Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa
File:                     3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa (raw, json)
Hash identifier:          SK/kPzaHhisOe9AuWdX8G17Jedwh3WbjU7S8dlmIouI=
Subject key identifier:   07:10:2F:7B:AF:73:64:DB:66:4A:65:D2:74:38:08:10:C1:72:98:C2
Certificate issuer:       /CN=72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1
Certificate serial:       5B2C14550DC82629566523114FA0E2B4EB0053EC
Authority key identifier: 72:B5:92:FB:BD:0C:65:9F:CD:47:4B:6B:BA:5F:D3:F5:6D:4B:96:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa
Signing time:             Wed 06 Mar 2024 01:03:38 +0000
ROA not before:           Wed 06 Mar 2024 00:58:38 +0000
ROA not after:            Wed 05 Mar 2025 01:03:38 +0000
asID:                     271680
IP address blocks:        187.111.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2c:14:55:0d:c8:26:29:56:65:23:11:4f:a0:e2:b4:eb:00:53:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1
        Validity
            Not Before: Mar  6 00:58:38 2024 GMT
            Not After : Mar  5 01:03:38 2025 GMT
        Subject: CN=07102F7BAF7364DB664A65D274380810C17298C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:11:88:b3:6c:a6:2b:54:1b:cc:d3:be:9a:d7:
                    ab:86:fd:12:b7:80:2a:d8:42:c9:26:dd:f8:61:47:
                    ad:2e:e9:49:fb:51:4e:c1:f3:54:d7:86:fa:47:4d:
                    17:3d:d1:68:07:ae:02:e8:29:cc:fd:2f:0d:5f:d9:
                    2b:f3:0d:0c:61:47:ba:f0:94:76:14:72:aa:e7:36:
                    06:3d:10:2d:c5:99:b7:1c:ce:93:b0:15:9b:16:9c:
                    1d:81:ec:ed:a1:c9:0f:b8:c0:40:a9:f3:ce:9a:b2:
                    e7:bc:ba:4e:7b:5c:c5:a8:cb:f0:57:5f:56:9e:8f:
                    29:03:eb:7b:b9:a6:c6:59:43:2c:35:14:97:32:12:
                    58:d7:09:a6:4c:b5:a4:a7:19:b2:a9:8c:99:31:31:
                    be:09:e7:00:df:5b:7c:43:8e:9e:a4:9d:7e:66:6b:
                    b3:ce:9d:59:1a:5a:7d:36:fa:8a:42:e9:e8:d5:82:
                    91:30:99:68:a4:a5:2e:b1:7a:f3:2d:a7:b7:e7:77:
                    a4:08:b4:0f:e9:63:d3:a1:90:81:c9:51:28:ad:a1:
                    fc:5b:61:2a:74:ca:d2:33:0a:38:d1:15:28:b5:3b:
                    23:50:b7:e0:23:01:41:0d:fa:e5:53:91:6b:a4:bf:
                    4c:c9:00:1d:15:cc:d9:43:f6:d9:d5:8d:86:0b:cb:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:10:2F:7B:AF:73:64:DB:66:4A:65:D2:74:38:08:10:C1:72:98:C2
            X509v3 Authority Key Identifier:
                keyid:72:B5:92:FB:BD:0C:65:9F:CD:47:4B:6B:BA:5F:D3:F5:6D:4B:96:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:84:7a:91:77:91:2e:3d:9e:c0:0e:8b:21:74:d3:03:54:f8:
         a8:ce:1c:ea:9e:41:df:c3:09:a5:8e:27:fe:14:92:44:6a:cc:
         7f:4a:04:c0:ff:41:08:10:e6:f5:9d:0f:18:06:69:5b:6f:8a:
         86:24:3e:25:58:24:29:35:89:a6:e4:5c:cb:43:fb:b5:7d:c2:
         d8:44:f3:de:be:07:f8:85:b5:bc:52:da:4d:04:36:60:b6:e4:
         4c:55:b2:d0:05:52:29:16:c3:e4:45:58:d3:f0:8b:f1:fd:23:
         ff:41:80:f0:3f:03:93:b2:79:c0:b0:a4:2a:fc:c6:4b:a5:f7:
         e0:24:8a:52:12:98:0b:81:9f:43:8e:35:c2:99:de:be:ac:31:
         43:56:09:67:3c:e6:e8:e9:31:f0:fc:f1:2f:ad:53:8d:32:36:
         6a:ff:3d:ca:95:95:3c:20:d5:63:0d:77:9d:55:2a:30:ce:d6:
         ae:25:fa:40:cb:f5:29:42:48:22:85:42:c2:7e:88:f2:d8:b2:
         e4:4e:64:a9:63:72:52:37:bb:82:d6:ee:1c:c2:19:9b:88:66:
         71:cf:b2:7e:58:c2:81:d3:0e:88:77:b6:7e:59:3e:ca:2f:59:
         77:e4:e0:bb:3f:8f:55:c1:36:a6:3d:2d:0f:04:13:2b:b5:76:
         6f:79:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org