Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e31302e302f32342d3234203d3e20323632373039.roa
File:                     3138372e3131312e31302e302f32342d3234203d3e20323632373039.roa (raw, json)
Hash identifier:          UnT0RE9qk0De4NEcJxbpKLtEGcfIFfBY0P5Ofse3HfA=
Subject key identifier:   FE:00:B4:F3:35:07:97:13:5F:18:53:57:9A:D7:A0:AD:86:36:D7:3B
Certificate issuer:       /CN=36614F42717E12040199B59CE8FFFD30F0784B36
Certificate serial:       5D9F56EE52CADC1FD394FA31CF5D4285BF123CC8
Authority key identifier: 36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e31302e302f32342d3234203d3e20323632373039.roa
Signing time:             Thu 10 Nov 2022 18:32:07 +0000
ROA not before:           Thu 10 Nov 2022 18:27:07 +0000
ROA not after:            Thu 09 Nov 2023 18:32:07 +0000
asID:                     262709
IP address blocks:        187.111.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9f:56:ee:52:ca:dc:1f:d3:94:fa:31:cf:5d:42:85:bf:12:3c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36614F42717E12040199B59CE8FFFD30F0784B36
        Validity
            Not Before: Nov 10 18:27:07 2022 GMT
            Not After : Nov  9 18:32:07 2023 GMT
        Subject: CN=FE00B4F3350797135F1853579AD7A0AD8636D73B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:97:f1:2c:8d:f1:26:dc:72:cf:ea:73:34:
                    20:78:cd:d0:bc:7f:4b:7f:b4:41:bc:14:b2:32:7b:
                    67:ca:97:83:22:fe:f5:2f:b4:bd:aa:82:ad:e0:38:
                    af:b5:d2:50:ab:ff:6d:fd:3a:76:7e:12:d9:fe:34:
                    2c:bf:28:77:f0:57:cd:e4:c4:b6:d1:66:df:0f:e2:
                    2f:9e:ec:2b:75:d2:29:68:d7:90:e9:b6:11:da:c3:
                    b7:11:e5:53:69:e1:3d:70:17:21:1f:1a:3b:56:5b:
                    e9:bc:2a:02:aa:29:75:50:48:5f:34:82:6f:3f:b2:
                    3f:01:0d:c0:26:91:af:fd:60:64:39:e4:de:b6:39:
                    1e:4b:3a:cc:48:06:f1:cf:4c:08:0f:c7:43:f4:89:
                    d9:d5:c1:40:62:f1:c9:a4:fc:a2:4e:a2:f1:2c:af:
                    55:a4:ca:64:5f:34:f9:64:a7:6c:0d:91:89:72:c8:
                    5d:42:c4:4d:22:25:06:7c:96:33:89:d3:60:a1:af:
                    f1:19:c7:39:e5:8b:d6:8e:56:bd:ad:90:d5:56:63:
                    87:e4:c4:66:e6:5d:9b:09:64:3e:75:88:69:96:8d:
                    c4:cb:33:b2:72:35:6e:0e:c1:c1:90:16:ad:df:41:
                    04:4f:97:1b:bc:b1:ef:5b:97:99:dc:d0:f1:a6:00:
                    6d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:00:B4:F3:35:07:97:13:5F:18:53:57:9A:D7:A0:AD:86:36:D7:3B
            X509v3 Authority Key Identifier:
                keyid:36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/36614F42717E12040199B59CE8FFFD30F0784B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e31302e302f32342d3234203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:fa:70:51:47:d8:7e:be:d6:cd:ef:1f:2e:af:27:7e:33:28:
         61:41:b8:4d:8c:29:0e:b7:12:2b:fe:98:5c:7f:ed:4a:cd:03:
         6b:87:46:20:49:6d:0c:39:ad:ab:03:79:77:14:ea:77:b6:9b:
         a1:da:e3:ea:6d:31:6f:40:4a:22:50:d0:9e:25:80:35:28:bc:
         45:17:2d:8e:ff:86:b2:ef:9a:86:a7:4f:c2:d6:cc:b1:cd:b2:
         98:48:4c:d2:55:2d:9f:11:0f:0b:3a:c3:ba:26:7f:d6:b7:06:
         aa:a7:b2:4d:f2:05:3a:b4:2e:e7:cb:d4:52:ea:fd:ed:36:37:
         34:e5:9f:d7:0c:3c:79:e3:89:9b:43:c1:62:d5:e5:83:ef:e6:
         27:e5:03:e3:c4:30:09:64:90:4d:b6:70:22:f5:98:82:d8:8a:
         6e:9e:0b:f8:a8:b2:7f:1b:ef:18:a9:9b:58:6c:a1:45:c8:74:
         fa:61:da:31:fa:e3:a4:dd:89:25:fa:b7:e1:0f:50:35:8c:10:
         c3:c2:f1:91:d9:17:4d:52:62:73:1a:e1:ad:4b:c1:80:aa:2b:
         2a:a8:8f:5d:a4:66:28:02:b7:f6:0c:dc:d3:7e:68:e2:14:42:
         75:ad:8e:2e:da:ab:2f:f8:6d:11:06:9e:ad:80:76:79:b9:da:
         b2:d0:a6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org