Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39382e302f32342d3234203d3e203533303438.roa
File:                     3138372e37332e39382e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          V9Vv2R3d/PDiipKj6CHSOFr2G5QaPihgC3BiY/iua/w=
Subject key identifier:   86:65:0C:61:A0:65:3D:CD:E3:59:5B:FF:B5:A9:12:16:49:6E:FD:9E
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       428ED90D2EAC62A97DF9F5BABD76ED8AA034EABC
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39382e302f32342d3234203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:15 +0000
ROA not before:           Wed 23 Nov 2022 18:34:15 +0000
ROA not after:            Wed 22 Nov 2023 18:39:15 +0000
asID:                     53048
IP address blocks:        187.73.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8e:d9:0d:2e:ac:62:a9:7d:f9:f5:ba:bd:76:ed:8a:a0:34:ea:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:15 2022 GMT
            Not After : Nov 22 18:39:15 2023 GMT
        Subject: CN=86650C61A0653DCDE3595BFFB5A91216496EFD9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7e:77:ff:07:5d:40:23:36:ca:ed:e5:23:8a:
                    9f:59:39:14:ff:25:84:3b:11:16:fd:66:6b:ec:d5:
                    94:1e:07:b7:86:18:8f:9f:6e:d7:67:6a:98:10:15:
                    92:39:ca:3c:79:9a:c6:11:9b:a4:a0:13:7a:03:3c:
                    07:11:27:36:97:e8:fa:dd:14:86:f6:66:2e:06:e8:
                    9a:9c:11:b7:14:40:fd:a1:de:83:e6:33:a7:b5:53:
                    ec:b7:60:ee:53:3f:fd:cb:2d:b3:e8:fa:17:8f:d1:
                    6b:21:a3:ba:f9:91:ab:77:ff:90:6c:1b:08:52:ca:
                    79:0e:45:3e:47:d3:c7:d7:26:0c:3d:81:64:45:54:
                    21:f9:7d:ff:f9:08:b2:9a:e7:ba:77:13:b3:9c:59:
                    cf:10:00:46:60:0c:10:e1:89:a1:e6:6f:10:56:18:
                    e2:ac:b1:1f:20:fa:d4:d4:8f:80:b2:6d:06:86:ff:
                    75:38:07:45:db:d5:9f:a7:8e:dc:01:9a:31:44:f7:
                    76:23:a2:96:7d:be:78:38:4a:eb:af:ce:82:70:a5:
                    86:31:2c:74:3d:76:5d:7e:3f:e0:c0:71:af:b4:69:
                    40:9a:91:f2:96:42:27:25:e2:58:e2:08:b9:6c:ce:
                    37:8b:00:58:f7:90:7d:b7:42:48:29:4b:c6:f3:50:
                    86:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:65:0C:61:A0:65:3D:CD:E3:59:5B:FF:B5:A9:12:16:49:6E:FD:9E
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e39382e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:3a:c1:7b:15:50:de:ce:45:6e:a0:93:43:3b:dd:19:2e:a9:
         06:56:ed:71:8c:c0:34:7b:e6:0f:f4:45:18:0b:45:0d:5c:ad:
         b7:80:af:38:17:96:e6:03:ea:86:9f:90:52:e9:01:90:08:3e:
         d9:77:32:95:06:8e:2a:92:f5:9c:0b:e9:bd:d6:30:2f:b6:2a:
         22:dc:9c:c8:ea:d5:2e:7e:a1:75:14:0f:24:c8:02:74:17:4f:
         d8:0e:a0:d2:45:cb:c9:ca:fa:e9:be:0f:3c:d8:95:32:10:41:
         c6:56:bb:2b:3d:28:9e:e6:7d:c3:d0:e2:c0:1b:88:2a:4e:c6:
         ef:85:32:aa:dd:3c:91:24:dd:12:88:b7:68:1b:f1:ba:26:2a:
         d4:ae:0a:58:7d:93:b7:3c:d0:8f:ba:78:3c:bc:4e:a4:a8:fe:
         96:46:5c:98:c1:4d:95:32:18:71:78:a7:4b:34:f6:27:4a:55:
         f0:a6:79:8e:0f:8e:4a:ac:c9:ad:f9:90:bf:34:12:83:f0:a5:
         bf:27:38:ac:7c:8f:63:04:5d:fb:97:a0:33:b3:ad:86:54:24:
         57:bc:cc:0d:3c:90:25:1f:f6:b2:1b:cb:f4:b4:0e:3a:02:bf:
         8f:71:ff:82:17:97:12:6c:fb:73:01:e6:a6:dc:7e:dc:3f:97:
         f6:6a:de:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org