Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130382e302f32342d3234203d3e203533303438.roa
File:                     3138372e37332e3130382e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          vV7mrCEugQjevCixH+CmiavyHpZTsKXd2BZ/m57OYAE=
Subject key identifier:   3B:84:56:56:1C:39:53:D5:62:75:13:6D:DE:C6:9A:60:82:94:FF:67
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       310EE9BE4005A47F205A57C4759992D782AF919C
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130382e302f32342d3234203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:15 +0000
ROA not before:           Wed 23 Nov 2022 18:34:15 +0000
ROA not after:            Wed 22 Nov 2023 18:39:15 +0000
asID:                     53048
IP address blocks:        187.73.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0e:e9:be:40:05:a4:7f:20:5a:57:c4:75:99:92:d7:82:af:91:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:15 2022 GMT
            Not After : Nov 22 18:39:15 2023 GMT
        Subject: CN=3B8456561C3953D56275136DDEC69A608294FF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:08:93:0b:b6:46:f0:de:48:f3:00:4c:36:
                    cf:97:de:dc:b0:b7:76:06:72:ae:2a:33:75:17:e7:
                    83:e3:66:43:13:74:52:55:47:83:39:fa:77:98:d5:
                    a1:ff:b4:f4:45:a1:ad:45:d0:5a:97:6e:22:af:bb:
                    74:8a:b4:81:66:57:0e:f3:bd:07:42:d0:dc:ea:a4:
                    d9:28:94:27:f2:1f:8a:0d:a1:50:e7:64:70:47:3d:
                    70:b6:ed:40:40:d0:af:9a:21:33:76:b3:bb:c0:55:
                    85:a5:45:f3:d6:38:e1:74:41:7e:1f:ed:9c:40:f5:
                    0d:8f:71:62:30:f2:a7:6c:44:44:f2:46:e8:b3:b1:
                    19:18:0e:2e:ff:8f:2b:81:91:a9:84:e1:7a:cd:f5:
                    9c:72:18:77:47:da:52:c9:67:af:3d:75:7a:bb:ec:
                    9f:97:b0:72:2d:65:69:ad:b8:ea:2c:ca:0b:71:8e:
                    8f:68:5d:7b:d5:3b:44:0b:e9:f7:f1:65:a2:8f:f9:
                    71:99:b6:58:e7:43:34:d1:d8:37:88:57:99:95:90:
                    f0:ac:50:87:2c:e1:1c:fc:9e:67:a3:26:3d:f1:3b:
                    5a:e2:b9:85:37:2f:4a:ff:9e:8d:3b:14:2a:e6:f3:
                    e4:65:57:66:f0:b0:a8:ed:95:05:5f:27:81:a7:03:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:84:56:56:1C:39:53:D5:62:75:13:6D:DE:C6:9A:60:82:94:FF:67
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130382e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:f3:32:8f:04:fa:e5:b2:a2:ce:d5:e4:84:d7:35:4f:74:69:
         64:67:a3:89:9a:3e:3a:36:d2:0f:19:e7:de:4e:b7:7c:32:05:
         b2:00:aa:94:88:b7:0b:39:55:56:8a:dd:f8:93:0f:08:fc:5e:
         47:79:4f:cb:a6:67:52:e5:22:12:95:c8:06:46:41:a7:28:ed:
         67:88:99:ed:e8:5a:0f:89:84:42:3e:31:93:ab:96:9f:e2:cf:
         cf:a3:a8:17:5c:0d:a7:49:6a:d4:3f:b9:91:db:01:8e:f7:6f:
         4c:8c:41:8f:a0:c2:39:6f:7b:00:b4:4d:4d:91:f0:00:bd:a0:
         cc:87:9a:68:f1:a8:ba:c5:65:02:19:57:2d:92:5c:51:46:b3:
         b3:ea:80:18:29:59:5a:10:66:fb:11:a6:27:61:55:6a:04:a5:
         25:fe:41:18:79:d1:7a:0d:76:74:35:29:55:3b:b9:48:b7:f7:
         0a:d1:52:04:cb:f2:08:2b:8c:4f:44:11:03:ea:07:61:44:40:
         86:82:08:e8:53:d1:8d:5d:2b:f6:13:b9:a9:f9:8a:77:f5:75:
         90:35:35:f4:e5:a2:2d:33:36:66:aa:e3:85:90:b8:37:4d:27:
         24:1c:c8:70:41:8f:a8:01:72:b3:a9:23:6f:80:a5:06:57:58:
         1b:25:e1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org