Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/1/3138372e34392e3132382e302f32302d3234203d3e203238313435.roa
File:                     3138372e34392e3132382e302f32302d3234203d3e203238313435.roa (raw, json)
Hash identifier:          +zrSrGBk10e9xRgYAypX1pUu/9AnutQ6lPIBEsvOYB8=
Subject key identifier:   74:E4:2A:73:A0:EC:C6:89:23:9F:A5:AB:1C:B6:B9:FF:64:D4:51:7D
Certificate issuer:       /CN=31E1F1616E7FDE1677AA01660480B3498990ECA4
Certificate serial:       68125852E1E48A95119DBA1BA37631F29297D1F1
Authority key identifier: 31:E1:F1:61:6E:7F:DE:16:77:AA:01:66:04:80:B3:49:89:90:EC:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31E1F1616E7FDE1677AA01660480B3498990ECA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/1/3138372e34392e3132382e302f32302d3234203d3e203238313435.roa
Signing time:             Thu 04 Apr 2024 17:54:54 +0000
ROA not before:           Thu 04 Apr 2024 17:49:54 +0000
ROA not after:            Thu 03 Apr 2025 17:54:54 +0000
asID:                     28145
IP address blocks:        187.49.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:12:58:52:e1:e4:8a:95:11:9d:ba:1b:a3:76:31:f2:92:97:d1:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31E1F1616E7FDE1677AA01660480B3498990ECA4
        Validity
            Not Before: Apr  4 17:49:54 2024 GMT
            Not After : Apr  3 17:54:54 2025 GMT
        Subject: CN=74E42A73A0ECC689239FA5AB1CB6B9FF64D4517D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:3d:64:95:9a:4a:8f:a2:4f:94:aa:e4:a0:
                    c4:9d:fe:b3:67:b9:1d:56:bc:4c:6a:45:7c:f8:a3:
                    7c:39:23:6e:42:9b:29:ed:da:85:05:7e:ae:e0:17:
                    9e:82:ec:63:d7:2b:08:52:24:4b:bb:bd:09:60:a9:
                    8a:a3:d3:8b:a0:05:f3:af:87:7f:c1:8a:06:58:5d:
                    b4:f7:54:2b:ff:75:2e:e0:0b:08:7f:a2:77:98:eb:
                    a7:5d:9d:b0:4e:4a:b6:32:6c:53:81:43:ff:7c:24:
                    6f:91:52:06:9b:0a:9d:10:b0:be:3e:39:94:fd:c2:
                    a4:e8:11:47:0f:1d:1e:2d:0e:04:02:ae:b6:d1:54:
                    be:df:fd:77:73:b8:a8:2e:2e:93:85:df:2e:31:81:
                    3e:7d:2c:ae:1f:36:9a:f9:c8:4a:05:e9:a5:eb:37:
                    69:af:9b:59:23:2f:e5:f4:d9:71:1b:ee:a1:4e:85:
                    32:d4:39:56:0f:54:0e:ea:1a:c4:ca:f8:12:23:42:
                    d2:29:41:56:0b:e4:95:58:bd:8a:b3:ca:83:48:1d:
                    84:62:8c:8c:a5:47:4c:5c:47:5c:e3:40:05:de:11:
                    8f:60:6b:85:db:7a:c3:41:14:c7:f4:99:4b:99:c8:
                    b9:a1:2f:20:26:33:fc:f7:84:73:82:56:4e:0b:58:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E4:2A:73:A0:EC:C6:89:23:9F:A5:AB:1C:B6:B9:FF:64:D4:51:7D
            X509v3 Authority Key Identifier:
                keyid:31:E1:F1:61:6E:7F:DE:16:77:AA:01:66:04:80:B3:49:89:90:EC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/1/31E1F1616E7FDE1677AA01660480B3498990ECA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31E1F1616E7FDE1677AA01660480B3498990ECA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/1/3138372e34392e3132382e302f32302d3234203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:71:a9:0b:de:ec:b1:99:7f:3f:94:18:da:8c:a6:20:8d:84:
         df:c7:97:ee:55:e7:3d:31:f0:c1:30:c9:13:b5:db:f3:17:89:
         ae:63:fc:06:6d:21:f7:b3:09:2a:73:a1:c8:49:d0:c1:7b:42:
         96:51:2a:ae:e4:75:78:0e:ec:81:82:0d:34:d9:92:14:d0:12:
         07:2f:be:a8:23:1a:77:dc:87:80:af:91:7a:f1:ad:2c:01:be:
         b3:b8:83:c4:6c:84:4d:b0:ab:c3:da:63:50:78:9d:85:b7:21:
         34:ff:4b:3d:80:c2:0f:94:b8:d2:06:84:fc:72:31:32:b9:9c:
         ff:fb:04:43:81:00:ba:a7:6f:12:57:50:45:30:99:ac:e0:a1:
         8c:d1:59:64:13:37:db:df:48:38:8d:69:8d:ee:86:78:22:2c:
         08:9a:9e:fb:bb:ef:b4:de:5b:8a:2b:c2:39:61:ae:dc:8e:df:
         1a:7b:04:0d:c5:b6:54:21:27:59:a7:a7:43:7c:28:8c:f5:6a:
         4c:85:8a:3a:91:5b:50:b5:3a:f6:8c:b8:39:63:ba:dd:c7:dc:
         9d:68:b2:9e:6a:92:7b:20:d1:02:ee:27:21:ac:55:70:2c:50:
         af:84:32:d7:21:82:74:2f:32:d1:23:55:ff:9c:ff:17:d5:65:
         13:e0:65:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org