Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa
File:                     3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa (raw, json)
Hash identifier:          4wtEiIMZSwKu3ww/A3qqt2wEa1hLhic3YVWtIeLIX/M=
Subject key identifier:   2B:52:BE:DA:94:78:CA:D2:EF:DC:02:66:B0:55:70:41:F2:95:2F:DB
Certificate issuer:       /CN=72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1
Certificate serial:       30D14C3615E81AE1E7747BA22EDED12AAD382483
Authority key identifier: 72:B5:92:FB:BD:0C:65:9F:CD:47:4B:6B:BA:5F:D3:F5:6D:4B:96:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa
Signing time:             Wed 06 Mar 2024 01:03:53 +0000
ROA not before:           Wed 06 Mar 2024 00:58:53 +0000
ROA not after:            Wed 05 Mar 2025 01:03:53 +0000
asID:                     271680
IP address blocks:        187.111.112.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d1:4c:36:15:e8:1a:e1:e7:74:7b:a2:2e:de:d1:2a:ad:38:24:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1
        Validity
            Not Before: Mar  6 00:58:53 2024 GMT
            Not After : Mar  5 01:03:53 2025 GMT
        Subject: CN=2B52BEDA9478CAD2EFDC0266B0557041F2952FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:09:cd:0f:df:9f:5e:93:75:ea:51:18:ea:97:
                    a3:a3:74:47:d7:5d:6f:72:d5:e4:2f:7b:ca:d3:19:
                    88:60:e1:61:09:40:70:03:bc:94:60:67:52:ce:88:
                    f1:c1:4a:bd:cd:81:b2:bf:23:d7:05:51:ac:4b:76:
                    da:73:0f:52:bc:d2:1d:75:2a:2e:f1:70:55:a2:17:
                    2f:f9:0c:28:59:d3:30:a4:15:64:4a:92:7e:5f:9a:
                    e0:de:45:5e:90:f6:83:be:4e:99:a7:af:d9:a6:a0:
                    fd:53:c2:4e:8b:b2:47:6a:af:cb:ba:95:62:76:23:
                    81:0f:7e:c6:0f:ba:2d:d6:11:ce:f2:d2:56:7d:f5:
                    01:c1:9b:b0:91:e4:30:24:2a:e1:11:93:ac:99:90:
                    1d:c7:25:08:f3:01:fa:ed:78:e7:cc:67:6f:89:6c:
                    57:58:a0:6d:87:99:4e:92:6c:36:24:1b:3c:06:7d:
                    f0:ac:93:f6:ca:49:9a:19:52:1e:c5:08:d2:b9:44:
                    31:96:65:79:1e:d1:86:d0:8e:1a:2a:71:bf:fb:10:
                    61:49:b7:fd:28:cd:75:2c:35:12:7f:9a:2e:33:da:
                    d6:3f:f6:39:61:aa:5a:65:33:8c:d1:bc:8b:01:3b:
                    e3:6d:29:26:60:a0:a3:3b:79:c9:52:73:1c:22:bf:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:52:BE:DA:94:78:CA:D2:EF:DC:02:66:B0:55:70:41:F2:95:2F:DB
            X509v3 Authority Key Identifier:
                keyid:72:B5:92:FB:BD:0C:65:9F:CD:47:4B:6B:BA:5F:D3:F5:6D:4B:96:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/3138372e3131312e3131322e302f32332d3233203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:b4:91:e6:dc:0f:c2:a1:90:26:d0:2c:e6:4f:ec:26:a8:cf:
         60:64:7e:fa:2f:1c:44:e6:1c:32:00:7c:2b:0d:be:52:c0:4d:
         e0:f9:22:12:7c:26:d7:1a:77:9b:73:e1:6e:b3:c6:e3:0a:ca:
         aa:03:d1:0a:87:92:12:0d:15:0f:d3:48:a5:0d:51:f3:83:e7:
         f0:8e:80:bc:8a:47:2a:45:ea:b4:fc:52:85:27:f1:28:7a:76:
         54:79:0e:f9:a3:3a:cb:c1:30:6a:cf:fe:78:c3:0d:27:ca:bd:
         92:ae:a8:f7:85:de:eb:0d:0a:42:33:2b:20:a4:0e:2d:b7:20:
         76:96:2d:dc:e6:c4:ea:cf:db:4f:1b:cf:77:03:33:f1:8e:7a:
         7b:e6:d0:17:10:cb:f8:50:68:3a:ee:55:e9:b0:a1:1e:e7:85:
         00:75:4e:28:51:b4:12:c6:b0:d7:48:e3:d1:fc:ed:d7:3b:dc:
         ab:b2:8d:a0:aa:0d:cd:e7:37:ba:38:d5:22:0e:a2:85:17:55:
         ee:42:89:4d:aa:8f:a9:33:dc:ea:1b:5f:aa:26:0c:ca:62:d1:
         a2:2a:67:cd:e7:c0:69:2b:ed:5e:76:2e:47:49:1d:dd:bd:33:
         48:71:c6:ba:db:9e:cc:55:dd:b4:ac:65:8f:ce:d5:51:61:92:
         ef:ff:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org