Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e39342e382e302f32332d3233203d3e203238353938.roa
File:                     3138372e39342e382e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier:          Y0hwq88Fy/XE8Br5U6MYIhiRRvynT2BE9rsjuREFjjE=
Subject key identifier:   32:45:67:90:0F:46:DB:6B:2F:6E:DE:C2:1C:C8:F9:FB:CE:E8:4E:AC
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       5E45460E1D63DD6F99EEDB805E98A25A79D87F72
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e39342e382e302f32332d3233203d3e203238353938.roa
Signing time:             Tue 24 Oct 2023 22:01:59 +0000
ROA not before:           Tue 24 Oct 2023 21:56:59 +0000
ROA not after:            Tue 22 Oct 2024 22:01:59 +0000
asID:                     28598
IP address blocks:        187.94.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:45:46:0e:1d:63:dd:6f:99:ee:db:80:5e:98:a2:5a:79:d8:7f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 24 21:56:59 2023 GMT
            Not After : Oct 22 22:01:59 2024 GMT
        Subject: CN=324567900F46DB6B2F6EDEC21CC8F9FBCEE84EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:e2:1f:b9:93:51:5d:04:ae:67:94:ae:c8:
                    b7:6c:64:95:b2:86:6b:f4:c7:ec:ab:4e:49:c2:28:
                    8c:41:ad:7a:34:fd:ea:3c:90:61:1f:89:76:c0:f0:
                    0d:e6:6b:9d:9a:53:e7:24:0c:6c:b8:29:8d:76:31:
                    d2:0c:65:c2:4c:41:a3:94:c8:0d:0c:91:45:ff:40:
                    65:d4:33:42:8c:dc:c2:11:f7:1d:fc:fc:20:a0:23:
                    51:fd:a6:ef:81:3b:d1:ed:47:d1:6f:bd:32:0a:08:
                    2d:f6:23:94:a3:f7:c3:4f:40:79:63:14:21:1d:fe:
                    11:ed:e9:21:dd:8b:d4:f7:b9:74:f9:ee:cf:99:ff:
                    29:03:71:50:08:c9:a8:60:7d:e8:bb:b0:db:81:82:
                    72:ac:3d:e5:84:35:1c:0a:cb:d1:dc:2c:d3:0f:a2:
                    fb:e7:53:87:a0:5a:f4:b0:ac:5e:ec:22:da:ab:1e:
                    fb:31:21:db:41:59:f0:6c:fc:f1:2b:6f:e1:92:3f:
                    83:b3:6c:f3:71:28:e9:72:2e:d1:56:08:84:e2:f5:
                    17:80:57:c0:c4:ee:02:1e:6d:9b:41:78:88:55:6b:
                    08:25:57:cc:1c:91:99:de:15:6a:ed:fa:89:89:1c:
                    0c:b4:d7:42:12:61:6f:b7:10:0f:a2:61:bd:bd:31:
                    01:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:45:67:90:0F:46:DB:6B:2F:6E:DE:C2:1C:C8:F9:FB:CE:E8:4E:AC
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3138372e39342e382e302f32332d3233203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:4f:bd:8f:9a:b6:66:32:76:d3:9a:8e:a6:9f:48:b4:ec:ef:
         b9:da:0b:8a:c0:57:dd:1d:8f:73:4a:f1:2c:bf:68:3e:5f:7a:
         09:d4:22:76:95:22:56:63:4a:1e:57:31:82:c1:fd:92:cf:4d:
         e9:06:3d:7a:f8:0a:02:48:b9:d4:d9:3d:b4:4c:78:5c:2c:b3:
         2c:9b:b0:90:22:36:d2:5b:bb:f1:b4:e3:bd:c2:75:d9:64:ca:
         c6:a2:ad:a1:74:23:fb:6a:b7:e5:5a:49:3d:3a:90:4b:89:41:
         e6:bb:16:f1:6c:c9:c5:00:ba:d8:b1:c9:45:c8:a8:a7:1f:ca:
         55:72:6b:12:56:98:0b:14:31:c8:89:ae:12:0f:14:09:21:ed:
         93:c9:29:ab:aa:69:a8:d7:8d:fd:fd:a6:4c:66:de:f0:c8:b2:
         5f:5c:9e:f9:5c:46:d0:30:96:6d:16:f9:f1:d5:2f:2b:94:67:
         d2:5a:ec:86:7d:d8:4a:44:01:10:1c:1f:02:41:b0:e9:af:e2:
         75:4a:3f:6b:3d:e4:41:52:92:01:6f:54:6a:bb:cf:fb:bc:2b:
         9e:f8:82:d7:83:c6:f7:f2:aa:49:ee:02:cf:21:56:16:0c:a3:
         16:08:35:4d:b8:df:e1:d5:1d:31:1c:d1:6d:40:56:a7:ec:56:
         39:57:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org