Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5UQmy3coVdJzPh76Dycrge795AX3uHDkzs8sf8eqVT8/0/3138372e36332e38302e302f32302d3234203d3e20323632363635.roa
File:                     3138372e36332e38302e302f32302d3234203d3e20323632363635.roa (raw, json)
Hash identifier:          IU+6yXSa/Ms9ruPd+kNs3HcalWCBEEbvuE0tcmCTOF8=
Subject key identifier:   38:91:AF:43:98:25:06:98:BD:1F:6B:7F:2D:01:29:18:AF:3D:6A:5E
Certificate issuer:       /CN=8CC8EEDF647688755546B81ACA852ADF8C4AA95E
Certificate serial:       40A641F70817B6F4B33C3D0386AC5278F461DF03
Authority key identifier: 8C:C8:EE:DF:64:76:88:75:55:46:B8:1A:CA:85:2A:DF:8C:4A:A9:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CC8EEDF647688755546B81ACA852ADF8C4AA95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5UQmy3coVdJzPh76Dycrge795AX3uHDkzs8sf8eqVT8/0/3138372e36332e38302e302f32302d3234203d3e20323632363635.roa
Signing time:             Tue 15 Aug 2023 13:04:24 +0000
ROA not before:           Tue 15 Aug 2023 12:59:24 +0000
ROA not after:            Tue 13 Aug 2024 13:04:24 +0000
asID:                     262665
IP address blocks:        187.63.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a6:41:f7:08:17:b6:f4:b3:3c:3d:03:86:ac:52:78:f4:61:df:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CC8EEDF647688755546B81ACA852ADF8C4AA95E
        Validity
            Not Before: Aug 15 12:59:24 2023 GMT
            Not After : Aug 13 13:04:24 2024 GMT
        Subject: CN=3891AF4398250698BD1F6B7F2D012918AF3D6A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:7f:d1:f0:39:f4:5e:06:62:54:03:4f:a5:
                    9d:bb:8c:a6:91:74:86:05:f6:1f:80:06:7d:22:c0:
                    75:6a:07:76:18:a3:1f:2f:1a:b2:4e:60:49:55:75:
                    38:a7:72:4d:08:5a:8d:b3:d2:2e:3c:88:75:6f:33:
                    79:33:4b:ef:2d:df:42:d8:cb:4b:72:41:43:02:3d:
                    d5:63:ee:90:0f:95:12:cc:5a:17:33:3f:a5:d0:af:
                    89:f4:7d:0e:7e:f1:fe:0f:56:27:a6:2a:b1:00:4a:
                    96:61:70:b9:2f:12:eb:90:38:e1:e8:da:ed:0f:84:
                    06:ab:d0:28:f0:33:f3:fb:82:b0:ff:5d:97:54:14:
                    19:29:72:9c:b1:7c:d2:e4:54:94:6e:e2:89:c2:78:
                    61:de:7f:81:86:5a:24:82:fd:b1:3c:b9:95:7e:23:
                    00:8f:64:70:d1:6b:a6:25:0a:2a:1c:b1:70:b0:78:
                    ae:7a:96:23:31:30:33:36:d3:d6:bc:71:e5:6d:44:
                    48:60:fd:3d:d6:36:52:0e:28:d9:72:54:8f:be:bc:
                    50:e9:72:f1:4c:11:05:45:92:ef:5b:d2:dd:ea:4d:
                    79:1f:d5:80:89:7f:48:43:75:ce:80:88:ac:7b:18:
                    95:43:c2:5c:a0:b8:2d:aa:ae:e4:91:a7:60:52:5c:
                    ef:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:91:AF:43:98:25:06:98:BD:1F:6B:7F:2D:01:29:18:AF:3D:6A:5E
            X509v3 Authority Key Identifier:
                keyid:8C:C8:EE:DF:64:76:88:75:55:46:B8:1A:CA:85:2A:DF:8C:4A:A9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5UQmy3coVdJzPh76Dycrge795AX3uHDkzs8sf8eqVT8/0/8CC8EEDF647688755546B81ACA852ADF8C4AA95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CC8EEDF647688755546B81ACA852ADF8C4AA95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5UQmy3coVdJzPh76Dycrge795AX3uHDkzs8sf8eqVT8/0/3138372e36332e38302e302f32302d3234203d3e20323632363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         df:2f:ad:de:20:df:cd:70:5d:b6:74:1f:78:25:0f:6b:39:99:
         d1:99:c0:b8:73:49:3a:0b:f1:ee:61:73:81:f2:4c:81:53:8e:
         de:ec:51:ec:31:6f:00:c5:66:9e:ee:2a:80:29:ff:46:f8:47:
         a3:0a:95:30:7c:c5:d5:aa:d3:6d:f2:79:67:94:4f:05:d1:f7:
         b8:dc:44:3b:69:c3:e6:cc:93:33:31:d1:74:df:c0:22:c1:c5:
         7b:1c:ee:b1:11:77:89:da:a7:e0:32:1d:0b:9c:bb:98:10:72:
         53:45:33:d8:46:c5:70:ae:ba:01:57:33:9c:54:af:60:ad:dc:
         70:96:8d:f4:1a:89:bc:05:8b:28:9a:ee:b1:ef:c7:aa:70:3d:
         47:06:f6:fc:0a:bc:77:13:69:fd:6c:f9:5b:19:55:eb:f1:ba:
         46:97:88:d8:dc:24:bb:a7:c8:ad:37:5b:7d:ee:17:39:39:c4:
         b6:46:77:89:cc:96:3f:9e:9f:4c:8a:86:1e:41:c7:87:27:72:
         68:11:04:95:cf:89:58:63:5a:4c:54:7d:bf:3e:25:32:94:fd:
         69:4a:c4:f0:59:c9:d4:e1:6c:c7:56:e7:64:84:5c:0b:6b:8b:
         26:86:30:74:12:c3:57:b9:5e:c2:55:6a:ca:3b:bb:19:3d:e6:
         f3:7e:81:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:12 2024 by rpki-client on console-ams.rpki-client.org