Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/3138372e31372e33322e302f32302d3234203d3e203238323632.roa
File:                     3138372e31372e33322e302f32302d3234203d3e203238323632.roa (raw, json)
Hash identifier:          p2pNcWwGw+/2GuO0cVZLeLWBPiHD9hJor2lOj71z6ys=
Subject key identifier:   B7:80:4D:10:00:71:05:BB:2A:23:A6:78:30:3D:82:F8:AC:33:66:CE
Certificate issuer:       /CN=FE065568C2BF6018DC4CD6D9D669AB6DB63A901F
Certificate serial:       732917890F9778C8903724DC2E4743D4268A7C6B
Authority key identifier: FE:06:55:68:C2:BF:60:18:DC:4C:D6:D9:D6:69:AB:6D:B6:3A:90:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE065568C2BF6018DC4CD6D9D669AB6DB63A901F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/3138372e31372e33322e302f32302d3234203d3e203238323632.roa
Signing time:             Fri 22 Sep 2023 12:46:26 +0000
ROA not before:           Fri 22 Sep 2023 12:41:26 +0000
ROA not after:            Fri 20 Sep 2024 12:46:26 +0000
asID:                     28262
IP address blocks:        187.17.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:29:17:89:0f:97:78:c8:90:37:24:dc:2e:47:43:d4:26:8a:7c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE065568C2BF6018DC4CD6D9D669AB6DB63A901F
        Validity
            Not Before: Sep 22 12:41:26 2023 GMT
            Not After : Sep 20 12:46:26 2024 GMT
        Subject: CN=B7804D10007105BB2A23A678303D82F8AC3366CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:71:bd:71:0c:b8:64:42:64:b4:fc:f4:2f:12:
                    ca:90:c3:bc:e2:07:9e:00:14:f0:2a:1f:a8:3c:85:
                    c1:38:5e:b6:c7:ff:4b:eb:e2:59:08:f7:98:e2:b1:
                    e7:86:71:e0:c3:47:f8:78:86:0a:a0:2c:51:d6:ef:
                    de:69:9b:d4:9f:ef:40:3e:93:ad:57:84:f2:39:21:
                    2e:30:f7:90:67:37:0e:9e:a6:1f:f2:a0:30:81:36:
                    f5:e6:84:93:e3:95:b2:44:8d:31:3a:6d:a9:2f:c0:
                    be:50:8b:52:62:32:90:3e:42:76:20:cb:8a:e7:50:
                    4e:0b:9d:51:91:43:89:19:6f:50:4d:8d:0f:dd:95:
                    ea:20:30:e4:38:d7:94:c5:7c:5c:26:64:71:42:32:
                    08:33:20:de:1f:88:fb:6a:2f:33:31:c5:5b:c7:8e:
                    a5:5f:09:93:aa:7b:78:9a:f2:86:0f:6c:e2:f3:74:
                    81:77:73:cf:ec:af:f1:d1:da:88:94:cf:8a:b1:32:
                    15:fd:58:67:87:8a:0b:a1:96:9f:18:54:b1:1a:29:
                    07:d4:e3:c1:bd:82:2d:5c:e4:55:2a:e1:c0:a5:f9:
                    82:31:92:46:10:a6:a0:68:44:b8:9d:98:fa:e2:b0:
                    23:96:41:04:6c:4a:f0:90:3c:55:8a:b3:8a:ea:3b:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:80:4D:10:00:71:05:BB:2A:23:A6:78:30:3D:82:F8:AC:33:66:CE
            X509v3 Authority Key Identifier:
                keyid:FE:06:55:68:C2:BF:60:18:DC:4C:D6:D9:D6:69:AB:6D:B6:3A:90:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/FE065568C2BF6018DC4CD6D9D669AB6DB63A901F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE065568C2BF6018DC4CD6D9D669AB6DB63A901F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/3138372e31372e33322e302f32302d3234203d3e203238323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:41:b2:39:1d:01:89:eb:c7:b1:2f:b2:f0:39:ba:02:76:94:
         2e:7c:45:4e:2b:cd:7f:12:cf:41:89:85:fe:08:d1:da:33:b0:
         51:7c:c3:44:4d:2a:77:07:3d:dc:7a:3a:60:08:49:0d:fc:da:
         e4:7f:4c:84:09:79:a4:e8:c9:8e:1a:ad:e6:95:a2:53:36:9f:
         fc:60:64:a6:87:f3:e0:46:3b:d3:2f:5d:94:34:bd:87:41:c7:
         2b:8d:22:4d:a5:d9:88:f9:91:41:3e:2d:e9:e3:e4:a0:54:52:
         f3:05:f6:41:ff:48:a8:37:a0:a2:da:96:d4:a5:8a:3b:37:c0:
         a6:fc:ed:4c:79:1e:12:fa:6b:b9:a2:01:70:35:46:fe:9d:b2:
         c3:5f:55:58:20:3e:ca:f1:6d:10:47:da:48:76:50:b4:4b:20:
         b2:20:24:87:e6:3f:bd:c8:b9:f7:b2:c9:e7:33:11:a6:cd:33:
         0f:2c:72:77:45:c2:10:86:c9:db:46:60:66:c3:95:e4:dc:5d:
         11:57:54:8c:d1:2b:b7:50:63:60:a5:ff:f2:56:c5:5b:5c:c5:
         32:01:2f:77:41:55:e8:f7:99:7f:c8:31:6e:24:bd:34:30:01:
         dc:fa:ed:1c:9a:7c:d4:45:ab:e6:50:b8:13:f8:70:8e:de:1c:
         29:1f:d2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org