Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130372e302f32342d3234203d3e203533303438.roa
File:                     3138372e37332e3130372e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          a0tAZu6MiocsrMMuFPL40saj5ZEH9u3EgxJE/K9YqL0=
Subject key identifier:   46:75:8E:56:88:B1:4E:05:52:BB:46:4B:57:69:1C:99:BF:A3:9A:5C
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       7A844455003D17D351CA8C6919C421D3628FD39F
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130372e302f32342d3234203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:16 +0000
ROA not before:           Wed 23 Nov 2022 18:34:16 +0000
ROA not after:            Wed 22 Nov 2023 18:39:16 +0000
asID:                     53048
IP address blocks:        187.73.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:84:44:55:00:3d:17:d3:51:ca:8c:69:19:c4:21:d3:62:8f:d3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:16 2022 GMT
            Not After : Nov 22 18:39:16 2023 GMT
        Subject: CN=46758E5688B14E0552BB464B57691C99BFA39A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:2e:3b:bc:7f:8a:cd:0f:2e:80:fa:81:76:
                    95:13:65:21:da:51:4b:b6:32:06:b1:d2:8f:82:82:
                    13:48:67:5b:d2:71:72:64:2b:d4:a7:55:75:9a:3a:
                    c1:92:87:0a:18:14:6a:b0:d9:50:ec:16:7e:09:5e:
                    5a:73:8e:b6:51:22:9c:e7:3c:9c:87:47:a9:b3:69:
                    f9:69:cf:de:90:3b:43:ec:29:08:17:1c:10:f0:77:
                    7d:8a:7a:02:f1:d5:f6:6a:5f:75:f4:e5:f5:54:37:
                    31:83:e3:a2:15:df:01:6a:21:fe:e7:38:98:d8:23:
                    17:31:de:4d:d3:20:d1:45:7c:fa:8c:41:56:74:56:
                    63:3b:81:26:f6:af:11:df:a7:02:1f:38:10:95:6e:
                    a4:e1:a0:48:5c:7c:1b:c5:d9:91:0c:80:af:38:53:
                    ba:ef:eb:0a:ed:3d:e9:b3:fb:38:db:74:a9:0a:ba:
                    21:a6:19:59:fe:64:dd:20:ea:9d:08:2a:17:cd:07:
                    db:4c:70:a1:1f:97:e5:2b:f7:45:77:19:52:34:70:
                    7c:9c:e2:1b:ed:f6:59:30:e8:63:3d:1a:3e:bd:cf:
                    71:c5:f9:3e:28:9d:a4:05:54:fc:bd:0f:b3:5a:72:
                    93:4e:f2:91:43:0a:30:d7:ce:f2:2e:f1:a5:d2:6a:
                    9e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:75:8E:56:88:B1:4E:05:52:BB:46:4B:57:69:1C:99:BF:A3:9A:5C
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130372e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:da:4e:1c:4e:13:2d:04:be:e9:cd:5f:45:1c:87:0a:bc:f8:
         1a:84:e3:b0:65:30:86:98:07:08:f7:e8:0b:c0:fc:c7:f2:c7:
         9f:29:20:6d:4b:23:3e:9b:bc:1f:83:80:5a:fd:64:9a:38:fc:
         38:4f:1a:7e:c5:5f:94:96:28:10:72:6c:02:f8:fa:9d:7f:ed:
         bb:fa:a5:65:73:7c:e0:27:2d:3f:6b:47:b4:11:70:c8:42:f8:
         3a:76:42:67:a5:dd:70:47:cf:85:3f:c9:e9:f5:4e:0a:34:fe:
         81:40:23:cb:f3:ac:15:52:63:de:04:62:fc:b9:a6:ac:39:4c:
         60:d7:f7:1b:c2:da:bc:76:8d:69:00:0b:86:4d:d5:e7:24:33:
         c4:52:0f:7f:b6:ac:bf:4b:9f:96:ec:4b:c3:19:10:00:84:ab:
         16:8b:73:06:82:8e:15:34:5a:d2:c6:6e:8f:7e:50:6b:65:ff:
         37:35:f4:df:23:a4:6d:81:5b:6f:4c:c0:b6:13:23:36:67:a1:
         5b:d7:1c:22:47:4e:35:cf:25:54:f3:61:5e:8e:74:0b:e4:e0:
         e6:f6:ed:cc:8e:af:16:f1:c8:70:84:ed:8d:58:f1:15:10:60:
         fb:df:4c:9b:be:c5:33:c5:a8:0b:52:d8:bd:48:07:71:83:0c:
         8a:44:46:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-fra.rpki-client.org