Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3138372e3132302e3132382e302f31392d3234203d3e20323632323732.roa
File:                     3138372e3132302e3132382e302f31392d3234203d3e20323632323732.roa (raw, json)
Hash identifier:          5mIz8yveMdjblr374uHf0656ESDQ7ZvgFoD7++upB4s=
Subject key identifier:   92:48:A1:CE:4D:5C:83:98:2F:7D:07:91:B4:CC:7B:41:42:A5:17:95
Certificate issuer:       /CN=5535FEC54421A0B55361E3ADF72BF5A6518563DB
Certificate serial:       05B43CA4A965A68342CCD34F778136EA916E0FC2
Authority key identifier: 55:35:FE:C5:44:21:A0:B5:53:61:E3:AD:F7:2B:F5:A6:51:85:63:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5535FEC54421A0B55361E3ADF72BF5A6518563DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3138372e3132302e3132382e302f31392d3234203d3e20323632323732.roa
Signing time:             Fri 03 Nov 2023 12:54:19 +0000
ROA not before:           Fri 03 Nov 2023 12:49:19 +0000
ROA not after:            Fri 01 Nov 2024 12:54:19 +0000
asID:                     262272
IP address blocks:        187.120.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b4:3c:a4:a9:65:a6:83:42:cc:d3:4f:77:81:36:ea:91:6e:0f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5535FEC54421A0B55361E3ADF72BF5A6518563DB
        Validity
            Not Before: Nov  3 12:49:19 2023 GMT
            Not After : Nov  1 12:54:19 2024 GMT
        Subject: CN=9248A1CE4D5C83982F7D0791B4CC7B4142A51795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:aa:4a:5d:80:fa:cf:e3:94:8b:d8:15:cd:
                    58:ec:56:60:4f:7e:c2:0f:40:eb:ca:31:05:0d:06:
                    5f:66:11:7d:ad:36:ac:95:b8:3e:2c:d4:1b:62:c9:
                    00:36:b5:c7:b6:6c:b6:f8:49:f2:86:b6:c7:4a:e8:
                    09:c7:3c:27:9d:e9:7f:45:81:1d:53:f2:04:42:96:
                    8b:fa:21:b3:97:a5:5f:21:d1:d3:75:2e:f9:c8:4d:
                    0f:e3:0b:a1:fc:a4:fb:5b:ef:6d:40:02:1a:4f:98:
                    e1:01:31:19:01:db:bf:af:76:00:3c:6e:10:33:00:
                    15:d3:a6:97:8a:70:85:16:53:c2:76:89:bf:40:5d:
                    8c:f6:48:15:f8:7b:50:bd:ab:72:ed:1c:9d:4b:d1:
                    2b:2f:87:57:ef:11:ed:c6:66:d7:cd:b4:32:a6:d4:
                    d5:59:e0:63:48:1a:b3:b1:7a:ac:6b:6a:41:68:1e:
                    23:1d:55:07:8b:1d:f3:f2:58:22:d7:20:61:fe:67:
                    fc:49:cc:5b:11:65:89:b9:99:5a:de:f6:59:a3:63:
                    17:8e:05:d3:29:9b:48:2b:d3:8d:ea:bd:2b:09:46:
                    46:bf:0f:27:f2:71:e8:ad:f5:0e:a7:af:45:a4:03:
                    bb:e5:25:c9:c8:93:9a:0e:26:46:b2:d1:48:d1:d1:
                    b4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:48:A1:CE:4D:5C:83:98:2F:7D:07:91:B4:CC:7B:41:42:A5:17:95
            X509v3 Authority Key Identifier:
                keyid:55:35:FE:C5:44:21:A0:B5:53:61:E3:AD:F7:2B:F5:A6:51:85:63:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/5535FEC54421A0B55361E3ADF72BF5A6518563DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5535FEC54421A0B55361E3ADF72BF5A6518563DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3138372e3132302e3132382e302f31392d3234203d3e20323632323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:5e:9a:7e:1f:86:9a:22:0f:b9:b7:d3:a1:07:2c:20:0b:74:
         01:60:88:8a:5d:7c:1c:2d:92:36:34:28:35:8a:a0:90:52:39:
         02:85:d5:5a:91:3b:cd:31:c7:6e:58:78:1c:1c:be:37:7a:3e:
         63:44:6d:49:62:88:fd:db:42:34:90:cc:f4:23:ea:b1:2a:b5:
         6f:6a:e9:8b:78:49:77:0f:fd:ca:53:d5:12:62:29:25:22:cf:
         92:a3:17:9d:08:06:06:5a:1f:b5:15:f8:f4:cf:7e:e5:07:d1:
         bb:45:24:b8:01:14:c6:ca:2b:80:6c:4f:de:89:20:19:7a:63:
         dc:64:7d:ae:6a:9c:74:2b:0d:81:de:d4:2e:fd:a8:bd:54:2b:
         a2:ba:ef:1f:d6:0b:39:0e:c6:de:50:d1:d6:d4:e8:20:0e:c9:
         f0:81:8f:e1:46:e3:10:0d:45:68:0d:01:6d:3c:5d:14:26:2f:
         18:fe:ee:aa:40:7f:9f:20:17:91:67:ac:14:cd:8e:5b:91:cd:
         24:e6:c0:47:37:76:cf:35:36:3a:d1:19:aa:14:bd:b7:0a:84:
         de:dd:88:95:5f:1e:eb:c4:3c:12:02:4b:9b:59:61:ba:5f:e2:
         69:7a:c7:45:c5:60:5c:54:e6:e0:2a:e8:86:93:78:33:aa:f5:
         dc:94:a8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org