Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130332e302f32342d3234203d3e203533303438.roa
File:                     3138372e37332e3130332e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          r41A3gL87dDucfGUZDX79pHUIfO7s/yBrXG1R9y/HV8=
Subject key identifier:   44:7C:99:63:F4:E9:7F:4A:2F:15:FC:BE:FD:D1:89:21:61:C9:AB:CF
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       59500DBB917A9E56AA56EB9DCFF5FF956836119E
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130332e302f32342d3234203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:18 +0000
ROA not before:           Wed 23 Nov 2022 18:34:18 +0000
ROA not after:            Wed 22 Nov 2023 18:39:18 +0000
asID:                     53048
IP address blocks:        187.73.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:50:0d:bb:91:7a:9e:56:aa:56:eb:9d:cf:f5:ff:95:68:36:11:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:18 2022 GMT
            Not After : Nov 22 18:39:18 2023 GMT
        Subject: CN=447C9963F4E97F4A2F15FCBEFDD1892161C9ABCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:1b:f5:6a:b4:af:5e:69:5a:c1:b0:7b:c0:
                    e1:d5:1b:d2:5e:18:6f:ea:b2:ba:2d:14:53:4b:7a:
                    7b:65:cf:b0:f6:95:63:d4:bb:78:2b:cb:d5:ff:cb:
                    7f:b3:fe:05:3f:86:68:4b:a5:2c:93:6f:0d:3e:b8:
                    23:34:5a:bf:b7:3f:5b:64:fc:98:3a:50:93:86:f3:
                    1b:61:cf:ab:0c:7f:ff:77:b3:4e:27:f7:8b:61:08:
                    20:84:6f:29:00:a1:d7:62:07:aa:b7:bb:b3:af:50:
                    a1:21:89:19:ed:09:d7:9f:5e:ff:a1:5e:81:6a:a2:
                    2f:0f:0e:7f:38:05:1d:19:f1:73:31:34:6e:a7:81:
                    b0:c5:ef:4f:19:8e:73:b9:93:5e:fa:c9:75:5e:3d:
                    2a:c0:92:12:ba:c9:8d:67:7f:ab:06:f7:d7:0a:5a:
                    ee:82:f9:4b:02:07:65:a2:73:8a:d9:e7:dc:67:f6:
                    9e:50:db:20:1e:bf:8b:67:93:a7:ec:a9:7f:fc:59:
                    f4:e3:24:cd:60:a4:73:59:6b:8d:11:bc:5d:cf:83:
                    f5:16:ca:0b:26:53:63:50:21:45:c7:29:bf:72:59:
                    07:c1:6a:a1:16:13:8f:30:d5:0c:b7:ff:7f:ce:12:
                    06:1d:b0:da:c9:49:2f:9b:12:17:37:84:d9:e9:1c:
                    bd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7C:99:63:F4:E9:7F:4A:2F:15:FC:BE:FD:D1:89:21:61:C9:AB:CF
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130332e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:03:03:cb:3d:bb:12:45:50:32:bf:64:c7:dc:05:5b:48:1c:
         b0:f4:00:f1:c4:df:da:b1:77:1d:79:b3:a5:10:89:8a:93:45:
         db:5c:f9:a3:15:88:52:77:c2:5a:d0:66:c2:eb:c2:b3:92:49:
         42:93:77:70:c2:56:ad:e2:f9:e0:1c:8e:1e:41:e8:62:09:01:
         15:6c:bd:c4:54:18:a8:e7:28:32:3e:98:31:04:0e:4d:cd:e6:
         0f:c8:d4:fe:d4:97:43:5b:6e:dc:33:30:66:ac:e2:c2:95:3a:
         31:4a:00:13:48:86:ec:c5:bc:1c:0b:15:c7:4f:54:c3:68:0d:
         08:ce:c5:fd:8e:ee:a8:81:d7:7b:72:be:77:e6:8f:ba:95:de:
         5a:31:00:aa:6a:bd:b9:9a:af:da:ee:58:f6:62:08:7b:1d:87:
         c3:2a:ba:7c:20:0e:ec:ab:60:c6:08:cd:ea:f9:12:10:9b:60:
         5f:38:0d:f7:bc:c8:f9:23:3e:2e:70:9a:81:67:7e:1e:dd:61:
         0f:9d:8e:a3:84:5e:b1:e4:4e:5f:11:18:27:49:5f:e9:de:bc:
         e5:ce:df:34:e9:68:7c:1a:b4:3f:43:18:4a:a1:fd:16:7a:19:
         64:35:41:51:f6:ef:24:67:a7:79:ec:a8:ec:0a:1e:59:de:16:
         cb:31:01:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org