Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3231382e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3231382e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          jyn6AZ/xezqHJh4dNtJVkICKJHd3wmbwC/t9F0SbFbs=
Subject key identifier:   09:01:27:FC:FF:34:C7:E9:62:AA:4E:FD:60:12:C9:F9:97:7C:8A:D0
Certificate issuer:       /CN=C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2
Certificate serial:       12EF08406BF4A8210B6C5DD3E4E0DAD02A230038
Authority key identifier: C1:46:AB:66:2C:B7:AA:07:4C:3C:FB:C2:F6:6C:C5:E5:12:8A:7F:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3231382e302f32332d3233203d3e203533303534.roa
Signing time:             Mon 08 Apr 2024 20:08:33 +0000
ROA not before:           Mon 08 Apr 2024 20:03:33 +0000
ROA not after:            Mon 07 Apr 2025 20:08:33 +0000
asID:                     53054
IP address blocks:        187.73.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ef:08:40:6b:f4:a8:21:0b:6c:5d:d3:e4:e0:da:d0:2a:23:00:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2
        Validity
            Not Before: Apr  8 20:03:33 2024 GMT
            Not After : Apr  7 20:08:33 2025 GMT
        Subject: CN=090127FCFF34C7E962AA4EFD6012C9F9977C8AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:d8:fa:0b:d3:ea:78:3a:be:4f:d5:28:d2:
                    7a:24:70:01:d4:5a:4b:3e:83:26:66:2d:e8:79:20:
                    4c:a7:fd:99:0a:87:9b:24:a1:05:33:2c:90:71:03:
                    94:4c:1d:bd:55:3e:a3:86:11:60:28:48:93:09:0e:
                    bc:d4:a9:50:65:5e:ff:9c:2e:a0:20:48:74:d7:fd:
                    58:47:83:77:fd:8c:44:0a:52:76:95:d8:ba:39:81:
                    b6:27:a6:fb:40:1e:6d:f5:bd:09:6c:57:16:36:4a:
                    f3:a2:b8:8e:da:42:10:14:8f:96:d6:50:25:f6:df:
                    69:77:40:7a:de:4a:71:3a:97:7c:d9:69:34:dc:25:
                    b7:6b:6b:0d:c8:0d:79:2f:1a:68:12:80:dc:dd:18:
                    7c:2e:a4:74:ac:5b:e4:98:ce:14:47:2d:ff:24:0f:
                    ac:32:e6:e1:64:1d:f5:3c:7d:6f:e8:85:80:e4:29:
                    19:46:14:12:de:f8:bf:23:4b:f4:cb:a3:51:73:d8:
                    8a:ff:e6:13:33:16:d9:ea:51:02:64:22:9f:af:06:
                    96:06:4c:f2:52:36:4a:4d:00:2e:5a:e0:9d:f7:93:
                    b4:b0:81:09:27:ff:3a:a1:db:d1:b1:56:8d:03:7f:
                    b9:1e:c6:20:76:89:2c:26:c4:1a:77:3f:58:56:b2:
                    76:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:27:FC:FF:34:C7:E9:62:AA:4E:FD:60:12:C9:F9:97:7C:8A:D0
            X509v3 Authority Key Identifier:
                keyid:C1:46:AB:66:2C:B7:AA:07:4C:3C:FB:C2:F6:6C:C5:E5:12:8A:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3231382e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:49:85:71:b9:8f:21:4f:55:45:d6:41:a6:8d:93:99:d9:24:
