Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130322e302f32342d3234203d3e203533303438.roa
File:                     3138372e37332e3130322e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          yZWdRSYUQFlWkZMmi5HZi5tQngniq5iu9ovWZ9LsYGk=
Subject key identifier:   15:4F:4D:61:DB:34:81:8B:6E:D3:A5:84:1F:41:0B:EA:2C:A2:CC:C4
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       6E572B61C08F5D286FF076235504CE1A2CEE7DAA
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130322e302f32342d3234203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:19 +0000
ROA not before:           Wed 23 Nov 2022 18:34:19 +0000
ROA not after:            Wed 22 Nov 2023 18:39:19 +0000
asID:                     53048
IP address blocks:        187.73.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:57:2b:61:c0:8f:5d:28:6f:f0:76:23:55:04:ce:1a:2c:ee:7d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:19 2022 GMT
            Not After : Nov 22 18:39:19 2023 GMT
        Subject: CN=154F4D61DB34818B6ED3A5841F410BEA2CA2CCC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:e3:aa:a6:21:65:ea:fb:c0:a6:49:02:ff:
                    bb:2c:9c:5a:d5:28:8d:58:30:fb:17:d4:64:fa:71:
                    23:c7:61:06:9f:b5:41:16:fa:09:4c:78:c5:a3:76:
                    3f:06:92:63:6b:0b:ca:35:83:55:57:f6:75:74:d5:
                    29:93:10:90:2e:92:ac:86:43:bb:4c:70:be:4f:05:
                    27:ad:ae:9c:5b:4e:c7:9a:f4:a8:3f:e9:85:64:a7:
                    40:12:3c:c0:9d:b0:5b:8a:22:e0:d8:9d:40:61:cb:
                    50:bb:b0:16:23:7d:2b:f1:c9:ae:ed:db:f1:ce:d0:
                    34:de:98:c5:e5:89:0c:9d:fb:72:11:59:3c:6b:bd:
                    d9:f9:0d:05:b5:4d:00:ba:42:63:4f:9a:67:ec:d5:
                    3c:7e:02:06:ab:10:b9:dd:6b:62:ed:9b:09:2b:62:
                    c4:90:79:3d:27:ef:77:f0:48:96:41:ba:a4:e1:0c:
                    0b:dc:20:95:15:7c:1d:32:d1:bc:ec:5e:06:ed:68:
                    15:be:f9:cb:8e:63:aa:e3:d3:a1:8e:e3:63:f4:29:
                    08:3f:dc:33:a7:7d:29:f8:b0:4c:ee:0e:10:c9:24:
                    35:cb:0a:e6:cf:57:ea:9c:2d:c7:f6:32:9b:94:8a:
                    04:66:34:ed:26:d0:33:c1:a1:a6:b5:89:e1:e5:98:
                    2f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4F:4D:61:DB:34:81:8B:6E:D3:A5:84:1F:41:0B:EA:2C:A2:CC:C4
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130322e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:3a:cd:52:70:d3:4c:25:d7:f3:46:fe:f4:47:34:f8:df:
         03:e2:66:7d:2e:2d:6a:78:4f:63:07:c8:1f:2f:57:3b:d1:b4:
         38:e9:11:63:2f:89:20:31:b2:07:fa:48:67:fe:da:4c:78:a2:
         73:3a:42:a4:78:2d:73:47:99:25:6c:b4:5a:72:00:cd:3d:5f:
         f1:28:ef:e6:11:e2:0e:6a:de:72:c9:e3:34:eb:74:4e:32:10:
         28:ad:4b:c9:70:9d:27:cc:26:2c:0a:08:b6:22:60:40:07:8a:
         39:21:67:f8:bf:10:1e:8a:dc:7e:cf:db:d3:68:10:73:20:e6:
         e3:e6:49:5d:6f:74:92:b5:73:e3:38:70:2f:1f:63:0d:7e:a4:
         57:be:2d:1e:d9:e3:58:34:07:f5:ee:11:09:03:82:4f:a5:8c:
         e3:ab:59:95:54:12:19:2f:24:10:59:fc:a4:7d:a0:0e:05:d8:
         6e:c0:7f:6d:6f:72:fb:a7:dc:28:35:9f:69:5b:36:50:3e:2c:
         3b:bb:de:70:dc:be:d4:35:23:29:61:da:ee:76:f0:83:f7:45:
         af:50:be:b4:65:cf:e1:c4:09:f5:30:2c:ad:62:b5:fa:dd:33:
         83:4c:3a:95:be:32:4b:ea:1e:d5:f6:66:b2:b5:91:cf:ca:38:
         56:af:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-fra.rpki-client.org