Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130352e302f32342d3234203d3e203533303438.roa
File:                     3138372e37332e3130352e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          /DP9xjrXRtpJ6mReRPV9L0WIfDSTfLUdJOuP82H7+1o=
Subject key identifier:   2B:60:05:3B:70:2B:83:1E:FD:A3:91:E4:0E:65:B7:DE:7B:F9:AB:8B
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       08A2DEE396D9945E72F220D9FD09F078392CFF2F
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130352e302f32342d3234203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:18 +0000
ROA not before:           Wed 23 Nov 2022 18:34:18 +0000
ROA not after:            Wed 22 Nov 2023 18:39:18 +0000
asID:                     53048
IP address blocks:        187.73.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a2:de:e3:96:d9:94:5e:72:f2:20:d9:fd:09:f0:78:39:2c:ff:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:18 2022 GMT
            Not After : Nov 22 18:39:18 2023 GMT
        Subject: CN=2B60053B702B831EFDA391E40E65B7DE7BF9AB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:0a:04:eb:9a:cb:97:17:54:d8:91:1e:88:
                    c3:33:da:47:66:23:b0:66:2a:74:70:96:93:fe:fa:
                    36:50:96:d0:aa:12:82:72:db:b7:e3:5a:da:c1:7c:
                    89:f4:02:6b:57:e6:51:fe:e8:f9:0b:0c:18:77:b7:
                    63:15:47:ce:05:4a:85:4f:e0:0b:ac:c5:44:cd:9a:
                    0d:0e:e5:8b:66:de:e1:7f:25:2d:23:0c:e6:49:d5:
                    77:73:7d:e8:ef:04:c7:9a:1d:99:b1:2f:34:c5:8c:
                    23:a3:0d:5f:a4:61:e7:bd:dd:5d:9f:0f:d8:ea:22:
                    be:14:c6:3a:41:19:47:8f:a1:b3:ec:55:2f:00:8d:
                    28:94:94:68:d5:46:87:31:6a:51:04:df:53:6e:d1:
                    d1:f2:e1:b9:f2:7c:30:a4:96:9e:24:b9:58:56:c9:
                    81:55:c1:c3:ba:3b:1c:02:07:3f:48:aa:2f:c6:69:
                    51:43:aa:24:ef:79:6d:c5:cc:1f:66:1c:93:d9:69:
                    bc:85:9b:1f:cb:cc:51:9b:6b:34:e4:07:f8:72:c7:
                    75:65:08:59:4c:40:45:1e:b7:14:32:5c:e6:80:99:
                    cc:11:75:31:c6:f7:e8:3d:65:17:16:48:30:44:df:
                    c8:56:12:f2:bc:18:bb:92:86:9b:16:a8:45:6c:0a:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:60:05:3B:70:2B:83:1E:FD:A3:91:E4:0E:65:B7:DE:7B:F9:AB:8B
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130352e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:a4:56:d2:2a:27:df:02:77:93:cc:f5:b0:6a:20:1f:6d:6d:
         b8:d7:1f:3c:0e:2e:5c:29:ab:96:47:83:6e:38:77:cd:f5:73:
         8d:fa:1b:de:02:df:8c:d5:03:dc:6a:53:17:47:06:c4:4d:a9:
         ec:49:d0:86:52:02:4a:06:2b:a4:e5:92:16:54:9e:14:b1:f3:
         8d:f7:88:3c:f1:b7:e6:2e:c0:7e:68:c1:42:ae:9a:9a:9a:f3:
         d7:2d:8d:78:3d:a1:0b:ea:dc:1e:63:c4:03:4a:58:13:ef:45:
         c2:8e:8b:e5:13:2c:ed:f8:05:2f:98:e2:29:8d:58:69:fb:7e:
         a6:1e:3d:25:c7:bb:fe:cb:2b:c2:23:69:b4:58:55:23:09:8b:
         df:31:8c:fa:9e:9e:7e:00:98:21:3b:92:07:ac:4e:f7:d6:24:
         99:7f:dd:c0:31:db:f3:b7:7b:d5:b9:5e:98:5d:af:75:0e:6a:
         ac:e5:01:f5:a8:fb:10:64:9f:8c:58:8a:16:59:28:56:9c:6e:
         30:92:7e:66:96:ac:5a:ba:58:8a:81:21:78:e2:b3:6e:d3:71:
         6c:ee:2a:74:6d:1b:a4:a5:f8:66:98:d8:3c:c5:0d:93:54:4a:
         42:9b:e3:af:c2:cd:6d:27:29:6b:ed:0a:c5:ca:c6:78:79:1a:
         84:07:5f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org