Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/3138372e312e3132382e302f32302d3234203d3e203238323939.roa
File:                     3138372e312e3132382e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          vnP2jRGU4laGIVFMkzppdiUCE2wDLxbSmTA++OztsWo=
Subject key identifier:   B5:00:E3:27:42:DE:D2:B8:D3:47:3A:A4:8A:63:63:73:5A:08:6D:37
Certificate issuer:       /CN=6AF905DD92B0782F965D1A954DCEA4CC6032EEBE
Certificate serial:       3B7C34F671F5B9968CF015F95333C0407A45A466
Authority key identifier: 6A:F9:05:DD:92:B0:78:2F:96:5D:1A:95:4D:CE:A4:CC:60:32:EE:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/3138372e312e3132382e302f32302d3234203d3e203238323939.roa
Signing time:             Wed 08 Jun 2022 19:04:05 +0000
ROA not before:           Wed 08 Jun 2022 18:59:05 +0000
ROA not after:            Wed 07 Jun 2023 19:04:05 +0000
asID:                     28299
IP address blocks:        187.1.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7c:34:f6:71:f5:b9:96:8c:f0:15:f9:53:33:c0:40:7a:45:a4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF905DD92B0782F965D1A954DCEA4CC6032EEBE
        Validity
            Not Before: Jun  8 18:59:05 2022 GMT
            Not After : Jun  7 19:04:05 2023 GMT
        Subject: CN=B500E32742DED2B8D3473AA48A6363735A086D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:41:dc:84:de:fc:44:fd:32:67:20:a2:08:73:
                    c4:24:8e:92:b9:ad:19:5f:17:6f:ac:28:6c:75:c2:
                    44:37:eb:e0:31:d3:82:b4:63:ca:90:72:96:4a:92:
                    d2:89:be:dc:67:ae:f9:f7:28:38:a9:4d:07:c8:8c:
                    0c:70:5f:a1:91:fd:5a:aa:f4:37:31:31:1f:4a:13:
                    44:f4:de:ee:6f:7c:a3:69:51:f2:4b:71:92:c1:b8:
                    50:05:f1:78:9c:a5:cb:d3:5d:9a:99:2e:14:f7:97:
                    ea:db:be:98:0a:2c:75:f6:34:6a:9b:ff:c2:d3:36:
                    30:07:1a:a1:cf:ae:e6:df:21:7f:12:4a:50:ce:22:
                    cf:80:de:c3:a5:7f:24:e2:00:8a:fc:99:b7:30:6a:
                    79:5f:4c:d5:dc:4a:4e:50:18:23:b4:21:ed:b7:1d:
                    01:63:40:83:c1:2d:93:2b:5e:03:fb:53:31:ab:d7:
                    03:7e:c3:7c:6f:a1:73:98:5e:ac:42:fb:d8:03:5e:
                    10:1b:a0:6d:21:95:3e:1d:8e:55:6f:1e:88:65:d1:
                    2c:b9:26:98:1d:36:92:6f:31:2a:22:5d:48:50:e9:
                    2f:0f:b4:65:c7:dd:bc:07:cb:db:17:12:50:35:1f:
                    94:aa:60:b8:82:08:ba:1a:d6:bc:11:b9:16:86:f4:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:00:E3:27:42:DE:D2:B8:D3:47:3A:A4:8A:63:63:73:5A:08:6D:37
            X509v3 Authority Key Identifier:
                keyid:6A:F9:05:DD:92:B0:78:2F:96:5D:1A:95:4D:CE:A4:CC:60:32:EE:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AF905DD92B0782F965D1A954DCEA4CC6032EEBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQRrndEEbTGyd81Ao8UtKRrbs52GuKxr9gHaN8h1n2vm/0/3138372e312e3132382e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:74:64:c0:47:7e:12:82:9d:7c:ff:7b:60:b8:7f:06:c5:cb:
         84:52:33:bd:e0:6a:68:9f:18:6f:ea:df:0f:d6:5d:1a:03:b6:
         da:5f:a1:b4:4e:eb:e5:d6:2a:cd:ff:4f:61:4e:07:a3:46:79:
         d2:7c:1f:c9:05:85:fd:2e:7f:7b:35:89:cb:9b:c7:54:d1:66:
         ea:be:b2:a6:cd:3c:67:f5:7f:f9:fe:93:4b:5d:69:e2:0a:38:
         42:13:9d:0e:19:09:8c:cc:a7:69:04:11:24:e8:21:6c:ef:04:
         f1:b9:26:87:d5:97:1d:c6:95:cb:bf:05:c5:20:1d:e8:1b:59:
         ec:7e:4e:b3:5f:77:0b:09:41:d6:6c:51:92:03:84:59:2d:eb:
         0b:4e:cd:0d:6d:33:7d:72:3e:88:76:30:ec:3c:c4:9a:65:77:
         18:5b:61:4f:3a:d7:09:1b:0c:fe:53:ea:f9:02:cf:33:00:71:
         1b:71:c1:9b:6e:65:0b:5d:0b:b8:11:aa:e6:52:41:d3:e8:e0:
         b8:40:38:4d:ff:c4:d2:8c:06:c9:bb:45:32:b5:f9:b0:99:3d:
         cb:30:b6:bf:fb:70:ad:6c:88:55:02:f4:75:bc:41:8e:0b:f4:
         22:aa:8b:e8:ad:ff:e5:64:9b:cb:16:e0:01:4c:cf:f6:72:c5:
         eb:32:c9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org