Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e302e302f32302d3234203d3e20323632373039.roa
File:                     3138372e3131312e302e302f32302d3234203d3e20323632373039.roa (raw, json)
Hash identifier:          OeniqW5sriU7D4GuLavWu6DXfpg9OTSvSwkMaVTQv2Y=
Subject key identifier:   CE:C0:34:3D:14:D4:3D:CA:4F:52:C7:2F:AC:33:94:01:84:D2:B0:C6
Certificate issuer:       /CN=5B75DF7D9C9DF82C4149469D585E8A8194F89A5F
Certificate serial:       725BBE1862007B529155015E3943ED242EC2AF37
Authority key identifier: 5B:75:DF:7D:9C:9D:F8:2C:41:49:46:9D:58:5E:8A:81:94:F8:9A:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B75DF7D9C9DF82C4149469D585E8A8194F89A5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e302e302f32302d3234203d3e20323632373039.roa
Signing time:             Tue 19 Dec 2023 20:26:15 +0000
ROA not before:           Tue 19 Dec 2023 20:21:15 +0000
ROA not after:            Tue 17 Dec 2024 20:26:15 +0000
asID:                     262709
IP address blocks:        187.111.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5b:be:18:62:00:7b:52:91:55:01:5e:39:43:ed:24:2e:c2:af:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B75DF7D9C9DF82C4149469D585E8A8194F89A5F
        Validity
            Not Before: Dec 19 20:21:15 2023 GMT
            Not After : Dec 17 20:26:15 2024 GMT
        Subject: CN=CEC0343D14D43DCA4F52C72FAC33940184D2B0C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:d5:4a:6a:ab:23:54:58:c6:60:85:77:1e:
                    4d:a9:c8:3e:0c:0c:96:8f:ec:d6:12:97:30:8f:12:
                    cf:27:ed:17:ca:73:ff:52:d2:3d:ea:39:cd:3b:0a:
                    1f:32:2b:18:f1:38:52:ca:44:70:ee:f1:bd:ee:5f:
                    83:df:06:fb:25:a0:73:5d:06:f2:4b:ac:66:43:be:
                    01:01:21:bb:8c:a7:28:63:70:c3:9d:55:23:c2:6b:
                    5d:9b:35:6c:36:76:7e:bf:97:d7:59:c6:26:e1:c2:
                    97:9a:78:48:2c:42:45:ca:4c:aa:a9:a3:c7:60:1e:
                    78:b1:5c:ac:2e:a1:a5:2b:d8:0f:82:0e:a7:32:8f:
                    b4:c3:12:75:58:9f:64:dd:0e:8b:f3:88:3f:73:87:
                    f0:2c:1a:8c:5b:cb:62:7f:2f:52:ac:13:be:e5:20:
                    97:d0:84:7b:70:97:a6:e4:5d:b4:d7:51:ff:82:14:
                    50:77:ec:f5:56:72:d5:22:a3:39:6b:d3:a1:b7:27:
                    0a:4c:67:68:7b:31:28:14:2b:a8:22:0a:ab:57:f7:
                    fb:6c:02:ce:d1:70:de:c6:aa:b8:c6:f0:fc:2d:0e:
                    6a:3b:30:de:d1:ec:51:7e:41:c4:db:1c:3c:53:d9:
                    5c:66:15:45:8d:15:7b:45:27:32:80:16:fa:bd:48:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C0:34:3D:14:D4:3D:CA:4F:52:C7:2F:AC:33:94:01:84:D2:B0:C6
            X509v3 Authority Key Identifier:
                keyid:5B:75:DF:7D:9C:9D:F8:2C:41:49:46:9D:58:5E:8A:81:94:F8:9A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/5B75DF7D9C9DF82C4149469D585E8A8194F89A5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B75DF7D9C9DF82C4149469D585E8A8194F89A5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e302e302f32302d3234203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:ca:d4:69:3e:9c:70:65:5f:ae:0b:e2:bf:22:f6:49:e2:78:
         d6:24:4e:2d:93:19:18:fc:d4:3b:70:62:c1:ce:3b:a6:b8:c0:
         0e:f2:58:68:66:4a:5b:56:6b:23:0e:9d:c5:15:5d:00:4c:75:
         8d:fb:dc:d9:b3:f4:92:6a:40:7a:10:f2:b9:f8:ab:17:eb:96:
         43:ad:ad:46:dd:cd:c4:b5:cc:6d:37:ef:77:4b:e4:66:16:53:
         a8:04:fa:b3:b8:44:20:83:4a:40:dc:4a:f4:86:55:12:21:ea:
         05:78:da:c6:c5:0f:a8:91:3b:d9:5a:21:5c:36:1b:33:04:5c:
         40:23:52:88:96:e9:12:75:05:b0:dc:7d:e2:15:7c:c7:7f:28:
         42:41:61:a6:16:91:7a:69:66:f2:6b:14:28:4c:c8:3e:ce:98:
         4c:af:2d:56:25:6e:4c:4c:5d:d5:86:88:2e:15:5d:87:fa:21:
         e4:18:93:24:b3:95:68:88:da:66:4f:8f:73:e8:e2:bf:17:4b:
         6d:7b:a8:2c:3d:6b:b7:b2:09:97:a4:d4:5e:88:8c:a1:a3:18:
         6f:68:40:3c:5b:39:cd:44:1f:f9:17:83:3e:bb:5c:d8:13:fe:
         56:2f:ce:d2:cb:c1:e7:05:b0:d5:01:32:51:72:01:f5:b9:14:
         e9:25:a5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org