Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e31322e302f32342d3234203d3e203238313335.roa
File:                     3138372e38362e31322e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          ZyI6bFHTlzsxKojWboRSrCleGCUM7MA1HyxaOpzflU0=
Subject key identifier:   2F:85:CD:AB:E1:EA:15:55:BE:C4:6C:60:05:14:23:DA:95:3D:4A:A4
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       74A2E0D1BCBFB0D226F2511523066F8A17436C5F
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e31322e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:16 +0000
ROA not before:           Wed 13 Mar 2024 11:58:16 +0000
ROA not after:            Wed 12 Mar 2025 12:03:16 +0000
asID:                     28135
IP address blocks:        187.86.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a2:e0:d1:bc:bf:b0:d2:26:f2:51:15:23:06:6f:8a:17:43:6c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:16 2024 GMT
            Not After : Mar 12 12:03:16 2025 GMT
        Subject: CN=2F85CDABE1EA1555BEC46C60051423DA953D4AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:38:17:34:bb:31:5e:94:01:0d:23:2d:7b:
                    a1:09:b8:d1:b1:0d:47:c8:b2:33:1b:20:b8:b7:2d:
                    29:4f:43:98:c3:a4:a4:f9:4c:c0:23:f2:98:b0:c4:
                    e2:03:1b:10:12:70:02:84:3d:45:ec:0c:4d:05:4d:
                    4c:6a:9b:39:31:43:2c:e0:28:00:a8:2f:d5:ae:91:
                    33:d6:75:8b:da:ed:13:5f:be:5a:df:df:9a:94:3a:
                    7c:9c:27:c1:1b:19:65:b6:52:8a:99:02:c5:f6:f4:
                    87:35:cb:0d:35:06:45:8f:6b:80:3e:cb:a5:c7:f8:
                    80:04:38:9e:48:ec:4e:47:e1:79:59:20:14:e1:c1:
                    7f:d1:35:3d:36:8a:91:a7:5b:08:12:2f:65:fd:26:
                    68:7d:61:a8:b8:8d:09:a7:2e:ae:3f:20:61:d2:81:
                    55:2a:be:e5:b7:25:97:d9:cb:46:81:bb:ca:95:24:
                    89:d9:fa:a2:fb:a8:4d:7e:e1:be:9a:c8:b9:4e:a4:
                    b0:ba:c1:2e:4d:7f:f7:0c:90:6f:90:9d:89:37:90:
                    52:16:3d:d8:ea:63:0c:cb:01:12:74:fb:bd:42:c0:
                    3a:6a:d0:f2:27:cf:08:e4:9f:60:f8:88:bb:9b:d7:
                    b8:3e:45:87:59:c4:4e:60:e8:45:41:c7:22:0d:8f:
                    fd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:85:CD:AB:E1:EA:15:55:BE:C4:6C:60:05:14:23:DA:95:3D:4A:A4
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e31322e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f3:5c:18:2c:f0:f7:26:77:75:6e:5f:dc:e4:ba:eb:bf:08:
         18:47:42:71:bb:1f:74:7f:1f:0a:33:3c:1b:c0:89:29:d1:29:
         65:8f:73:4e:97:6c:62:8f:f3:09:ea:42:f1:15:44:42:2e:1f:
         4f:94:26:65:4d:5c:45:b3:08:45:46:c8:ef:b9:22:20:99:27:
         dd:72:4c:ed:b6:5b:45:79:04:31:b8:1d:ba:6f:4f:78:55:67:
         14:94:74:cb:a5:79:1b:cd:59:7b:ee:69:82:c1:52:c5:31:c1:
         90:0e:4a:0c:83:e7:b0:de:53:34:07:d8:c3:02:de:bb:01:c5:
         a2:f1:9e:e2:c2:65:9a:3a:e3:3d:ed:a4:ac:90:87:aa:07:58:
         44:38:f8:8c:dd:c0:c0:e0:4c:c0:e8:eb:6e:d9:bf:ef:10:8d:
         95:0e:74:0c:29:87:88:ef:4d:3e:5d:2a:7e:7a:2e:f9:f9:cf:
         eb:cf:82:0b:63:d1:57:58:64:5f:c9:1f:de:28:f4:68:60:c9:
         84:94:c4:56:11:b7:d3:5b:c1:74:51:29:f0:32:7e:ba:e3:82:
         7e:96:60:a7:4e:e8:24:94:86:0c:8e:08:1c:57:0d:43:bb:aa:
         6e:bd:f1:c6:74:d2:1f:2b:53:ed:c8:f4:7c:9d:cb:38:a8:48:
         77:45:0e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org