Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e34392e3139322e302f32302d3230203d3e203533303539.roa
File:                     3138372e34392e3139322e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier:          jHiD7/vgXrq3A2ce9ubooAVWSYeZeA9WBGM/QeaDL7c=
Subject key identifier:   39:28:B8:7E:6D:3D:84:35:E4:F2:D9:19:EC:46:B8:21:53:42:D8:9D
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       172B8B32D4CBA30DADBAE6DA9687BFED416BEA3E
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e34392e3139322e302f32302d3230203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:19:06 +0000
ROA not before:           Fri 03 Mar 2023 12:14:06 +0000
ROA not after:            Fri 01 Mar 2024 12:19:06 +0000
asID:                     53059
IP address blocks:        187.49.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2b:8b:32:d4:cb:a3:0d:ad:ba:e6:da:96:87:bf:ed:41:6b:ea:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:14:06 2023 GMT
            Not After : Mar  1 12:19:06 2024 GMT
        Subject: CN=3928B87E6D3D8435E4F2D919EC46B8215342D89D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:24:42:cf:d3:51:e7:4d:3c:47:e2:82:a2:
                    7d:aa:cb:9b:a4:43:13:44:9c:0e:11:5a:48:40:f2:
                    f3:52:37:7a:ce:fe:7c:b5:fe:2c:16:ba:23:24:a3:
                    2b:ef:15:82:31:c0:71:82:6f:79:4c:ea:c5:7a:64:
                    05:af:1b:09:03:77:73:88:d2:31:72:2d:07:40:dc:
                    ac:da:3d:f9:d4:c6:6d:f7:90:34:b7:2a:02:ab:d8:
                    16:ed:a2:83:92:d3:bd:b1:20:e0:b9:32:0d:b6:7a:
                    31:82:48:99:65:87:f8:4d:68:dd:e2:11:31:dd:eb:
                    e0:1a:df:4e:df:2f:6c:94:f7:15:0a:bc:52:fd:84:
                    63:4f:85:86:ab:54:17:78:67:08:ca:61:e1:ba:7b:
                    36:35:d9:7e:99:1b:40:40:03:80:fd:70:b7:d8:a4:
                    6e:96:dc:a9:15:10:9b:44:0a:59:04:92:04:a3:03:
                    ea:8b:c0:e5:36:2c:b5:41:12:60:ee:a9:a0:b0:29:
                    8e:a2:16:fe:41:f5:d2:e4:8e:6c:0d:8f:f1:2a:61:
                    60:93:bd:67:d4:c8:78:f0:a8:2f:3a:2a:b4:d2:43:
                    1f:6b:92:1d:2c:7d:cf:1c:51:bb:2d:29:5a:86:b2:
                    87:37:a3:8d:99:06:82:05:6a:31:13:09:99:ff:97:
                    b4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:28:B8:7E:6D:3D:84:35:E4:F2:D9:19:EC:46:B8:21:53:42:D8:9D
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e34392e3139322e302f32302d3230203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:ad:ba:c0:83:76:85:0b:b8:1f:43:5f:de:1b:f6:33:1b:
         11:11:3e:7c:4b:6c:94:5c:c7:94:ed:8a:25:d6:f8:ba:4e:3d:
         e9:17:4e:09:41:36:1b:4d:f7:39:a6:49:33:57:95:3a:f9:8c:
         cd:46:6f:8e:71:92:a0:3d:31:f0:30:ed:05:ab:e7:82:4a:96:
         a2:27:14:b4:d5:ec:0f:ae:6b:61:8e:14:19:92:ce:00:9a:a9:
         e7:0d:52:cb:40:79:40:1b:7a:d7:4d:a5:df:49:c4:41:7a:d1:
         d1:bb:c7:34:9d:06:60:a3:b8:d2:2d:a8:3c:28:7d:22:7a:cc:
         3d:fc:9e:85:cf:16:cd:88:3f:9b:2a:24:ce:5c:46:cf:7b:f3:
         1b:a1:95:7a:cd:8d:04:3b:d8:28:1d:83:2e:34:4c:69:60:11:
         91:3e:d4:76:40:40:5b:ea:41:ce:2f:1c:41:4c:a1:c9:1f:81:
         c6:30:02:bf:5a:7d:0f:47:08:98:5b:c8:b0:03:f9:7b:f5:0a:
         1e:f1:88:21:42:55:f2:3e:e3:d0:39:fc:fc:25:16:3f:1a:0c:
         10:17:af:7f:6c:e9:9c:c2:1c:9a:64:f6:5a:9c:74:44:06:41:
         5b:d7:e9:0a:75:19:10:5e:9c:9e:c3:47:a9:c0:18:11:e9:1b:
         e4:15:4a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org