Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/3138372e3131312e3131342e302f32332d3233203d3e20323731363830.roa
File:                     3138372e3131312e3131342e302f32332d3233203d3e20323731363830.roa (raw, json)
Hash identifier:          IHo0mh2L2ayKT5yMAR8m1oNWRz8DwP/05Dj3NfGJ+5k=
Subject key identifier:   5D:62:91:8E:61:B6:EB:5E:1E:79:B3:00:7A:3F:87:27:15:BB:CA:95
Certificate issuer:       /CN=72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1
Certificate serial:       7D2EA468252370B8F3D4EDDF3D454C97E1F5DFBC
Authority key identifier: 72:B5:92:FB:BD:0C:65:9F:CD:47:4B:6B:BA:5F:D3:F5:6D:4B:96:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/3138372e3131312e3131342e302f32332d3233203d3e20323731363830.roa
Signing time:             Wed 06 Mar 2024 01:03:56 +0000
ROA not before:           Wed 06 Mar 2024 00:58:56 +0000
ROA not after:            Wed 05 Mar 2025 01:03:56 +0000
asID:                     271680
IP address blocks:        187.111.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2e:a4:68:25:23:70:b8:f3:d4:ed:df:3d:45:4c:97:e1:f5:df:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1
        Validity
            Not Before: Mar  6 00:58:56 2024 GMT
            Not After : Mar  5 01:03:56 2025 GMT
        Subject: CN=5D62918E61B6EB5E1E79B3007A3F872715BBCA95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:29:82:15:ea:58:89:ff:35:92:f7:d6:ef:f5:
                    ec:aa:15:0b:65:0b:ea:18:8a:72:f9:72:fa:b2:88:
                    1a:cf:a0:9f:86:68:d0:96:52:cd:2e:44:2d:1c:e0:
                    e3:60:06:7c:0c:ae:33:89:5d:a6:fa:35:e9:bf:5f:
                    21:82:98:2b:27:b2:6f:e9:ad:c9:ac:39:5d:45:24:
                    dc:d4:0b:d9:53:c0:c8:a5:22:8b:f8:c2:fd:da:14:
                    03:c3:7f:1b:21:57:33:b0:9c:30:50:ea:c9:60:ff:
                    e2:dc:b1:30:1a:7c:eb:94:80:04:ac:00:e3:97:9f:
                    86:a5:e5:27:23:d8:68:3d:49:95:eb:65:16:18:d5:
                    64:0d:b1:93:70:19:84:36:8b:1f:9c:42:9d:1e:6e:
                    72:21:d4:0a:c7:77:7d:bf:b3:ec:41:c2:be:e9:2a:
                    42:96:3d:71:c6:53:a1:95:ac:66:5b:fd:a9:3a:2d:
                    3b:59:5c:78:82:ae:fe:b6:a2:46:3a:95:39:66:e6:
                    9c:41:3a:ad:fc:dd:34:34:15:41:6b:42:83:7b:c0:
                    ed:7d:95:15:85:ac:fb:22:1a:8e:a5:cf:a0:c9:d6:
                    8f:35:9d:24:2f:4c:ad:a3:1c:52:7e:9b:7c:e4:00:
                    bc:fe:7b:eb:f0:d0:39:bf:4c:b9:4e:2a:5e:ab:55:
                    d3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:62:91:8E:61:B6:EB:5E:1E:79:B3:00:7A:3F:87:27:15:BB:CA:95
            X509v3 Authority Key Identifier:
                keyid:72:B5:92:FB:BD:0C:65:9F:CD:47:4B:6B:BA:5F:D3:F5:6D:4B:96:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B592FBBD0C659FCD474B6BBA5FD3F56D4B96A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/0/3138372e3131312e3131342e302f32332d3233203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:8b:f2:17:11:9e:bf:b0:ae:c1:32:06:af:ec:07:6c:0c:a9:
         c8:57:c7:3d:fb:74:fd:db:ec:01:53:45:fc:f3:c3:c1:58:09:
         3e:41:d4:44:0f:a6:3d:4d:7c:76:ce:df:cd:5d:49:cb:64:fa:
         fb:a5:20:d8:da:79:f8:84:e0:38:f7:92:af:ad:2b:5d:c9:f2:
         9e:76:f3:e1:be:e2:f3:c7:df:12:7c:db:83:86:91:79:1e:9c:
         af:2a:38:50:ce:4c:54:35:cc:5c:c5:76:05:f4:09:fa:12:47:
         3f:69:63:c3:b1:f8:1c:bf:b8:f4:33:a3:b6:d1:2a:1b:e6:ca:
         1b:bc:f1:f1:1c:6b:b4:ee:76:ea:e9:90:b0:dc:39:c9:21:a9:
         92:76:40:d9:76:f8:3d:02:f8:f4:84:98:f9:c0:2a:c2:41:5d:
         64:f0:35:1c:9c:ac:fc:ab:29:da:32:56:b5:f6:0b:f9:ba:93:
         ff:5a:1d:24:96:84:a3:fa:68:62:17:93:32:dc:4b:1d:63:c4:
         5b:6b:d2:2f:d4:08:a9:12:b0:6a:60:bb:fd:f0:11:ce:7e:7b:
         fe:ae:f6:c2:99:9e:c9:b3:46:d2:72:83:11:94:bd:d9:be:54:
         da:f0:05:c2:34:8d:24:66:7b:c4:d5:60:9c:bf:c8:e8:c4:f9:
         da:fb:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org