Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3138372e36382e302e302f31342d3134203d3e203232303835.roa
File:                     3138372e36382e302e302f31342d3134203d3e203232303835.roa (raw, json)
Hash identifier:          bRMwiAIEzUeAoYl39RvdinahUulzDw/9Gp9nwcuIA9Y=
Subject key identifier:   0E:E5:81:B4:06:79:7B:4A:92:19:77:83:CD:30:46:DB:0D:0D:C0:55
Certificate issuer:       /CN=D215D0A29BA0041EB88859E15A706C978B675469
Certificate serial:       775C48D932CC7F84487E858DD809C3269951D17A
Authority key identifier: D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3138372e36382e302e302f31342d3134203d3e203232303835.roa
Signing time:             Wed 14 Feb 2024 19:00:00 +0000
ROA not before:           Wed 14 Feb 2024 18:55:00 +0000
ROA not after:            Wed 12 Feb 2025 19:00:00 +0000
asID:                     22085
IP address blocks:        187.68.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5c:48:d9:32:cc:7f:84:48:7e:85:8d:d8:09:c3:26:99:51:d1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D215D0A29BA0041EB88859E15A706C978B675469
        Validity
            Not Before: Feb 14 18:55:00 2024 GMT
            Not After : Feb 12 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:b7:af:3d:cb:9b:5f:4a:53:15:0b:f0:5c:
                    61:e9:09:d0:35:ba:84:60:74:b9:32:39:a4:2e:d8:
                    d3:7a:37:40:2f:06:82:b4:79:59:fb:d8:59:ff:80:
                    be:75:35:5f:2d:56:6d:53:60:5d:be:20:ff:f1:5f:
                    68:62:9b:21:c2:e4:ca:5a:b9:16:06:90:5a:9d:71:
                    a2:47:c4:61:29:b4:ee:4a:4c:36:b5:4e:31:20:ae:
                    72:17:8b:b7:d5:a7:28:f9:7f:cc:92:44:1c:a7:7f:
                    29:fb:5c:8a:5e:eb:75:4f:7e:0f:9a:f4:7d:c6:ed:
                    2e:ed:b9:04:3b:74:16:a0:fc:9a:e6:dd:ce:97:45:
                    4e:41:50:40:b4:a5:b6:54:52:8c:76:5f:c9:44:da:
                    df:92:7c:04:d3:60:fa:e8:f9:f0:72:6b:20:34:cf:
                    c9:4f:42:61:5a:59:fc:d8:14:ec:ba:ec:09:69:67:
                    a4:94:12:d9:6d:d4:20:fe:a8:4a:3d:5b:0d:b8:89:
                    6f:c1:f0:f0:29:0b:f2:e3:60:f4:b7:0b:dd:58:f5:
                    cd:4b:55:c4:c9:b1:67:81:a5:e5:8e:6e:06:ac:47:
                    a1:b6:71:b7:6e:88:75:bf:cb:d5:35:65:db:58:a3:
                    32:bb:ce:10:72:85:51:ea:59:d8:45:e3:37:97:5d:
                    4a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E5:81:B4:06:79:7B:4A:92:19:77:83:CD:30:46:DB:0D:0D:C0:55
            X509v3 Authority Key Identifier:
                keyid:D2:15:D0:A2:9B:A0:04:1E:B8:88:59:E1:5A:70:6C:97:8B:67:54:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/D215D0A29BA0041EB88859E15A706C978B675469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D215D0A29BA0041EB88859E15A706C978B675469.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/0/3138372e36382e302e302f31342d3134203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.68.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         20:0e:01:7f:2c:fe:75:c0:7f:8c:23:11:e7:46:95:cf:03:57:
         05:95:da:77:64:43:74:30:38:4b:67:2b:e9:7b:e7:f7:cc:29:
         18:37:7f:5b:0e:dc:b0:3e:9f:a3:1a:f6:ac:84:6d:91:08:f8:
         d1:dc:3e:1d:ff:92:ea:6d:e9:2a:0c:d9:82:1b:e0:49:0d:b5:
         83:b0:67:9e:12:a3:92:7d:ce:91:32:f3:6a:57:a5:22:4e:68:
         99:4f:88:3a:7f:ec:6b:cc:9d:ec:d3:28:c7:1b:0c:bf:52:e4:
         89:6d:bc:1f:7b:4d:e2:0c:83:f2:b3:d4:e6:f5:ca:2d:fb:2f:
         f6:76:75:c7:8a:7d:72:8d:d5:2b:09:44:39:d8:90:cb:a2:32:
         55:7c:27:57:b1:9e:6d:24:af:3d:48:4a:a3:b6:d9:25:e9:0e:
         06:84:b0:d8:5e:23:a4:cd:88:c9:9e:4b:f1:85:aa:b3:67:be:
         43:ea:98:af:2d:f9:16:09:09:0a:5b:5e:3a:2a:aa:9a:32:03:
         fd:e9:84:23:e5:6d:8a:65:0a:c8:df:0e:e5:42:01:7f:1d:64:
         94:5f:f5:83:07:ad:f8:45:da:58:8d:7c:82:2f:df:07:09:5d:
         73:3a:a4:f1:dd:1d:ed:8b:d4:20:91:b1:d9:d1:dc:71:57:0a:
         4b:a1:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org