Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e39342e31302e302f32332d3233203d3e203238353938.roa
File:                     3138372e39342e31302e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier:          OQbOIw0dGAxVwBdrT6NBmD+XbItKRuLNHEe/ltd8NU4=
Subject key identifier:   D1:7A:B5:A1:41:3F:EB:52:13:37:45:05:42:CF:32:39:C4:A1:F7:00
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       73501F2BFEE92B8C085A215BA96C0BC737AFD945
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e39342e31302e302f32332d3233203d3e203238353938.roa
Signing time:             Tue 24 Oct 2023 22:02:00 +0000
ROA not before:           Tue 24 Oct 2023 21:57:00 +0000
ROA not after:            Tue 22 Oct 2024 22:02:00 +0000
asID:                     28598
IP address blocks:        187.94.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:50:1f:2b:fe:e9:2b:8c:08:5a:21:5b:a9:6c:0b:c7:37:af:d9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 24 21:57:00 2023 GMT
            Not After : Oct 22 22:02:00 2024 GMT
        Subject: CN=D17AB5A1413FEB521337450542CF3239C4A1F700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:6b:1a:67:95:d1:56:60:48:0a:37:ff:1e:
                    2f:e5:7c:be:fc:50:2d:37:54:a2:e1:9e:d2:c5:c2:
                    52:a0:43:6d:05:63:8a:c6:ad:a4:95:e9:3b:f4:b0:
                    4c:83:47:82:1b:04:cc:88:cb:7d:83:75:8e:b2:d9:
                    c1:96:56:e1:33:de:33:ba:00:d4:0b:32:41:b5:e0:
                    84:39:ed:38:67:60:87:89:5e:56:53:34:c0:28:ea:
                    a5:47:33:e0:53:2d:e0:8f:39:b5:d3:28:1d:ba:12:
                    8f:3e:aa:2d:9f:32:0a:89:81:f3:83:46:3b:53:6f:
                    df:c4:66:80:2b:37:ee:f2:d2:18:aa:14:3d:9f:2b:
                    02:30:b5:73:b8:9f:ee:b7:67:88:d1:cc:b1:9c:e3:
                    63:1e:09:07:54:7e:d4:d2:f4:40:30:06:bd:98:f8:
                    43:3f:ad:1a:3a:b1:04:a2:ae:92:3b:24:83:ea:93:
                    be:b3:e8:62:f7:fe:55:ba:06:de:ce:f1:9e:8f:8b:
                    52:71:fe:53:89:32:0f:15:b0:ab:25:38:04:17:72:
                    cd:4c:70:54:98:5d:65:b4:a6:3a:43:93:5e:2d:71:
                    58:c7:6e:1c:3a:42:f1:b6:bf:b3:5e:8e:b3:e2:56:
                    89:34:c3:ae:b2:9b:42:c2:2e:fd:c9:56:02:8a:ea:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7A:B5:A1:41:3F:EB:52:13:37:45:05:42:CF:32:39:C4:A1:F7:00
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e39342e31302e302f32332d3233203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:50:41:b7:99:d6:fd:12:a8:70:8a:7f:d0:ae:4c:13:64:8f:
         c5:76:6d:14:ce:27:a8:3b:8c:11:8d:24:d9:03:27:1d:8d:c2:
         04:cb:4c:50:dc:76:90:53:e7:76:52:e2:01:be:bd:e8:10:39:
         f8:63:37:27:18:04:27:85:17:28:9e:46:5b:e6:42:28:f1:8b:
         33:74:7b:54:0a:fb:3f:df:92:4f:fa:91:67:8e:cb:28:0a:a1:
         10:ef:c6:fd:be:50:b7:1b:b8:9f:12:38:cf:97:1d:21:43:19:
         84:76:ba:35:de:62:c9:75:2d:5c:2c:d9:c6:15:ae:25:8b:ba:
         a0:c2:05:af:77:40:65:fc:f6:9d:39:01:83:4c:89:ff:c2:9b:
         87:7c:66:b2:a0:52:c2:3c:5d:36:ac:73:cf:f8:5e:1a:08:d5:
         3d:88:87:6c:32:e9:2a:b3:22:1e:c1:34:a2:b3:0c:4c:d7:a7:
         7e:da:4e:32:53:56:b2:a0:d1:25:6f:d7:e3:70:0f:08:72:28:
         fb:8e:e5:d1:73:ae:2d:91:1e:b3:7c:ee:1a:38:e2:99:b3:95:
         d0:fc:a9:6f:34:8d:27:b7:c4:07:1d:a6:38:15:5b:bf:bc:53:
         40:00:fa:d6:a3:52:ce:7e:2f:91:c2:42:fc:ef:7c:82:d5:71:
         5b:49:d1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org