Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e382e302f32312d3231203d3e20323632373039.roa
File:                     3138372e3131312e382e302f32312d3231203d3e20323632373039.roa (raw, json)
Hash identifier:          TuYSElsY3XlmFrQW675zZ5RqKLGML8i/tG7F8tpJXhs=
Subject key identifier:   07:9F:FC:9B:E8:8B:E5:9D:E0:51:77:55:60:9E:47:87:C1:5C:96:8E
Certificate issuer:       /CN=36614F42717E12040199B59CE8FFFD30F0784B36
Certificate serial:       38E38EAB5342BD69ED9DC4A8CF60677BDE2EA59F
Authority key identifier: 36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e382e302f32312d3231203d3e20323632373039.roa
Signing time:             Thu 10 Nov 2022 18:31:44 +0000
ROA not before:           Thu 10 Nov 2022 18:26:44 +0000
ROA not after:            Thu 09 Nov 2023 18:31:44 +0000
asID:                     262709
IP address blocks:        187.111.8.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e3:8e:ab:53:42:bd:69:ed:9d:c4:a8:cf:60:67:7b:de:2e:a5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36614F42717E12040199B59CE8FFFD30F0784B36
        Validity
            Not Before: Nov 10 18:26:44 2022 GMT
            Not After : Nov  9 18:31:44 2023 GMT
        Subject: CN=079FFC9BE88BE59DE0517755609E4787C15C968E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:a3:7f:e2:b9:f3:fb:a2:3e:b8:bd:02:4c:
                    33:45:98:7f:54:60:03:f0:e0:39:03:79:f9:0e:ba:
                    9b:00:b4:c7:8f:15:f3:b9:65:50:dc:b8:e1:32:44:
                    45:3b:09:cc:7a:32:8f:de:eb:a3:e8:2b:c3:51:a4:
                    33:dc:b6:6d:f3:b1:64:6b:96:91:5e:2f:d0:d5:17:
                    16:37:0a:24:b5:d5:b4:b1:0c:63:a6:f3:4b:02:66:
                    bd:53:b3:ff:dd:0a:b9:b1:02:c5:d9:8e:69:34:3d:
                    a3:6b:5e:fc:54:fe:d5:29:3e:37:cd:00:9a:77:4e:
                    07:5b:b0:45:89:10:e3:90:e2:05:88:5d:1b:4e:c3:
                    34:ef:cb:62:d8:e3:d3:65:a2:c3:13:c9:2d:78:ea:
                    03:39:63:41:13:be:ca:e6:06:02:82:7e:cb:8b:bd:
                    f8:09:81:f3:87:87:8f:a7:e8:4a:72:9d:4e:a6:9e:
                    2a:00:1f:2b:b9:b1:db:28:b2:a2:32:f6:e3:f6:dd:
                    0d:95:71:f6:28:2e:35:0f:3f:9a:4b:e3:e8:af:92:
                    c2:ab:6e:49:5e:64:2b:20:d3:30:22:0d:92:ed:4d:
                    da:34:36:24:d3:6a:80:94:3f:38:2e:d8:b5:5a:83:
                    53:13:ba:62:7c:c6:3f:5c:25:d2:43:6d:a7:e9:36:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9F:FC:9B:E8:8B:E5:9D:E0:51:77:55:60:9E:47:87:C1:5C:96:8E
            X509v3 Authority Key Identifier:
                keyid:36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/36614F42717E12040199B59CE8FFFD30F0784B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e382e302f32312d3231203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:72:bd:6c:e1:27:27:46:20:a7:36:94:64:59:8d:7c:0a:a4:
         45:d8:5f:dd:01:63:2d:70:e3:b4:d2:5c:64:cf:3c:5c:88:f1:
         1b:4b:25:09:24:3a:c0:33:bb:87:3a:06:9e:57:1e:71:6b:b0:
         ca:69:a0:b5:ef:4e:80:46:db:3c:22:a2:ca:e8:97:e0:5d:a9:
         43:2e:aa:23:02:af:0a:a6:75:35:13:f9:b7:8e:24:fd:1b:f0:
         c9:b6:e4:8b:66:6b:f8:91:20:f8:d1:d7:e4:d0:aa:3f:94:a2:
         9a:e1:8d:c5:d5:d8:9f:9c:06:da:67:d3:fe:e0:f8:23:8d:e5:
         ed:bd:c1:2a:50:6a:cb:b8:eb:c3:b3:0e:ac:4c:49:02:40:9c:
         36:af:42:24:aa:b8:01:2d:84:e1:bb:b4:d1:52:a8:51:b6:fc:
         44:c4:6b:c6:ea:26:75:86:fc:c9:46:6f:45:0b:79:13:01:c0:
         1e:76:d9:eb:ed:3d:90:ac:0a:e0:bc:8b:bd:11:22:1a:c3:f3:
         f7:bc:70:44:85:9f:42:7c:4f:06:75:94:d9:15:3b:e0:73:8b:
         ed:71:ec:85:10:fa:e6:e6:9f:a8:bd:ce:84:9e:9a:7d:77:f5:
         7a:dc:2d:f8:d0:3e:18:df:0a:5d:c5:43:47:74:b7:c1:95:e8:
         04:62:97:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org