Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e39342e382e302f32322d3332203d3e203238353938.roa
File:                     3138372e39342e382e302f32322d3332203d3e203238353938.roa (raw, json)
Hash identifier:          tQs5tWT+zKABqn0NAculZzHl4T0uJ7JYqmlhMt8ww7M=
Subject key identifier:   86:FF:BC:F0:F3:4C:98:64:D6:C0:84:E4:24:8A:89:C5:3C:71:48:28
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       3DA243CFE1C2B3D0433B61F620C43786D88F736D
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e39342e382e302f32322d3332203d3e203238353938.roa
Signing time:             Tue 22 Nov 2022 14:50:14 +0000
ROA not before:           Tue 22 Nov 2022 14:45:14 +0000
ROA not after:            Tue 21 Nov 2023 14:50:14 +0000
asID:                     28598
IP address blocks:        187.94.8.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a2:43:cf:e1:c2:b3:d0:43:3b:61:f6:20:c4:37:86:d8:8f:73:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Nov 22 14:45:14 2022 GMT
            Not After : Nov 21 14:50:14 2023 GMT
        Subject: CN=86FFBCF0F34C9864D6C084E4248A89C53C714828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:9f:08:e4:e4:80:05:3b:b4:83:11:46:46:
                    18:63:a6:ca:00:fb:12:c0:42:44:4e:00:c4:d9:ef:
                    38:a0:cc:be:06:a7:3b:1c:6b:12:b1:0d:0b:66:9b:
                    97:c8:42:e4:55:16:0a:02:17:73:20:55:09:da:d3:
                    49:0f:6a:14:0f:88:56:3c:27:d7:d3:2b:b0:8c:2b:
                    59:47:fd:14:38:d1:f5:b0:aa:d2:82:f5:ea:d1:4f:
                    34:b9:29:5e:f5:85:47:4c:77:0f:11:a5:37:c0:92:
                    4c:e6:d3:dd:25:d7:2a:a8:7d:1c:84:51:fe:58:40:
                    7d:1b:34:2a:d1:0d:da:41:4e:e4:ee:16:9f:f4:81:
                    26:a8:16:5f:71:3c:48:16:e7:31:0b:0d:ef:e9:b9:
                    9f:c8:ee:49:08:fc:23:46:3d:3c:29:8d:42:7d:23:
                    fa:bc:8e:d7:04:c3:6c:db:83:e0:c0:db:d2:97:36:
                    fc:83:11:65:38:7b:fd:b4:bb:f9:bd:ee:1d:76:59:
                    05:0b:53:06:15:93:10:ef:7a:39:f7:36:25:c0:4e:
                    a5:35:f8:30:e0:57:ad:34:fa:d2:fe:17:c8:3f:0c:
                    cf:a1:f1:23:c4:3a:a0:1e:ed:07:18:5d:ec:33:59:
                    48:d8:7e:78:b9:d1:5a:92:29:02:0a:a6:52:58:e6:
                    1e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FF:BC:F0:F3:4C:98:64:D6:C0:84:E4:24:8A:89:C5:3C:71:48:28
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e39342e382e302f32322d3332203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:d2:05:8c:f1:ad:98:dc:83:3e:e0:b2:51:8f:73:62:c7:03:
         44:ab:31:b1:a1:dd:7c:6b:81:22:b6:69:8b:8c:6d:6e:33:b3:
         e3:e8:fd:16:be:76:93:65:3c:49:dd:2f:c6:f8:e8:d3:48:db:
         4b:75:ac:98:28:50:63:23:0b:01:a1:69:40:50:49:e0:c2:3b:
         dd:c7:b9:eb:0f:6e:c2:d9:71:4b:c2:27:20:da:0e:0e:dd:03:
         33:aa:1a:dc:12:e9:1c:c7:cd:fc:0d:26:a6:c6:9d:a3:d3:f7:
         6c:ea:bc:13:82:d4:3c:fd:86:1e:b6:64:94:82:99:27:06:2c:
         1b:27:f8:f4:32:38:6f:1f:6c:37:9a:c5:2c:4a:ff:8d:e0:83:
         80:4f:8e:34:5b:8e:b8:04:14:ad:b3:b1:c1:ac:75:19:ca:02:
         dd:b0:72:00:43:43:b2:6e:5d:ea:30:3a:f6:1b:20:d3:72:db:
         e3:c8:84:14:6c:2e:3c:ee:eb:f0:e3:00:30:8f:c2:29:44:d6:
         a5:55:7c:c4:83:8b:93:ad:f0:5e:55:c9:5b:66:6c:c2:ac:94:
         6e:d1:28:fd:b8:d9:ca:e3:1b:67:64:b4:73:be:4e:61:77:ef:
         ee:34:23:c5:30:a8:ce:98:99:c6:9d:05:dd:86:e6:df:d1:2b:
         a8:a7:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org