identifier:
                keyid:6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3139362e302f32332d3233203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:5f:62:fd:fe:9b:bd:0e:74:b1:30:79:fd:61:46:b0:36:00:
         69:81:61:f2:23:3f:fd:9a:6e:97:91:ee:8c:76:f3:75:97:29:
         83:4c:4e:be:5c:de:27:97:2f:65:27:c8:f9:a2:b0:95:d4:0c:
         ac:8b:ef:dc:fd:06:03:90:be:17:02:b4:c5:88:55:3f:0d:74:
         91:c7:9a:19:f2:78:8f:0e:af:bf:13:68:37:c7:d0:9b:3c:26:
         95:04:6b:df:39:06:58:05:5a:3e:ab:78:c1:7c:72:14:85:04:
         33:72:86:52:4c:44:66:fb:e7:c5:8f:a8:b9:be:3c:d5:be:a4:
         08:00:99:25:be:ca:25:b0:c7:e3:60:38:ac:07:33:d8:95:9f:
         4f:93:a9:4a:5b:d7:d8:85:8d:f1:77:2d:17:a0:39:30:53:86:
         03:08:8d:ca:de:f0:52:c6:77:d2:dd:1d:96:b7:d5:f4:e7:a8:
         49:a9:dd:ca:64:c7:84:e8:9c:42:65:42:99:5b:d4:f6:9e:ae:
         84:42:8f:34:bf:63:cd:19:5c:3b:0c:8e:64:9f:6a:ac:0b:d0:
         30:c8:13:50:e1:60:89:18:5a:01:29:50:aa:8f:17:65:52:c7:
         79:3f:fb:de:00:a8:60:71:66:cb:03:26:af:ec:b0:07:31:74:
         d5:6b:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org