Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e3132302e34382e302f32302d3230203d3e203238353938.roa
File:                     3138372e3132302e34382e302f32302d3230203d3e203238353938.roa (raw, json)
Hash identifier:          Qmh7MO6Q7AWt+r2hnIpKFqte1CRVa+oQd4rzixKPtOI=
Subject key identifier:   E6:33:8D:F2:A5:F0:DC:CD:3D:75:16:D7:B3:23:D3:AA:5F:17:6A:9B
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       43A1AA39539AD4AB58E3E0E05384484C730BA386
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e3132302e34382e302f32302d3230203d3e203238353938.roa
Signing time:             Tue 22 Nov 2022 21:22:07 +0000
ROA not before:           Tue 22 Nov 2022 21:17:07 +0000
ROA not after:            Tue 21 Nov 2023 21:22:07 +0000
asID:                     28598
IP address blocks:        187.120.48.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a1:aa:39:53:9a:d4:ab:58:e3:e0:e0:53:84:48:4c:73:0b:a3:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Nov 22 21:17:07 2022 GMT
            Not After : Nov 21 21:22:07 2023 GMT
        Subject: CN=E6338DF2A5F0DCCD3D7516D7B323D3AA5F176A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:f7:bb:da:98:ea:22:a9:42:c9:4f:75:3f:
                    7e:59:b0:e2:0f:26:ac:78:a8:eb:32:6f:6c:8e:65:
                    46:38:82:b0:24:74:4a:f8:a9:31:02:7c:90:52:22:
                    b3:f4:ba:43:10:46:1f:5c:9c:4b:59:94:4a:99:2c:
                    ee:3d:38:fc:bd:2b:51:db:69:48:49:e0:8d:11:7a:
                    0f:66:10:75:ab:03:8d:86:55:7c:70:23:59:0f:83:
                    2d:0e:5f:bb:6f:42:e3:c9:ef:6f:d3:5c:ab:0c:51:
                    99:12:fe:4f:e9:3f:ca:93:d1:b6:bd:a6:0a:ea:3a:
                    b5:0b:01:86:65:19:48:5e:0a:5e:fa:2b:73:a2:7e:
                    d1:02:cb:05:c8:14:a9:7e:22:2c:55:28:84:7d:a9:
                    18:5e:e5:f2:d9:85:94:1e:56:99:80:a2:8b:f8:0a:
                    7f:6d:83:0b:8c:a3:7a:87:ad:0d:4b:d1:4a:2e:de:
                    09:68:71:68:ed:74:ba:f1:5d:94:99:d5:42:08:73:
                    8d:69:02:6b:b7:2a:46:8c:cc:f9:d8:8c:a3:e6:f0:
                    78:20:4d:70:1f:c7:d4:9f:31:9f:7e:2e:79:f3:a9:
                    1a:6a:ec:64:ca:64:f0:be:72:15:94:a2:34:e8:36:
                    cc:5c:8c:e3:e8:86:f0:a8:19:94:cc:f1:10:09:3e:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:33:8D:F2:A5:F0:DC:CD:3D:75:16:D7:B3:23:D3:AA:5F:17:6A:9B
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e3132302e34382e302f32302d3230203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:dc:23:21:5d:4d:e1:22:c1:8f:7f:e8:e3:f2:b8:a5:68:5d:
         e7:3d:ca:77:10:b1:30:71:70:12:c5:e5:5e:bf:88:cd:fa:89:
         37:27:ab:40:70:5e:b7:79:6b:d4:7e:43:b2:75:66:ee:db:fa:
         04:2b:50:c1:33:4c:2b:e9:9e:a2:a4:64:00:c6:80:5e:22:e2:
         1d:45:14:89:eb:13:55:84:f1:67:69:9e:c0:1f:88:6d:77:d8:
         99:bb:8f:d7:42:e9:72:4d:9c:18:32:4e:63:b2:56:38:f4:d2:
         1a:ce:3c:c5:e6:b8:1a:ee:17:06:19:04:29:52:58:38:f4:eb:
         75:5f:ad:27:b8:d3:86:af:1d:18:8d:42:02:37:c2:9b:51:41:
         d5:17:a0:36:9f:ba:da:08:90:11:d5:be:25:a8:50:6d:63:be:
         03:98:af:f9:0b:0c:04:48:99:da:68:08:cd:62:1c:13:09:ac:
         08:39:c8:51:4b:88:a5:2a:b9:93:38:f9:9e:cf:db:fa:09:1f:
         83:00:3d:9f:d8:49:56:16:05:02:75:03:cf:9d:96:2a:0e:35:
         92:18:fc:43:54:e7:3b:e2:97:8d:93:bb:54:95:0d:f3:75:20:
         13:80:59:b7:a3:58:2e:52:32:cf:aa:90:8f:d8:46:2c:cb:2e:
         d6:0e:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org