Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/0/3138372e38352e34382e302f32312d3234203d3e20323632373237.roa
File:                     3138372e38352e34382e302f32312d3234203d3e20323632373237.roa (raw, json)
Hash identifier:          VoZ67G/KkHOhzS1fidcXhrfKdjPCoKJ3PqcYTehIApk=
Subject key identifier:   18:F0:99:98:CB:78:1F:6A:34:DF:35:46:7D:37:81:5D:C5:A9:09:F1
Certificate issuer:       /CN=EF08A46E7F0139B6793DF7AE1772FEA66C73E614
Certificate serial:       5A78046B88D419930781BA017D1F67F77ED1C317
Authority key identifier: EF:08:A4:6E:7F:01:39:B6:79:3D:F7:AE:17:72:FE:A6:6C:73:E6:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF08A46E7F0139B6793DF7AE1772FEA66C73E614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/0/3138372e38352e34382e302f32312d3234203d3e20323632373237.roa
Signing time:             Sat 04 Nov 2023 02:28:14 +0000
ROA not before:           Sat 04 Nov 2023 02:23:14 +0000
ROA not after:            Sat 02 Nov 2024 02:28:14 +0000
asID:                     262727
IP address blocks:        187.85.48.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:78:04:6b:88:d4:19:93:07:81:ba:01:7d:1f:67:f7:7e:d1:c3:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF08A46E7F0139B6793DF7AE1772FEA66C73E614
        Validity
            Not Before: Nov  4 02:23:14 2023 GMT
            Not After : Nov  2 02:28:14 2024 GMT
        Subject: CN=18F09998CB781F6A34DF35467D37815DC5A909F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:bc:c0:70:98:38:bc:06:e1:7e:7d:42:26:
                    77:05:c0:f5:7c:ba:d3:87:3b:46:2d:5d:5c:cc:51:
                    7b:ca:b2:e3:00:83:ad:42:e7:4c:1f:a6:a5:57:62:
                    2d:6e:ee:0b:3c:21:be:17:5a:4d:35:a0:6e:ac:50:
                    c2:65:91:86:e5:ef:19:d8:ec:55:01:26:4c:b0:cb:
                    2b:8c:85:f9:f4:d7:37:8d:e9:9d:bd:0e:cf:e2:46:
                    47:08:c7:0b:1f:ac:ce:d0:f5:0e:74:31:e1:0e:dc:
                    78:93:e6:97:6f:f6:28:f1:76:ad:a4:34:3e:24:eb:
                    dc:7f:9a:62:4d:8a:d1:65:82:d5:8c:17:fe:cf:d0:
                    57:49:55:a5:a8:f2:4f:b3:4e:53:a9:b0:05:c4:be:
                    44:83:54:35:93:16:f0:e5:4f:35:19:c3:c7:d5:fd:
                    48:e8:ed:c6:bc:76:6d:0e:1d:15:bc:9f:4d:eb:86:
                    16:ce:c9:d6:48:3a:bc:a1:70:20:43:03:9e:ea:f8:
                    57:a3:e7:d3:d9:df:6f:5b:d2:7a:50:c5:01:d4:76:
                    3a:19:0d:eb:5e:fc:83:00:3e:eb:6a:ab:18:0e:1f:
                    9f:53:0b:c3:9c:dd:74:46:19:4f:05:62:f6:c5:f5:
                    f9:b1:a9:1a:f0:9a:b4:5c:c8:d6:4e:20:f4:ad:4c:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F0:99:98:CB:78:1F:6A:34:DF:35:46:7D:37:81:5D:C5:A9:09:F1
            X509v3 Authority Key Identifier:
                keyid:EF:08:A4:6E:7F:01:39:B6:79:3D:F7:AE:17:72:FE:A6:6C:73:E6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/0/EF08A46E7F0139B6793DF7AE1772FEA66C73E614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF08A46E7F0139B6793DF7AE1772FEA66C73E614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB3WX4aCmLrBhhQtTFCUG7d63jpVkoX4FkDDngLKorgT/0/3138372e38352e34382e302f32312d3234203d3e20323632373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:07:aa:9b:eb:5c:16:77:ff:66:a8:64:f2:53:98:7a:00:9d:
         2c:12:50:1d:67:43:b8:ad:ee:58:c7:f7:14:b9:aa:0f:b3:5d:
         f6:ea:cd:4d:0f:1a:6c:08:a8:2d:75:1a:5f:41:4d:9f:5c:b5:
         bb:42:d5:0a:f1:1e:b2:16:d5:50:31:19:24:08:48:bf:9b:81:
         77:9a:89:50:a2:f2:e7:76:32:a7:56:10:4b:42:4b:6e:5c:d3:
         72:94:52:25:da:89:26:56:42:44:da:fe:8b:48:a2:f5:18:0c:
         ca:96:9d:0b:b6:f5:6b:08:1d:d4:a5:15:de:df:35:a9:af:a8:
         e7:36:3f:ac:36:2e:33:16:9e:d7:c4:ac:83:10:f9:49:62:5e:
         0a:a6:40:80:c8:05:c9:99:84:6a:9a:35:b2:3a:1a:ed:e0:f0:
         59:48:f7:16:29:6c:11:bf:3b:cb:60:11:cb:97:52:ae:38:39:
         cc:d1:93:3c:46:eb:f5:ff:3d:87:ce:4f:0a:27:46:28:8d:36:
         29:4d:8e:b7:8b:3f:a2:52:cf:a7:7d:fa:7f:1e:4e:ff:cc:fd:
         49:8c:ed:d0:46:40:8c:c2:ad:02:9b:c5:fd:08:0e:a5:85:a9:
         bf:f9:f2:d6:9a:33:24:29:cf:23:08:28:60:4e:a3:e2:c4:56:
         31:75:d4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org