Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/3138372e312e3131322e302f32302d3234203d3e203533313633.roa
File:                     3138372e312e3131322e302f32302d3234203d3e203533313633.roa (raw, json)
Hash identifier:          xRw8s/o5aij/EfFUxTWW1qq++i6c2HoF3SB1cMHYw30=
Subject key identifier:   1F:FF:62:A5:70:AF:9F:A1:21:A9:2C:04:EE:0C:8E:4F:EC:8B:4D:31
Certificate issuer:       /CN=1B5BDCFDE0F046B23BB4D99756FC3F671DD6707E
Certificate serial:       2BEC52A9BB008943F780F4A96E904AF458D3B20A
Authority key identifier: 1B:5B:DC:FD:E0:F0:46:B2:3B:B4:D9:97:56:FC:3F:67:1D:D6:70:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B5BDCFDE0F046B23BB4D99756FC3F671DD6707E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/3138372e312e3131322e302f32302d3234203d3e203533313633.roa
Signing time:             Fri 14 Jul 2023 17:57:24 +0000
ROA not before:           Fri 14 Jul 2023 17:52:24 +0000
ROA not after:            Fri 12 Jul 2024 17:57:24 +0000
asID:                     53163
IP address blocks:        187.1.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ec:52:a9:bb:00:89:43:f7:80:f4:a9:6e:90:4a:f4:58:d3:b2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5BDCFDE0F046B23BB4D99756FC3F671DD6707E
        Validity
            Not Before: Jul 14 17:52:24 2023 GMT
            Not After : Jul 12 17:57:24 2024 GMT
        Subject: CN=1FFF62A570AF9FA121A92C04EE0C8E4FEC8B4D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:44:4a:c5:c3:b4:23:64:d5:89:9c:26:82:
                    38:ef:81:54:a9:63:c6:ea:13:55:5d:dd:24:b7:d9:
                    63:9f:77:dd:12:b9:5e:2d:db:93:66:e9:fa:81:23:
                    b4:61:c5:bd:1c:00:33:df:5d:69:ec:29:6d:79:73:
                    51:7d:c3:c6:27:17:e0:8e:ec:c6:40:88:42:2d:85:
                    a9:3b:97:80:6f:a1:5a:8c:9b:2a:23:fd:5d:86:f7:
                    d9:0a:f1:d8:8a:f1:9a:22:b7:f9:8f:83:6e:d4:a6:
                    c4:02:04:81:b0:e7:13:70:62:3e:a1:e8:47:5e:83:
                    31:86:02:26:b3:25:98:79:ba:68:97:71:95:a9:6c:
                    bd:d4:a0:58:b3:8e:30:b8:b2:46:6d:86:ab:b2:1e:
                    c5:16:21:1c:24:bf:be:d5:4e:06:5d:04:ee:64:0d:
                    fa:df:06:5b:b1:58:9c:56:5b:6f:89:54:01:c8:59:
                    dc:37:18:51:c9:22:7d:75:e6:1e:02:d9:da:78:09:
                    d7:aa:c2:a4:25:47:db:17:0b:dc:d0:df:7e:17:ab:
                    72:94:93:39:e2:12:27:c3:8e:2b:5e:0b:b5:a9:6a:
                    d6:de:77:bb:91:70:8e:86:e8:8c:43:09:9e:9d:58:
                    e9:ea:44:25:28:64:bf:63:f0:80:4b:f2:43:81:c7:
                    7c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FF:62:A5:70:AF:9F:A1:21:A9:2C:04:EE:0C:8E:4F:EC:8B:4D:31
            X509v3 Authority Key Identifier:
                keyid:1B:5B:DC:FD:E0:F0:46:B2:3B:B4:D9:97:56:FC:3F:67:1D:D6:70:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/1B5BDCFDE0F046B23BB4D99756FC3F671DD6707E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B5BDCFDE0F046B23BB4D99756FC3F671DD6707E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/0/3138372e312e3131322e302f32302d3234203d3e203533313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:3d:53:40:0d:a0:c1:a8:f0:92:ce:ee:92:94:7f:23:cf:
         cf:01:1d:fe:b8:e1:60:16:49:dd:1c:40:be:46:5e:55:0c:08:
         5c:4d:d9:ec:f4:27:a9:58:d2:76:76:8f:0b:e3:08:eb:d9:2a:
         0a:38:83:f5:b7:3c:c3:35:25:e4:52:c1:10:6e:b1:ac:b4:d6:
         12:22:97:66:8a:d7:1b:8a:8c:c7:fe:45:46:c2:20:bb:30:9f:
         b7:bc:43:8e:48:8e:32:87:10:53:3d:0e:6d:c2:bf:b2:3d:d6:
         f7:21:1c:9e:0e:c5:d8:62:a7:e5:7d:ad:36:3f:86:92:1f:0e:
         3f:88:b8:63:25:e9:90:8e:6e:7f:ac:9f:97:a5:9a:10:a1:56:
         35:01:63:a0:cc:bc:b0:30:d9:57:ad:46:29:40:1d:c9:ed:be:
         43:35:dc:03:16:f2:ab:bf:32:ff:39:66:e0:42:c0:92:f1:43:
         96:54:fc:0d:d5:8d:b5:76:fa:38:14:e6:90:76:b8:e8:36:f7:
         4e:99:8b:05:69:e2:b8:5d:5e:35:cf:68:e2:55:0c:bb:b6:a3:
         92:ca:f7:87:a7:00:09:e8:c0:77:4e:ba:30:b5:d3:38:a0:ce:
         f1:a7:09:c9:fb:27:d9:e7:45:f2:25:d4:8f:28:b5:57:a4:37:
         4e:82:cd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org