Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3138372e33332e35362e302f32312d3234203d3e203238313934.roa
File:                     3138372e33332e35362e302f32312d3234203d3e203238313934.roa (raw, json)
Hash identifier:          QHLiBRRKUVNiZUUSwxrjVMeQwgiPUsbbqGtbeympalk=
Subject key identifier:   5B:3D:F4:9A:A0:92:08:0B:30:2D:E1:2D:01:63:3F:DE:C2:4D:41:93
Certificate issuer:       /CN=9BDBA20C31BBEBFE68ABC7F43F742C279C96B734
Certificate serial:       2562580460B58C559AA2EC46ABCE58D02EA97867
Authority key identifier: 9B:DB:A2:0C:31:BB:EB:FE:68:AB:C7:F4:3F:74:2C:27:9C:96:B7:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3138372e33332e35362e302f32312d3234203d3e203238313934.roa
Signing time:             Mon 07 Aug 2023 21:23:51 +0000
ROA not before:           Mon 07 Aug 2023 21:18:51 +0000
ROA not after:            Mon 05 Aug 2024 21:23:51 +0000
asID:                     28194
IP address blocks:        187.33.56.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:62:58:04:60:b5:8c:55:9a:a2:ec:46:ab:ce:58:d0:2e:a9:78:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BDBA20C31BBEBFE68ABC7F43F742C279C96B734
        Validity
            Not Before: Aug  7 21:18:51 2023 GMT
            Not After : Aug  5 21:23:51 2024 GMT
        Subject: CN=5B3DF49AA092080B302DE12D01633FDEC24D4193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:39:d4:c8:cb:e5:5c:16:e6:0d:0e:47:a7:
                    3d:5c:89:10:30:6d:b2:eb:3f:77:4d:08:fa:7a:f8:
                    bb:9c:b3:1d:27:0c:47:ef:d2:93:64:b4:f3:fd:6b:
                    81:cd:1f:04:8d:14:ee:f7:1c:58:2a:9d:05:12:66:
                    4a:39:ac:f1:60:48:12:35:a5:f1:a4:ad:d4:54:02:
                    c2:04:c5:41:70:4c:6d:fc:2c:56:81:df:1d:4a:71:
                    44:52:fe:7a:c7:e8:09:e3:61:93:80:02:b3:a7:d1:
                    16:02:7d:f0:5f:b8:0d:ef:51:dc:8b:c4:9e:92:45:
                    a7:27:71:34:29:5b:17:ed:31:22:a6:6b:7f:7e:78:
                    52:08:32:6a:53:19:b7:a3:18:9a:d1:a9:e6:09:1c:
                    0f:32:86:47:dd:3e:91:04:e5:cf:07:a7:52:5f:b0:
                    f5:7b:17:18:00:b0:bd:76:4c:e5:42:c2:d0:a0:56:
                    5e:50:d0:5c:68:0f:ef:25:29:57:cc:54:71:ee:a5:
                    d7:2e:67:7a:ec:86:b5:3f:c6:08:84:1e:57:4f:63:
                    aa:e9:e2:2f:ed:6c:81:7e:cf:2a:cf:da:a8:d3:b6:
                    d3:7f:38:03:e0:0c:ee:10:a9:12:26:65:34:fd:6d:
                    12:69:1d:fb:43:21:29:2d:b1:82:af:12:66:22:e9:
                    ab:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3D:F4:9A:A0:92:08:0B:30:2D:E1:2D:01:63:3F:DE:C2:4D:41:93
            X509v3 Authority Key Identifier:
                keyid:9B:DB:A2:0C:31:BB:EB:FE:68:AB:C7:F4:3F:74:2C:27:9C:96:B7:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BDBA20C31BBEBFE68ABC7F43F742C279C96B734.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3138372e33332e35362e302f32312d3234203d3e203238313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:49:00:03:46:bc:41:70:89:82:0f:0a:5b:d4:29:05:2a:47:
         36:22:27:81:2c:f6:69:f0:7d:e0:a7:82:55:50:51:ee:b3:d0:
         ee:c4:a5:ba:7c:c8:38:03:2a:5b:20:e0:b2:41:0f:1c:b6:16:
         4b:8b:43:1d:58:1f:9a:83:36:26:46:89:da:52:90:0d:8f:58:
         bc:30:7d:56:b3:0c:86:7b:e9:30:62:22:f2:2c:f6:fc:f9:f4:
         36:52:fc:2e:68:9f:15:db:3b:d2:95:97:0c:e8:e1:82:59:2f:
         84:84:b9:24:3f:38:89:e8:ff:6f:b0:3a:ff:f8:aa:5b:7e:26:
         38:01:0d:36:71:74:12:d4:a8:47:dc:6d:02:7f:f1:13:c8:62:
         14:7e:50:bd:7b:07:87:20:88:ac:34:14:61:66:9f:b2:1a:34:
         ac:5e:b7:de:2b:db:09:b1:4a:85:62:82:0f:1b:94:7f:1d:21:
         04:e0:59:86:05:82:11:8a:4e:8b:fd:20:53:e5:99:b1:17:13:
         60:b5:42:e2:30:f4:3b:6b:4c:37:ea:76:21:03:b8:97:ea:c9:
         6b:db:b9:6a:33:c0:e3:aa:70:a6:f8:2e:4c:e5:2a:7e:21:a7:
         da:21:6a:3c:f5:e3:21:ff:b4:0e:eb:ec:84:82:48:c4:59:74:
         7f:42:ef:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:25 2024 by rpki-client on console-ams.rpki-client.org