Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3138372e32342e302e302f31342d3134203d3e203232303835.roa
File:                     3138372e32342e302e302f31342d3134203d3e203232303835.roa (raw, json)
Hash identifier:          K5gRMcH4e+oDQhAAIAs5tveHSmxPI/K5J/X4aq6LTLQ=
Subject key identifier:   08:45:E4:15:FB:11:BD:4F:F3:08:A3:86:13:4B:77:3A:E0:43:7A:87
Certificate issuer:       /CN=D215D0A29BA0041EB88859E15A706C978B675469
Certificate serial:       34DF2823F2561D375410941A8D864794E57A87E3
Authority key identifier: D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3138372e32342e302e302f31342d3134203d3e203232303835.roa
Signing time:             Wed 14 Feb 2024 20:00:00 +0000
ROA not before:           Wed 14 Feb 2024 19:55:00 +0000
ROA not after:            Wed 12 Feb 2025 20:00:00 +0000
asID:                     22085
IP address blocks:        187.24.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:df:28:23:f2:56:1d:37:54:10:94:1a:8d:86:47:94:e5:7a:87:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D215D0A29BA0041EB88859E15A706C978B675469
        Validity
            Not Before: Feb 14 19:55:00 2024 GMT
            Not After : Feb 12 20:00:00 2025 GMT
        Subject: CN=3082010A0282010100D60D053FED1D6E26B72877473FBFC360157E92F90A63097C2FFBA8A5FFA6DEDA5AF19FAD505C04D03055335CF665CCDE397AB0089E276FB04E77317A9605E54B371A2A8602740AE05E6C64B24983FF71D58986AEC601511C7D8CD03D10F4BCFC7FADFDA64B0C4F5D329804FE40EEC7171FE6765774A3ADE65E0A4C8668843067D0F22141B408871A2A1A4D685C47D3572F8F0AF59E430753D7133402498FA2F76E82FC2992B29ABBBAC11B33A0D3FB93D8406083F1771F60DA2602D251AE64AF190DE2563646F44FBCC379199CA982BBFC832BDA6C5BB818FDE75A510EA8FE147A8A884196667D6C6316CA54C44DA6C483937DB9F3F15A0FC31B3F1A552482690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0d:05:3f:ed:1d:6e:26:b7:28:77:47:3f:bf:
                    c3:60:15:7e:92:f9:0a:63:09:7c:2f:fb:a8:a5:ff:
                    a6:de:da:5a:f1:9f:ad:50:5c:04:d0:30:55:33:5c:
                    f6:65:cc:de:39:7a:b0:08:9e:27:6f:b0:4e:77:31:
                    7a:96:05:e5:4b:37:1a:2a:86:02:74:0a:e0:5e:6c:
                    64:b2:49:83:ff:71:d5:89:86:ae:c6:01:51:1c:7d:
                    8c:d0:3d:10:f4:bc:fc:7f:ad:fd:a6:4b:0c:4f:5d:
                    32:98:04:fe:40:ee:c7:17:1f:e6:76:57:74:a3:ad:
                    e6:5e:0a:4c:86:68:84:30:67:d0:f2:21:41:b4:08:
                    87:1a:2a:1a:4d:68:5c:47:d3:57:2f:8f:0a:f5:9e:
                    43:07:53:d7:13:34:02:49:8f:a2:f7:6e:82:fc:29:
                    92:b2:9a:bb:ba:c1:1b:33:a0:d3:fb:93:d8:40:60:
                    83:f1:77:1f:60:da:26:02:d2:51:ae:64:af:19:0d:
                    e2:56:36:46:f4:4f:bc:c3:79:19:9c:a9:82:bb:fc:
                    83:2b:da:6c:5b:b8:18:fd:e7:5a:51:0e:a8:fe:14:
                    7a:8a:88:41:96:66:7d:6c:63:16:ca:54:c4:4d:a6:
                    c4:83:93:7d:b9:f3:f1:5a:0f:c3:1b:3f:1a:55:24:
                    82:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:45:E4:15:FB:11:BD:4F:F3:08:A3:86:13:4B:77:3A:E0:43:7A:87
            X509v3 Authority Key Identifier:
                keyid:D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/D215D0A29BA0041EB88859E15A706C978B675469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3138372e32342e302e302f31342d3134203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.24.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         40:e1:3d:12:05:48:f7:28:e5:39:4f:e5:ea:b8:2d:4e:db:af:
         48:0a:8b:8c:08:2a:d7:4a:51:cb:06:0b:70:0c:06:07:d4:c2:
         25:f3:c5:6b:9c:a8:55:51:78:c1:d7:77:3e:87:f0:da:1d:94:
         db:b4:ff:32:ba:82:1d:40:9b:34:e9:02:94:97:02:f8:79:0e:
         22:aa:e0:31:75:d5:19:ed:ac:4b:e0:1e:65:55:11:39:d9:e0:
         51:3a:9b:e7:8c:fb:1f:75:a7:d3:3f:11:3a:7f:f7:46:1e:6c:
         ea:d0:44:fd:63:cd:1d:87:c3:db:b5:d3:71:f1:64:0d:5e:d3:
         11:0e:73:3f:a1:c9:17:35:41:2a:9c:45:e1:e3:81:fa:80:78:
         a0:32:ff:53:b7:9b:9a:69:59:00:f7:8d:69:95:57:f4:8d:89:
         f0:49:ab:f6:c6:a2:1a:cd:1b:53:fb:20:da:85:c4:0c:9f:0b:
         c4:a9:74:c7:db:d1:71:d1:f7:da:e5:41:7c:c2:7c:dc:d9:c9:
         66:51:40:d7:77:ba:df:d5:64:07:13:63:18:d4:4a:fc:64:3f:
         6c:ca:da:33:18:d8:ec:55:ca:9a:8a:95:84:20:5a:13:ea:6d:
         e5:75:0f:af:fb:8f:8b:3e:03:c7:1a:58:c6:02:37:6f:e4:78:
         ec:5d:a4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org