Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e382e302f32332d3233203d3e203238313335.roa
File:                     3138372e38362e382e302f32332d3233203d3e203238313335.roa (raw, json)
Hash identifier:          dTX2R2KZGctRUVqRQfner2U2fFB1JrdtFA/pCVm+h8c=
Subject key identifier:   CD:63:C6:42:7A:A0:1E:9A:0B:2F:3E:28:71:97:E1:B2:8E:91:75:2E
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       04A891EB94FC13BA0F48B9E10F9FB2656F30BE07
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e382e302f32332d3233203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:15 +0000
ROA not before:           Wed 13 Mar 2024 11:58:15 +0000
ROA not after:            Wed 12 Mar 2025 12:03:15 +0000
asID:                     28135
IP address blocks:        187.86.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a8:91:eb:94:fc:13:ba:0f:48:b9:e1:0f:9f:b2:65:6f:30:be:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:15 2024 GMT
            Not After : Mar 12 12:03:15 2025 GMT
        Subject: CN=CD63C6427AA01E9A0B2F3E287197E1B28E91752E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:48:ab:08:65:d2:1b:27:23:a0:11:4f:1b:e5:
                    c4:4d:50:4f:f1:37:f7:c0:99:63:26:62:06:de:43:
                    1d:a2:d6:20:d7:41:c6:1b:2e:a2:32:8a:3c:df:27:
                    d5:f0:db:26:3a:3f:ce:62:0f:9a:89:68:02:91:91:
                    bb:1b:7e:ad:6a:db:80:67:61:7d:5c:b7:6c:0b:ea:
                    0e:d7:d7:4e:89:50:fd:76:23:cb:2b:eb:49:74:d2:
                    fc:bd:26:ac:4e:22:56:84:20:8c:93:0d:2b:6b:9e:
                    82:d4:8a:f4:37:d4:c2:b8:04:16:97:59:c0:a2:89:
                    8f:1f:07:01:11:d6:7e:a9:55:18:34:ee:f1:00:4c:
                    c7:c2:7d:4f:8b:5e:f3:80:9e:f1:46:78:0b:4f:05:
                    86:51:55:48:37:24:a6:16:0a:cd:02:78:bd:c7:e6:
                    3f:a7:16:89:45:36:d6:5a:40:b1:6a:3f:e9:3a:8a:
                    09:3a:1c:a6:12:3d:9a:eb:a8:90:a6:94:7d:ed:12:
                    af:31:2f:c5:2e:ba:6f:47:55:e7:b4:68:3c:f9:b3:
                    87:7a:ad:e3:de:7f:72:12:fc:b4:63:cb:04:01:59:
                    de:10:79:7e:53:8d:5e:5f:0f:88:7f:ff:ab:aa:c4:
                    63:cf:b0:fe:08:2d:84:69:38:61:f1:a6:6a:c3:f4:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:63:C6:42:7A:A0:1E:9A:0B:2F:3E:28:71:97:E1:B2:8E:91:75:2E
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e382e302f32332d3233203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:4a:51:17:55:97:ae:3a:7e:0d:01:8f:06:3e:88:73:08:53:
         46:5c:c8:0c:8b:30:87:00:23:61:08:95:3f:37:be:eb:e2:4a:
         04:17:cf:cf:5d:3e:a0:f7:20:22:0c:bf:1a:80:09:e1:fe:a0:
         74:72:44:1b:a1:c0:b2:a8:cb:02:ff:3b:e7:b5:83:6c:a5:95:
         5b:b0:1c:54:6b:b2:c7:d1:c8:70:a8:29:ca:85:69:3e:0c:93:
         1b:1a:f7:42:32:1a:3e:b3:ed:7d:a9:41:06:06:bb:6c:a5:28:
         a1:b2:ea:48:aa:ba:f6:9c:1e:8f:9d:6e:e2:73:64:a7:d0:c9:
         fd:f9:91:c7:92:34:9a:45:09:87:82:ac:43:96:37:d1:7b:4b:
         95:8e:ae:04:b9:6f:a1:45:db:95:2b:02:dd:ad:0a:ec:65:6d:
         92:08:5e:1b:dd:88:95:42:b8:21:ed:13:4d:da:27:99:62:ea:
         60:b8:47:f3:89:8d:22:88:09:1f:00:e5:a7:b8:32:8b:54:99:
         ec:a5:48:88:37:32:ed:bb:d4:41:20:5d:1d:eb:5c:5f:ed:c9:
         4b:3b:1e:b0:39:99:2a:19:d2:8a:6e:5a:0d:68:5b:ff:c9:75:
         11:ec:8e:f2:4a:31:0f:ae:62:da:08:87:40:0e:d6:77:82:9c:
         09:20:ea:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org