Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3138372e3130392e31362e302f32342d3234203d3e203533313132.roa
File:                     3138372e3130392e31362e302f32342d3234203d3e203533313132.roa (raw, json)
Hash identifier:          nBGr/hzGJ2kJtKewWvqLcd21X+JFQ58Lwz4i/G1Dqdc=
Subject key identifier:   45:D5:FC:71:DE:24:FC:9C:96:35:26:50:3B:48:6A:6D:C0:CC:CA:7D
Certificate issuer:       /CN=FB77F49574CBE0843961A23238230FA3417E4159
Certificate serial:       286E9C580C6BDC0B3F6496CAD038FA6707570094
Authority key identifier: FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3138372e3130392e31362e302f32342d3234203d3e203533313132.roa
Signing time:             Thu 25 Jan 2024 23:56:24 +0000
ROA not before:           Thu 25 Jan 2024 23:51:24 +0000
ROA not after:            Thu 23 Jan 2025 23:56:24 +0000
asID:                     53112
IP address blocks:        187.109.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6e:9c:58:0c:6b:dc:0b:3f:64:96:ca:d0:38:fa:67:07:57:00:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB77F49574CBE0843961A23238230FA3417E4159
        Validity
            Not Before: Jan 25 23:51:24 2024 GMT
            Not After : Jan 23 23:56:24 2025 GMT
        Subject: CN=45D5FC71DE24FC9C963526503B486A6DC0CCCA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3e:0b:f5:c1:5f:db:c7:39:f0:ad:8f:b1:83:
                    48:5f:7a:b6:15:b5:3a:92:a4:39:ee:11:82:72:44:
                    6a:c4:7b:15:f5:7e:82:66:9a:f1:49:0e:97:87:f6:
                    b5:35:58:4a:b2:8f:e0:ba:c0:ac:99:3b:b7:41:4a:
                    78:b3:a1:15:ec:9c:ff:16:8d:05:e9:e3:59:7f:0a:
                    d2:8b:4b:b3:26:19:48:0f:d1:0a:f9:e6:61:71:c5:
                    50:77:99:8e:79:bb:44:17:e8:e2:e5:5e:2c:34:89:
                    f7:5b:45:24:6f:87:d4:9b:9a:4e:d0:03:f7:4b:f2:
                    26:b5:08:58:90:2b:8f:17:d5:22:4e:dc:27:24:46:
                    1f:5a:c1:ad:d9:ab:a5:db:43:ae:0e:b6:b1:e6:a2:
                    a3:78:f1:75:c6:5f:c6:e7:58:30:4f:5d:9b:0e:62:
                    e7:f9:94:23:ca:b8:d6:43:b5:24:89:cc:53:cf:a8:
                    1e:b7:66:c4:af:09:91:65:8d:1d:1b:e1:d6:e2:37:
                    2f:af:cd:bd:e6:4f:ad:45:48:8f:f6:09:12:74:d7:
                    b1:e7:11:b9:4e:e8:75:97:1f:32:a8:dd:4a:2c:0a:
                    89:c8:51:d4:0b:19:1a:25:f9:42:7a:46:c4:b4:7d:
                    22:36:cc:c5:68:38:44:cf:eb:18:d9:0c:e1:ca:d4:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D5:FC:71:DE:24:FC:9C:96:35:26:50:3B:48:6A:6D:C0:CC:CA:7D
            X509v3 Authority Key Identifier:
                keyid:FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/FB77F49574CBE0843961A23238230FA3417E4159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3138372e3130392e31362e302f32342d3234203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:03:a1:4d:ac:a3:71:ff:0e:79:57:ad:70:b9:dd:80:20:
         89:3c:4e:f5:f5:e4:bb:e4:89:70:16:6b:e7:55:da:04:61:81:
         c9:c5:3d:06:78:13:94:c4:83:1b:4a:9e:a8:b5:61:08:5a:58:
         7a:da:4e:c5:f8:96:fe:35:8d:f6:20:0c:11:10:02:20:0e:f5:
         ea:6a:f1:51:ce:e4:15:be:36:32:b7:4e:c6:ce:d0:99:f3:b8:
         55:e2:9d:84:e5:40:95:23:24:59:5b:bd:14:49:32:7c:6b:6a:
         84:58:65:ef:9a:bb:15:3f:02:c5:dc:1a:c5:b3:ca:2c:70:5f:
         f9:7b:40:3c:cd:1f:f5:41:f1:7a:24:7c:9b:19:e1:70:7b:76:
         e6:07:61:19:ae:ec:16:5b:3e:e4:d4:37:ae:53:bb:56:bc:05:
         7c:52:fb:56:55:5f:e6:35:bf:47:b5:8d:bf:27:2c:ff:cc:cc:
         4e:ae:1b:ec:94:13:69:e8:cd:80:6f:66:bf:55:a1:08:21:60:
         db:ca:6b:c3:64:0c:48:9c:71:64:ee:a9:d3:08:b4:37:3a:68:
         79:d2:81:ce:44:60:27:f4:66:7e:67:dc:24:a9:a7:ce:63:f3:
         d4:21:ca:13:54:a3:75:3c:fd:46:2a:33:58:03:3a:2e:1f:d8:
         6b:a2:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org