         0c:8d:39:88:d1:a4:27:67:c2:a1:0a:74:9c:e3:38:e4:24:aa:
         27:7f:b0:05:a3:c2:c0:7a:46:e5:b6:a9:de:f6:22:1c:a7:f1:
         89:4c:b1:67:4b:ae:f8:97:68:2a:f2:ec:d9:ab:c9:19:f4:a2:
         2c:73:f9:22:ae:d0:6d:91:da:62:9d:31:c5:41:43:45:dd:e5:
         45:26:03:92:f2:30:c8:ec:0b:0c:62:6a:11:1e:7f:eb:e6:83:
         99:82:98:22:e2:8f:b9:03:03:34:5d:28:56:f0:e0:47:f3:50:
         99:b9:7b:85:bf:26:d5:6b:00:45:b1:54:8d:be:a9:a0:f2:16:
         21:45:d1:03:39:b1:cb:af:89:0c:ec:72:12:ed:d3:14:5d:5c:
         0f:8a:33:51:49:44:2c:c9:86:27:cf:43:1e:c9:7b:53:cf:2c:
         b6:96:80:fa:a4:fa:84:09:ec:0a:e4:0f:c8:9b:b8:32:0f:98:
         47:8b:76:14:da:63:ea:5e:41:4c:65:9d:97:b0:39:77:58:ce:
         cb:8a:6b:f9:d8:51:d9:0f:0a:ce:a9:6b:d6:06:4d:c0:c5:ba:
         bb:3e:50:87:bd:b2:9c:1f:66:5d:0f:c4:0d:35:7a:d2:cf:ed:
         85:5e:c7:09
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEu8IQGv0qCELbF3T5ODa0CojADgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE0NkFCNjYyQ0I3QUEwNzRDM0NGQkMyRjY2Q0M1RTUx
MjhBN0ZGMjAeFw0yNDA0MDgyMDAzMzNaFw0yNTA0MDcyMDA4MzNaMDMxMTAvBgNV
BAMTKDA5MDEyN0ZDRkYzNEM3RTk2MkFBNEVGRDYwMTJDOUY5OTc3QzhBRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPdj6C9PqeDq+T9Uo0nokcAHU
Wks+gyZmLeh5IEyn/ZkKh5skoQUzLJBxA5RMHb1VPqOGEWAoSJMJDrzUqVBlXv+c
LqAgSHTX/VhHg3f9jEQKUnaV2Lo5gbYnpvtAHm31vQlsVxY2SvOiuI7aQhAUj5bW
UCX232l3QHreSnE6l3zZaTTcJbdraw3IDXkvGmgSgNzdGHwupHSsW+SYzhRHLf8k
D6wy5uFkHfU8fW/ohYDkKRlGFBLe+L8jS/TLo1Fz2Ir/5hMzFtnqUQJkIp+vBpYG
TPJSNkpNAC5a4J33k7SwgQkn/zqh29GxVo0Df7kexiB2iSwmxBp3P1hWsnYhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCQEn/P80x+liqk79YBLJ+Zd8itAwHwYDVR0j
BBgwFoAUwUarZiy3qgdMPPvC9mzF5RKKf/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUMzQ2kyRHVDQzlLQ3FrZHoxN3FxY1dvaERlYlpQcGlBYTE1RTFNQWRu
UHYvMS9DMTQ2QUI2NjJDQjdBQTA3NEMzQ0ZCQzJGNjZDQzVFNTEyOEE3RkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MxNDZBQjY2MkNCN0FBMDc0
QzNDRkJDMkY2NkNDNUU1MTI4QTdGRjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDM0NpMkR1Q0M5S0Nxa2R6MTdxcWNXb2hEZWJaUHBpQWExNUUxTUFkblB2LzEv
MzEzODM3MmUzNzMzMmUzMjMxMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzAzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBu0naMA0GCSqGSIb3DQEBCwUAA4IBAQB5SYVxuY8h
T1VF1kGmjZOZ2SQMjTmI0aQnZ8KhCnSc4zjkJKonf7AFo8LAekbltqne9iIcp/GJ
TLFnS674l2gq8uzZq8kZ9KIsc/kirtBtkdpinTHFQUNF3eVFJgOS8jDI7AsMYmoR
Hn/r5oOZgpgi4o+5AwM0XShW8OBH81CZuXuFvybVawBFsVSNvqmg8hYhRdEDObHL
r4kM7HIS7dMUXVwPijNRSUQsyYYnz0MeyXtTzyy2loD6pPqECewK5A/Im7gyD5hH
i3YU2mPqXkFMZZ2XsDl3WM7Limv52FHZDwrOqWvWBk3Axbq7PlCHvbKcH2ZdD8QN
NXrSz+2FXscJ
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org