Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3138372e312e31362e302f32302d3234203d3e20323632323732.roa
File:                     3138372e312e31362e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          iSjMauJp6LW/h/8jVRgo4KP4/vUHgRriXTpuJMzcluw=
Subject key identifier:   52:9A:C1:7F:C7:CC:DA:68:6C:A9:C6:7C:A9:1A:FB:50:AC:5B:43:21
Certificate issuer:       /CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
Certificate serial:       448FCB0BD3F42CE606585D74C75F0F80FC21C61E
Authority key identifier: 1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3138372e312e31362e302f32302d3234203d3e20323632323732.roa
Signing time:             Mon 20 May 2024 13:12:23 +0000
ROA not before:           Mon 20 May 2024 13:07:23 +0000
ROA not after:            Mon 19 May 2025 13:12:23 +0000
asID:                     262272
IP address blocks:        187.1.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8f:cb:0b:d3:f4:2c:e6:06:58:5d:74:c7:5f:0f:80:fc:21:c6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
        Validity
            Not Before: May 20 13:07:23 2024 GMT
            Not After : May 19 13:12:23 2025 GMT
        Subject: CN=529AC17FC7CCDA686CA9C67CA91AFB50AC5B4321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:e0:f2:fe:d2:5c:45:0b:0f:f7:e5:dd:c8:
                    1e:75:b0:0c:a5:67:f3:1c:fa:77:f9:f0:3b:7b:25:
                    e7:7b:62:43:20:35:35:52:20:12:26:e5:17:4c:76:
                    b4:48:45:b5:3d:33:77:31:2b:d5:61:43:c9:5e:34:
                    7d:c6:c5:ae:37:b0:75:3a:43:f4:49:44:7a:bc:f2:
                    d6:6a:64:05:8f:50:f5:2b:bc:22:8f:df:ab:14:ec:
                    46:2e:81:75:ae:41:df:0f:0c:e2:77:47:29:e7:1c:
                    63:1e:59:ca:18:52:c3:db:2a:d3:f5:5f:ac:d7:a5:
                    f2:62:69:48:61:cb:b8:24:aa:ec:44:d9:fb:7b:9a:
                    fc:8c:1d:6f:d8:52:3e:6c:3f:b3:6e:50:06:85:7c:
                    c4:f3:4d:b7:29:94:81:b0:bc:ee:c2:49:28:4a:57:
                    6b:13:0a:f3:d7:f1:19:77:c0:e0:f2:c7:0a:70:f7:
                    e0:3e:70:68:1c:4d:af:ba:af:3b:06:ec:6d:52:21:
                    8d:db:f9:38:c0:62:83:6f:8a:d1:8e:f4:8c:1f:4e:
                    e7:d7:88:e5:1c:67:e2:d5:bd:b7:f4:8e:12:e2:9a:
                    b3:d7:f8:e8:a2:12:46:98:4d:3d:b4:97:42:11:75:
                    5b:a9:81:e5:32:a5:80:92:4f:f2:18:db:5b:f7:a6:
                    7a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9A:C1:7F:C7:CC:DA:68:6C:A9:C6:7C:A9:1A:FB:50:AC:5B:43:21
            X509v3 Authority Key Identifier:
                keyid:1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3138372e312e31362e302f32302d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:0b:60:74:3b:8a:87:f1:75:14:f6:44:22:78:11:6c:86:
         2f:5c:cd:83:35:73:48:dd:47:08:4b:8d:78:7e:0c:f9:bf:43:
         8e:38:4c:9b:7e:73:c9:00:1f:1b:fe:74:40:28:15:3c:b5:b0:
         fa:7e:10:83:4c:57:bd:f6:67:74:9a:77:97:59:03:a9:84:89:
         c5:11:a6:e7:ca:7d:ad:4e:db:cd:d0:fc:7b:aa:56:42:6f:04:
         b8:eb:79:3e:57:95:3a:e5:f1:4f:fc:83:ca:eb:73:3d:2c:f8:
         8f:18:fd:5f:c0:6e:08:7f:ca:70:81:a5:6c:3c:54:d0:a6:f4:
         1b:dd:61:8c:5d:ca:9c:f7:a5:53:f2:e1:d8:bf:49:fd:fb:43:
         e7:98:89:e1:9d:d3:50:57:ef:d0:de:08:5f:ae:24:91:0b:2f:
         69:4f:c0:26:a8:39:e9:18:ed:cb:80:e5:fb:79:35:3c:eb:d8:
         bd:a4:a8:a7:7b:09:a4:6a:ea:02:e3:98:a7:2a:18:15:97:d2:
         96:79:d6:e6:3f:1a:01:53:82:9c:93:09:31:73:e5:c1:7c:84:
         05:fb:a1:58:cb:b0:f9:40:04:f5:38:c3:2b:42:ee:59:db:aa:
         84:f0:9e:0a:26:5a:26:53:18:a6:32:c5:21:df:46:2f:03:9f:
         eb:9a:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:34 2024 by rpki-client on console-ams.rpki-client.org