Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3230302e302f32312d3231203d3e203533303836.roa
File:                     3138372e33332e3230302e302f32312d3231203d3e203533303836.roa (raw, json)
Hash identifier:          1j3XceGk1r2gTdUbNcD08XWYYKN3OC224RYH5W9km8E=
Subject key identifier:   E0:AF:8E:02:4E:0E:9B:AD:58:60:0B:4C:40:B3:93:C4:82:B1:FF:7D
Certificate issuer:       /CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
Certificate serial:       3812CC405398148FAEC20E1EE18E6D53DEA60103
Authority key identifier: 6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3230302e302f32312d3231203d3e203533303836.roa
Signing time:             Thu 29 Jun 2023 14:13:31 +0000
ROA not before:           Thu 29 Jun 2023 14:08:31 +0000
ROA not after:            Thu 27 Jun 2024 14:13:31 +0000
asID:                     53086
IP address blocks:        187.33.200.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:12:cc:40:53:98:14:8f:ae:c2:0e:1e:e1:8e:6d:53:de:a6:01:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6671CD0BBD67CC600D3A3DFD97D129A050CA08
        Validity
            Not Before: Jun 29 14:08:31 2023 GMT
            Not After : Jun 27 14:13:31 2024 GMT
        Subject: CN=E0AF8E024E0E9BAD58600B4C40B393C482B1FF7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:77:b4:e0:31:a0:c3:c6:17:99:ce:9f:ff:
                    9b:2e:86:9b:47:d8:d8:24:1e:83:f2:4a:64:43:1c:
                    e4:7e:16:a4:4b:94:10:63:d9:49:76:e0:31:c2:92:
                    6a:2d:bd:d0:da:80:cb:6c:e1:b2:b4:a1:f5:b4:fb:
                    71:3d:b8:09:ea:c1:94:71:f6:0f:18:21:9e:72:62:
                    8b:d0:29:a3:6b:a2:b6:86:ee:0f:da:52:d2:86:5f:
                    0d:f1:0a:74:f1:84:84:17:b9:ff:19:ac:0b:4c:ee:
                    c6:2a:53:de:63:0e:40:5d:c2:d3:8d:48:ae:d1:d1:
                    d9:9a:31:8b:32:0f:1b:05:41:ae:05:56:a3:95:07:
                    88:51:2a:b0:e9:30:55:7a:81:6d:18:80:65:b8:22:
                    f8:43:b9:f0:cb:f8:c9:2e:04:11:f9:9d:6e:bf:a1:
                    ea:6c:51:81:e8:13:39:9c:d0:51:9b:1d:b9:72:01:
                    dc:6e:b2:23:7d:16:b5:a4:d7:5f:79:de:9d:74:af:
                    5f:fc:ae:7a:98:be:5d:0a:f6:2f:e3:89:0f:f4:9a:
                    a4:34:dd:a4:7e:58:14:9d:1c:11:8a:dd:fe:c5:45:
                    4a:ce:bc:fa:1d:43:84:c6:06:8a:a2:50:a5:39:31:
                    64:d3:6e:5e:e3:50:f7:e3:b6:a0:b1:a1:ec:e4:e4:
                    6e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AF:8E:02:4E:0E:9B:AD:58:60:0B:4C:40:B3:93:C4:82:B1:FF:7D
            X509v3 Authority Key Identifier:
                keyid:6E:66:71:CD:0B:BD:67:CC:60:0D:3A:3D:FD:97:D1:29:A0:50:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6E6671CD0BBD67CC600D3A3DFD97D129A050CA08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErdXEkDdDAoJBYfQCWqeHzTY5nhbRcfVEiyJkyjzRBcr/0/3138372e33332e3230302e302f32312d3231203d3e203533303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:e3:2d:c4:d2:cc:9d:8c:1d:57:10:98:c3:94:ae:02:e8:af:
         f2:cc:43:b5:44:0e:f1:6e:53:4b:b8:89:f8:61:20:81:80:e2:
         c0:50:12:fd:0b:d0:22:1d:5a:ba:ae:4b:b9:da:4b:e6:62:3f:
         ea:88:d1:a7:5f:c3:c5:26:0b:b8:3c:43:fd:22:1d:c5:52:50:
         b9:bd:91:9b:70:8d:2f:62:7b:64:51:13:5b:30:8c:d6:9b:83:
         87:b1:ca:38:d8:16:95:7d:05:b0:6a:e6:ad:4c:e0:55:b6:3a:
         a4:1e:e2:a5:0d:fe:67:bf:0b:ac:1c:de:bb:a8:05:86:25:20:
         99:2c:02:46:b7:36:c5:91:aa:a9:64:3e:98:ae:9b:a4:2b:61:
         c7:7d:62:05:19:bd:9a:84:bb:f7:8b:84:e5:64:72:63:d4:25:
         23:fb:fa:70:02:17:09:a4:2e:a2:5d:d5:2a:6c:96:f9:3e:e4:
         b2:e4:50:00:81:cd:c7:6e:a8:3d:e4:43:1d:dc:f7:bd:15:07:
         6c:59:11:48:80:01:d8:a7:bc:44:06:fe:be:4c:8d:92:1c:1c:
         cf:8a:72:20:e3:ff:ba:d6:8c:20:fe:6f:77:9c:52:e5:85:0d:
         42:8b:2c:4d:74:0a:de:30:e8:ea:e4:40:5b:ad:de:29:ba:eb:
         78:d6:38:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org