Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e39342e382e302f32322d3232203d3e203238353938.roa
File:                     3138372e39342e382e302f32322d3232203d3e203238353938.roa (raw, json)
Hash identifier:          5uflg3mMpxM8byD/Xe3AuJ1KFEvJ9SVo0BG/MItFFV8=
Subject key identifier:   27:EF:C5:9C:04:47:CF:41:74:60:0F:FE:72:51:D3:9C:EF:E7:0C:C4
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       79B23F6D44922A0DBF5F02D7C1FE569C0A83F105
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e39342e382e302f32322d3232203d3e203238353938.roa
Signing time:             Tue 24 Oct 2023 22:02:00 +0000
ROA not before:           Tue 24 Oct 2023 21:57:00 +0000
ROA not after:            Tue 22 Oct 2024 22:02:00 +0000
asID:                     28598
IP address blocks:        187.94.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b2:3f:6d:44:92:2a:0d:bf:5f:02:d7:c1:fe:56:9c:0a:83:f1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 24 21:57:00 2023 GMT
            Not After : Oct 22 22:02:00 2024 GMT
        Subject: CN=27EFC59C0447CF4174600FFE7251D39CEFE70CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:30:21:44:4f:68:1c:e7:17:2f:f2:ce:4e:cc:
                    06:37:56:4d:fa:03:21:5e:4d:17:82:9c:a1:70:d5:
                    77:5b:e5:c7:fe:6b:10:29:0c:b0:6c:dc:9e:13:0d:
                    45:a0:f6:8f:dd:66:62:a5:0e:41:40:f3:2e:69:12:
                    f6:4f:18:62:04:68:a5:97:7e:78:dd:11:b1:b7:53:
                    2a:7e:57:67:66:85:40:33:52:66:31:f4:5f:70:1e:
                    75:44:ca:ba:46:e6:18:f4:00:6e:cc:83:7e:85:ea:
                    68:f9:f3:8e:ca:fe:35:b2:83:3e:55:2c:b5:3b:79:
                    55:77:9f:4c:a1:86:e0:ee:c1:18:a3:99:32:8c:b9:
                    91:6f:28:4d:6b:39:b5:41:07:8f:53:ea:1b:5f:92:
                    66:48:12:b1:ee:cd:29:65:b0:c9:48:e7:4e:5c:b0:
                    ea:b9:cc:60:ed:d2:3e:ee:fa:0a:69:d7:bb:e2:82:
                    71:44:fb:f8:74:25:42:b2:fa:d2:1e:9b:67:0f:82:
                    8a:5f:d3:b3:aa:e1:24:c9:4d:37:02:19:17:fe:bf:
                    de:0f:41:bf:3e:f1:b4:ee:b7:4c:28:79:15:02:f1:
                    21:52:c7:54:05:2f:ba:a3:1e:1e:f0:fa:9c:27:d0:
                    ac:90:a0:c9:49:79:f9:6c:d5:d1:45:52:cd:5e:3c:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EF:C5:9C:04:47:CF:41:74:60:0F:FE:72:51:D3:9C:EF:E7:0C:C4
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e39342e382e302f32322d3232203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:65:f1:84:cd:ab:a8:13:6c:6f:ee:f7:6c:89:d6:a7:5a:
         d3:00:bc:2f:a2:0b:5b:7d:2c:af:4b:66:60:45:d1:7b:fa:34:
         a6:47:6b:0b:8a:d9:b2:f0:24:11:c3:9a:74:da:3b:14:fc:8a:
         90:6e:af:3f:6f:cb:7b:98:1e:8b:2b:78:dd:cc:a3:3c:3c:9d:
         41:e4:13:df:2c:a6:69:55:cc:ae:ee:29:5a:5a:7b:5e:4d:8a:
         a5:71:62:ca:6b:3f:33:c2:91:0d:34:3d:11:30:10:35:97:a3:
         6f:bd:3b:da:ca:2c:30:90:40:bf:9b:a2:49:84:71:bf:e5:0c:
         46:b0:31:e1:42:5a:83:18:b8:31:b3:fb:cc:81:b3:a8:9a:fe:
         ac:c2:9f:ea:58:29:06:4e:f9:d5:fa:04:51:99:cc:35:60:0e:
         3c:11:34:b3:94:9e:5d:04:d5:97:d7:42:07:88:89:ca:de:3d:
         b2:50:df:16:da:76:06:bf:43:7b:fb:e8:2f:68:57:1a:a0:f2:
         73:bf:b4:22:33:f2:db:1a:4b:8d:4e:41:8e:fb:a3:1d:d9:0a:
         d5:a3:ff:01:65:13:8d:ab:1d:54:01:15:19:8b:1f:47:53:30:
         8e:c2:84:47:db:1b:5b:9e:b0:bb:83:26:10:dc:51:c3:ea:ce:
         d1:1b:99:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org