Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32322d3234203d3e20323730353737.roa
File:                     3138372e39342e31322e302f32322d3234203d3e20323730353737.roa (raw, json)
Hash identifier:          EEhgQG0V7xIWkcHFb0XRQ8X3MNGosUf4lPmNO3PfyQw=
Subject key identifier:   21:63:5B:86:5B:A9:30:BF:6D:19:D4:69:74:57:07:77:68:73:6F:20
Certificate issuer:       /CN=E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7
Certificate serial:       06B4CD15D88F5DA30113E1857B1B1A66E816DEC6
Authority key identifier: E0:E8:8C:0E:CD:EE:6F:4B:0F:14:27:B3:F5:35:37:2B:20:F7:6C:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32322d3234203d3e20323730353737.roa
Signing time:             Fri 03 Mar 2023 12:42:00 +0000
ROA not before:           Fri 03 Mar 2023 12:37:00 +0000
ROA not after:            Fri 01 Mar 2024 12:42:00 +0000
asID:                     270577
IP address blocks:        187.94.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b4:cd:15:d8:8f:5d:a3:01:13:e1:85:7b:1b:1a:66:e8:16:de:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7
        Validity
            Not Before: Mar  3 12:37:00 2023 GMT
            Not After : Mar  1 12:42:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:bd:56:b6:78:cb:6a:b8:1a:6b:ec:e7:16:
                    c9:e7:e2:4c:7c:b3:b2:36:90:a5:b8:65:f9:53:26:
                    65:cb:03:62:3d:8e:ba:dc:0c:6c:b1:63:d3:41:24:
                    7f:2f:74:14:cf:1e:b6:f7:94:7b:ef:3b:47:94:46:
                    92:6e:52:01:67:4c:61:2d:aa:51:fb:8b:31:13:c5:
                    74:b2:b5:6b:e1:47:8a:78:2e:f4:24:52:a2:6a:6f:
                    ad:da:7f:48:8e:e9:21:d3:4b:52:75:3c:2c:03:42:
                    f7:81:d4:25:6f:68:23:3a:a6:ea:b2:b3:b6:0a:13:
                    58:23:11:2e:d2:d7:d3:ef:8b:47:99:39:36:b7:fa:
                    99:f0:d5:16:82:e5:03:67:ee:25:f1:9b:47:6d:7f:
                    71:cb:ce:85:07:8b:dd:a5:07:38:2f:fa:b1:9b:3b:
                    02:a7:48:1a:17:c2:6d:ad:35:8f:51:5d:c2:64:b8:
                    39:5e:a4:1b:6b:eb:3d:1d:1d:43:86:f2:b7:20:39:
                    ce:cd:20:80:1e:f4:7f:3c:01:0e:8a:dc:99:4c:e4:
                    89:3f:3a:05:ea:be:8f:4a:11:0d:e6:9a:c5:e0:55:
                    68:dd:cb:56:60:14:cd:1e:04:85:5d:f9:b2:1d:a0:
                    30:b7:c6:40:a8:52:bd:9e:9c:82:8f:f3:6a:71:59:
                    fa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:63:5B:86:5B:A9:30:BF:6D:19:D4:69:74:57:07:77:68:73:6F:20
            X509v3 Authority Key Identifier:
                keyid:E0:E8:8C:0E:CD:EE:6F:4B:0F:14:27:B3:F5:35:37:2B:20:F7:6C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0E88C0ECDEE6F4B0F1427B3F535372B20F76CC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31322e302f32322d3234203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:3b:42:94:3c:ae:89:18:04:fe:42:99:e8:00:c9:45:ec:b0:
         48:41:34:f5:48:31:0c:d6:dd:35:77:98:d0:ea:64:95:6a:a8:
         b8:18:97:9a:6b:3b:0f:c1:c0:25:cb:e2:58:af:cb:3c:e4:cf:
         fb:47:94:5d:8d:6b:c1:b0:23:59:ff:7f:01:b9:ff:2d:1c:9d:
         55:4a:7f:54:25:3e:4d:4e:e5:41:85:f8:0d:57:15:35:81:b0:
         27:fb:68:59:4d:aa:a4:79:15:01:a6:0e:e2:6d:21:bc:7a:fc:
         dd:47:9b:ca:c4:a6:33:08:ef:52:79:e7:4c:e0:19:2e:80:dc:
         16:36:f3:fc:2b:87:35:bb:ae:9b:7c:61:5c:cd:2b:e9:26:0d:
         73:f2:89:32:3e:f2:d2:7a:58:da:80:e2:8d:04:37:2d:49:f4:
         e0:f8:b0:e3:27:e9:4a:35:c1:18:92:14:72:9c:8a:fc:55:74:
         93:35:98:f9:ec:67:96:bb:cf:95:73:84:aa:6e:ed:48:fb:b0:
         2f:f7:3e:92:27:b1:93:ba:6c:cc:31:cf:d0:6b:29:65:2e:d8:
         03:64:f5:8f:41:cc:5c:b7:cd:6f:cf:10:86:ec:be:52:84:c3:
         37:c8:a5:44:a8:19:46:ed:42:17:89:c9:86:df:3c:90:c4:56:
         9f:d4:08:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org