Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/3138372e38342e39362e302f32302d3234203d3e2038303535.roa
File:                     3138372e38342e39362e302f32302d3234203d3e2038303535.roa (raw, json)
Hash identifier:          40tyPu8lolQyr/QCJkA8O6yTpsiJ8jJUrpstGVd+1pE=
Subject key identifier:   CF:5F:6E:67:0C:88:63:24:9B:58:CA:95:B0:B9:DA:23:03:43:7C:A7
Certificate issuer:       /CN=3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717
Certificate serial:       4C37CD6AF7931C1A239BE87E251B3E356BBC508A
Authority key identifier: 3B:2E:CC:1C:5E:24:7D:5D:BE:9C:D0:F6:68:27:7E:EA:B0:63:77:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/3138372e38342e39362e302f32302d3234203d3e2038303535.roa
Signing time:             Wed 03 Apr 2024 18:31:53 +0000
ROA not before:           Wed 03 Apr 2024 18:26:53 +0000
ROA not after:            Wed 02 Apr 2025 18:31:53 +0000
asID:                     8055
IP address blocks:        187.84.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:37:cd:6a:f7:93:1c:1a:23:9b:e8:7e:25:1b:3e:35:6b:bc:50:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717
        Validity
            Not Before: Apr  3 18:26:53 2024 GMT
            Not After : Apr  2 18:31:53 2025 GMT
        Subject: CN=CF5F6E670C8863249B58CA95B0B9DA2303437CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c8:21:59:9a:95:39:85:cc:cb:c3:54:23:39:
                    60:87:53:f2:05:16:a4:40:e4:07:81:4b:25:5d:b5:
                    54:4f:62:4b:2b:f5:ef:07:74:c8:82:44:6e:9f:0d:
                    ae:14:ec:ce:4f:82:a8:d9:36:b2:4d:02:cf:3a:35:
                    ea:6d:9b:42:50:fe:ac:7b:b9:69:79:d7:21:39:1d:
                    85:9e:fc:76:7d:4e:3c:e6:50:35:77:49:da:7b:2f:
                    36:98:e5:eb:c3:a4:ef:47:bc:c1:47:85:f2:f7:ef:
                    cb:7b:d8:c3:b6:da:60:81:13:91:4c:5a:b5:36:8d:
                    38:cb:96:61:b0:0c:a5:8c:85:04:96:86:25:23:fa:
                    29:2d:09:b2:75:bf:1c:1a:b9:8b:b8:8b:97:76:9c:
                    b3:bf:bb:e7:6b:39:5d:11:31:c9:f6:f5:53:97:c9:
                    f1:f6:9c:15:16:e7:91:90:f8:39:28:29:ac:15:e9:
                    e5:24:ff:d6:b1:b9:fd:75:56:f2:6d:15:60:f6:6a:
                    aa:35:24:4c:95:1f:12:af:ae:e1:39:fb:9c:03:aa:
                    94:d2:f1:ee:ba:a0:62:e5:ff:1f:f7:3e:53:2f:06:
                    f4:c1:11:a4:ba:e4:f6:92:c3:27:24:1f:94:28:74:
                    f1:df:ca:a7:43:9f:ca:8b:4f:79:07:90:dd:c8:33:
                    22:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5F:6E:67:0C:88:63:24:9B:58:CA:95:B0:B9:DA:23:03:43:7C:A7
            X509v3 Authority Key Identifier:
                keyid:3B:2E:CC:1C:5E:24:7D:5D:BE:9C:D0:F6:68:27:7E:EA:B0:63:77:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B2ECC1C5E247D5DBE9CD0F668277EEAB0637717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/1/3138372e38342e39362e302f32302d3234203d3e2038303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:e2:90:f7:25:6f:ef:80:30:d2:a1:b0:48:eb:d5:6c:96:f5:
         aa:2c:24:27:a3:ed:d8:fd:df:8c:34:e9:bd:c8:c9:f5:99:e5:
         8d:67:b8:99:26:c9:c7:11:eb:3d:4b:55:37:2d:e9:02:17:25:
         2f:cf:95:cd:8a:8b:32:4a:48:d1:4c:b8:f2:98:7e:10:b8:1b:
         00:47:91:4c:51:bc:89:5a:a3:ed:54:25:df:98:f8:58:74:8d:
         96:f0:6d:d0:2a:10:85:db:65:ed:14:82:e9:d0:47:ca:0e:6f:
         19:04:33:b0:0f:65:ae:8e:92:ae:ea:8f:c1:89:b2:5d:0c:be:
         34:45:ac:7c:ee:3e:9a:8d:f4:83:67:67:45:c1:1f:9a:45:ea:
         5e:f7:7d:52:48:1c:d9:51:80:f6:72:54:21:56:b3:b1:60:6b:
         ad:92:92:fc:cd:b9:10:f4:3b:0b:b9:82:0f:82:ab:8e:c5:57:
         28:e2:e3:17:61:14:3d:82:8d:04:54:2d:f3:af:20:4c:41:d6:
         b9:01:18:0f:40:b2:62:38:9b:04:02:5a:b9:dd:10:e3:98:a3:
         3e:92:67:04:0b:e9:3d:9a:e9:0c:67:39:23:69:6e:35:20:e8:
         49:57:de:07:98:e5:e7:62:3e:26:a2:c6:bd:f3:ba:4b:07:26:
         19:87:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org