Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39372e302f32342d3234203d3e203533303438.roa
File:                     3138372e37332e39372e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          UYbjjfMnGH7NFHseXroXTn9NJeaXhCYYK+YMM06wTsg=
Subject key identifier:   61:4E:72:03:A5:69:5B:5B:A1:B2:26:C5:43:5F:72:55:E9:9A:56:A5
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       6D4F011AE115AD1EAFC2508238901A175D91ED7D
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39372e302f32342d3234203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:14 +0000
ROA not before:           Wed 23 Nov 2022 18:34:14 +0000
ROA not after:            Wed 22 Nov 2023 18:39:14 +0000
asID:                     53048
IP address blocks:        187.73.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4f:01:1a:e1:15:ad:1e:af:c2:50:82:38:90:1a:17:5d:91:ed:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:14 2022 GMT
            Not After : Nov 22 18:39:14 2023 GMT
        Subject: CN=614E7203A5695B5BA1B226C5435F7255E99A56A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6f:e8:0a:02:4f:35:f2:d1:cc:a0:b9:0b:4b:
                    51:ff:6c:ca:a3:95:72:ca:83:36:78:9d:41:fc:8e:
                    ee:04:cc:06:3f:6a:c2:e1:25:f8:43:97:5d:c5:c5:
                    80:c7:58:08:86:7b:89:6b:de:47:60:eb:48:9a:27:
                    56:d9:7d:a8:6e:dd:85:2b:d8:f9:9a:33:7f:86:7a:
                    7b:9d:45:17:3f:40:5f:a3:bb:e9:f7:b4:de:d0:a5:
                    9f:b7:cd:37:df:df:c6:7a:c5:01:05:d8:1b:0b:13:
                    cf:d4:ad:68:fc:4e:00:aa:5f:a8:d6:4e:cf:b2:e9:
                    8a:15:fb:d2:1b:d4:21:55:47:a1:74:3d:de:ef:47:
                    19:02:e2:4d:8e:fd:37:59:bb:f4:38:78:93:0a:6d:
                    99:8c:42:8e:ac:06:47:e5:ad:08:07:27:23:49:bd:
                    34:b6:91:45:4a:42:a5:4c:70:52:b2:f6:42:9d:4b:
                    45:68:bb:ff:9c:22:1f:74:26:a6:57:9e:af:ca:25:
                    9a:fb:3b:67:09:f7:eb:3b:49:bf:d2:16:4a:60:5b:
                    65:68:fe:3c:cd:ab:03:60:db:1e:ff:90:52:f6:12:
                    f6:df:c4:d6:89:5c:78:56:f1:dd:48:80:6f:05:cc:
                    47:e4:36:27:40:91:6a:8a:63:09:cd:3a:81:73:79:
                    a4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4E:72:03:A5:69:5B:5B:A1:B2:26:C5:43:5F:72:55:E9:9A:56:A5
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39372e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:44:c7:c0:d5:9e:6c:42:d3:a2:ea:c3:ca:e5:6d:98:c4:23:
         28:cd:19:51:3e:80:7f:4c:09:0f:2c:28:ea:7f:2f:1f:fc:a9:
         86:19:b0:8b:fb:3b:24:69:77:85:11:ed:74:56:7e:04:bd:01:
         1e:c4:97:6b:a8:a7:0f:61:73:e5:6c:f4:e6:fd:41:19:47:b9:
         92:d5:08:d2:aa:b4:9d:b6:66:b3:79:dd:7e:aa:af:6c:17:2c:
         db:25:c6:b6:0e:fd:32:7c:b5:32:f9:6d:8a:90:b8:09:cd:46:
         ad:39:ac:fb:cc:7a:22:7b:a2:06:ad:e6:a3:55:29:4e:e3:92:
         db:48:89:07:8d:b0:e7:73:53:26:7b:22:71:35:7e:34:c3:2d:
         66:75:10:78:07:4b:d8:d3:a4:35:12:20:3e:f8:ab:df:ad:ed:
         c3:00:31:4d:6a:a4:64:bd:5f:fd:4f:68:71:bc:cf:3c:0d:6d:
         c4:07:e1:8d:b8:e4:59:f5:0e:f1:1e:43:2b:01:94:3b:74:53:
         bb:11:ef:ab:46:39:17:b9:29:32:37:1f:f1:21:87:c0:81:22:
         80:6f:ad:ec:62:99:2b:cb:49:b3:04:a8:d2:30:1c:fb:49:70:
         95:40:05:2e:51:02:ca:78:b3:2a:71:81:d2:7a:07:17:1d:d8:
         10:0a:23:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org