Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e31302e302f32332d3233203d3e20323632373039.roa
File:                     3138372e3131312e31302e302f32332d3233203d3e20323632373039.roa (raw, json)
Hash identifier:          dZXJlSr1ivKKYsqJjKprzsXZ7rCW5PZiWW/NR4WpKe0=
Subject key identifier:   B9:3C:A6:EE:C3:DD:19:95:37:8C:EB:78:5A:76:02:AD:28:C8:CD:E3
Certificate issuer:       /CN=36614F42717E12040199B59CE8FFFD30F0784B36
Certificate serial:       47E652081DEB90F5C0E96CD035E1C1D18F6FFF25
Authority key identifier: 36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e31302e302f32332d3233203d3e20323632373039.roa
Signing time:             Thu 10 Nov 2022 18:31:53 +0000
ROA not before:           Thu 10 Nov 2022 18:26:53 +0000
ROA not after:            Thu 09 Nov 2023 18:31:53 +0000
asID:                     262709
IP address blocks:        187.111.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e6:52:08:1d:eb:90:f5:c0:e9:6c:d0:35:e1:c1:d1:8f:6f:ff:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36614F42717E12040199B59CE8FFFD30F0784B36
        Validity
            Not Before: Nov 10 18:26:53 2022 GMT
            Not After : Nov  9 18:31:53 2023 GMT
        Subject: CN=B93CA6EEC3DD1995378CEB785A7602AD28C8CDE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:59:58:d0:f1:71:0d:9f:01:e4:ec:1b:27:
                    0e:9c:8b:7f:76:06:a0:db:d5:48:2e:98:a4:ef:f7:
                    d7:d7:18:d3:bc:c5:0b:f5:9c:96:dd:cf:35:04:ab:
                    e7:42:96:5c:82:09:2e:94:95:2d:30:48:36:fc:85:
                    d2:05:d3:b8:da:d0:21:4b:39:01:9a:30:ce:3b:d1:
                    c4:db:6d:6d:c8:63:88:4f:05:11:5c:b4:73:33:23:
                    67:a1:97:1e:0d:df:84:db:31:86:25:23:c4:65:f5:
                    14:00:fc:72:a7:c7:9e:db:90:d9:35:41:99:4d:d4:
                    2f:53:f9:e4:93:9d:fe:7c:42:12:e6:68:9f:49:6e:
                    95:98:0e:fd:24:c5:6e:f7:c5:18:14:e1:ef:3f:a7:
                    73:00:38:77:88:da:92:ec:f9:74:8a:5b:9e:87:18:
                    f4:71:21:81:eb:d7:dd:02:de:f6:22:0c:d1:73:9d:
                    fb:bf:6a:b5:33:17:b2:b3:08:0e:58:fc:46:04:18:
                    76:b8:ca:df:94:fb:5f:01:bb:f2:74:75:1e:da:f4:
                    34:e7:0f:9c:77:13:2a:3d:a4:49:a2:be:fc:a1:de:
                    e5:cf:1e:49:ab:d4:f5:e5:3d:db:a4:06:73:b7:71:
                    87:9f:8c:90:11:e7:12:2a:ce:fc:e1:89:e9:fc:7d:
                    58:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3C:A6:EE:C3:DD:19:95:37:8C:EB:78:5A:76:02:AD:28:C8:CD:E3
            X509v3 Authority Key Identifier:
                keyid:36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/36614F42717E12040199B59CE8FFFD30F0784B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e31302e302f32332d3233203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:16:a8:16:67:6f:3c:ea:c2:41:e9:d7:a0:12:e7:7e:bb:46:
         43:7c:0f:3d:58:af:3c:55:e3:cc:a6:19:dd:85:39:2a:11:da:
         30:b8:de:eb:a1:72:ac:aa:18:c7:0a:90:cb:69:99:66:af:98:
         6e:7b:95:44:39:80:63:4e:c8:e1:88:cb:99:a7:c3:9b:b4:38:
         37:ae:c7:04:7a:3c:3c:2e:88:a1:19:e1:04:c5:19:be:1d:e3:
         dc:d9:28:71:02:f7:d5:8d:c3:ae:04:ef:3b:32:16:25:84:7a:
         ee:58:fe:ff:f8:80:70:94:a4:b9:42:b8:55:82:a3:d8:8c:64:
         f0:9f:6c:60:27:52:56:0f:e2:51:12:8f:a6:e0:b9:e0:3e:a0:
         86:c0:29:e4:59:2b:14:f8:d4:4c:c9:4f:85:7e:8a:d8:fd:89:
         c6:29:71:b1:04:5b:76:46:07:db:33:35:7f:ec:85:d9:aa:2f:
         98:ae:ec:b1:a5:23:b9:4e:e8:78:2c:8b:e6:0f:d7:7c:be:ce:
         d6:b0:35:7b:26:ba:5d:80:7f:a3:98:06:8b:c6:97:bf:a0:91:
         9d:ba:fd:c5:f2:ad:db:ff:62:08:7d:69:7c:1c:62:25:bd:9a:
         dc:c6:b5:df:67:81:1e:c4:74:2e:e0:fa:1f:97:70:d0:7a:3c:
         db:58:08:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org