Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e31342e302f32342d3234203d3e203238313335.roa
File:                     3138372e38362e31342e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          nHIqbJKEMJNys2k8fCbptIH+rDanwdJVYVT84MkLqas=
Subject key identifier:   DB:40:30:66:55:25:2A:7C:29:37:1E:CA:CE:95:61:76:C4:A6:D1:37
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       76480CB9885E2670DC148E7CB63724183240F598
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e31342e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:15 +0000
ROA not before:           Wed 13 Mar 2024 11:58:15 +0000
ROA not after:            Wed 12 Mar 2025 12:03:15 +0000
asID:                     28135
IP address blocks:        187.86.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:48:0c:b9:88:5e:26:70:dc:14:8e:7c:b6:37:24:18:32:40:f5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:15 2024 GMT
            Not After : Mar 12 12:03:15 2025 GMT
        Subject: CN=DB40306655252A7C29371ECACE956176C4A6D137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:83:e6:b5:fb:33:33:c7:aa:18:4e:f6:f8:
                    24:b3:74:f4:7e:bc:93:36:2b:95:28:e0:e2:41:eb:
                    86:ec:e2:da:58:b1:e0:b9:0a:8c:33:6b:ff:03:f4:
                    94:f5:3b:96:fa:f7:f6:d5:08:31:26:9e:3c:31:fa:
                    e4:82:dc:0d:58:95:91:14:6e:45:0d:1f:e7:b8:99:
                    d0:9a:5a:0e:13:08:86:82:b0:a0:be:28:86:c1:3b:
                    4e:fc:41:cf:31:03:52:3e:7e:74:84:ca:8a:19:32:
                    a8:71:66:16:a2:a0:75:dd:fe:18:fc:4c:dc:7b:32:
                    85:51:28:85:d9:0e:cd:88:12:87:03:95:b6:55:07:
                    20:6b:bb:5d:03:27:ca:a5:ab:bf:8b:8e:8f:a6:01:
                    6c:fc:7f:d7:6d:12:fb:e0:f5:ba:38:83:d3:1a:74:
                    b3:df:98:66:38:17:9b:59:e4:54:62:9d:16:89:50:
                    49:28:f9:66:a5:2c:d1:cd:af:73:a5:a6:70:b4:f7:
                    9b:0b:95:b1:d3:a5:8a:b5:e6:74:d1:3c:fa:37:e5:
                    af:b7:14:5e:f1:68:ab:12:d0:35:07:df:63:de:cf:
                    c6:98:41:21:7a:1c:43:32:07:b9:93:8c:e7:3a:39:
                    32:01:33:79:34:0c:fc:70:64:61:5b:0c:62:20:9d:
                    c7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:40:30:66:55:25:2A:7C:29:37:1E:CA:CE:95:61:76:C4:A6:D1:37
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e31342e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0f:dd:e0:29:1d:ce:10:29:f6:b0:70:5a:bf:47:91:8a:8f:
         68:a9:20:1c:bf:cd:f8:67:7c:12:e7:0c:54:33:57:2d:49:b5:
         59:8e:90:8c:86:c2:7f:32:4c:84:c5:c6:27:a5:b7:60:ca:1d:
         8d:50:ba:f1:23:01:a4:73:52:bd:69:a1:0e:f1:b9:5a:52:6b:
         74:ab:5a:7d:45:9c:fb:e1:11:07:da:c5:d4:98:52:c8:da:f1:
         02:de:3b:b1:27:b1:8a:9e:0b:54:e8:a3:66:0c:4d:05:2d:f2:
         24:ab:6b:ce:28:1c:16:c7:be:68:b3:a5:a0:1a:e1:e4:66:50:
         f4:03:3e:f4:93:b8:8b:b5:6d:a8:47:51:08:67:f1:bc:88:c2:
         60:a6:ae:68:7b:57:f7:cc:d9:05:7d:4d:9f:73:30:80:62:d1:
         13:5c:eb:3f:16:eb:3c:32:86:e7:9f:29:c3:31:06:7d:f4:04:
         2d:58:5f:3a:c8:aa:03:f7:a8:dc:e1:bb:b2:c9:a2:65:46:63:
         32:83:b1:48:00:86:27:24:10:5a:b6:b6:43:72:6b:97:8e:e1:
         93:d0:dd:5b:ee:fb:65:05:07:9b:5c:dc:0a:f9:95:f9:99:6e:
         f4:3f:2e:88:cd:dc:40:64:8c:53:4e:08:76:2e:1c:5e:5d:73:
         6e:b1:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org