Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323230.roa
File:                     3138372e31382e3132382e302f31372d3137203d3e203238323230.roa (raw, json)
Hash identifier:          0AsyUhn47/XiE3dhaA/+5opag+4WB2sct9nY0acpxuk=
Subject key identifier:   F6:B3:25:2E:B7:E9:3C:96:F6:30:AE:54:E8:99:F9:7A:24:CA:66:84
Certificate issuer:       /CN=052CB6BAADACF0A7AC98360EA3C81CD72B04569F
Certificate serial:       53B8722195F683C8F835E1AD3A1227FC2AD5B6B7
Authority key identifier: 05:2C:B6:BA:AD:AC:F0:A7:AC:98:36:0E:A3:C8:1C:D7:2B:04:56:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/052CB6BAADACF0A7AC98360EA3C81CD72B04569F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:39:47 +0000
ROA not before:           Thu 06 Oct 2022 17:34:47 +0000
ROA not after:            Thu 05 Oct 2023 17:39:47 +0000
asID:                     28220
IP address blocks:        187.18.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b8:72:21:95:f6:83:c8:f8:35:e1:ad:3a:12:27:fc:2a:d5:b6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052CB6BAADACF0A7AC98360EA3C81CD72B04569F
        Validity
            Not Before: Oct  6 17:34:47 2022 GMT
            Not After : Oct  5 17:39:47 2023 GMT
        Subject: CN=F6B3252EB7E93C96F630AE54E899F97A24CA6684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2f:8f:99:36:7f:6b:13:b5:ef:59:8c:68:ff:
                    11:c6:e9:15:46:4c:e8:bd:a4:13:80:1b:92:63:11:
                    b1:cf:12:08:42:1d:94:00:bd:5d:b9:d3:40:d1:8b:
                    c0:e4:c9:f0:e6:80:0c:d6:5f:91:19:a4:8b:87:54:
                    0e:62:42:07:da:da:29:a4:1e:f7:59:84:5b:13:1e:
                    cb:eb:91:f3:03:eb:a0:18:5e:84:e7:6e:e6:da:06:
                    d1:04:bf:ee:8e:a5:ad:2e:34:a7:2f:78:41:e1:3e:
                    8c:31:ac:2d:bb:7f:19:e6:55:58:7f:40:99:4e:cb:
                    b7:54:db:9d:0c:be:6d:1a:2d:c9:df:64:f4:96:b0:
                    e3:2c:d1:02:29:5e:6e:28:44:c7:45:1e:f2:8c:68:
                    b3:78:5c:59:c8:d6:30:5c:12:25:73:41:fe:09:a2:
                    68:79:17:4b:e5:b0:48:9b:e5:aa:b4:e3:62:f9:6a:
                    c9:3e:5a:32:8c:e5:05:f4:e1:01:80:9e:9f:85:95:
                    dc:4e:4f:0a:94:7b:ef:95:02:31:05:9b:f8:23:3a:
                    1c:69:63:4a:18:16:ea:ea:96:a3:99:f6:b4:ed:08:
                    41:f9:c4:c4:ce:bd:28:f8:4f:7f:14:29:58:88:b0:
                    18:f5:df:7f:8a:cc:7e:bc:70:4a:9d:e4:09:2a:c4:
                    d1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B3:25:2E:B7:E9:3C:96:F6:30:AE:54:E8:99:F9:7A:24:CA:66:84
            X509v3 Authority Key Identifier:
                keyid:05:2C:B6:BA:AD:AC:F0:A7:AC:98:36:0E:A3:C8:1C:D7:2B:04:56:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/052CB6BAADACF0A7AC98360EA3C81CD72B04569F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/052CB6BAADACF0A7AC98360EA3C81CD72B04569F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138372e31382e3132382e302f31372d3137203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.18.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         28:2c:a1:73:3d:14:d9:32:dc:44:8c:9f:b9:71:4b:cf:8b:56:
         4e:a4:dc:71:a0:a2:d8:d4:22:1f:81:cf:30:0a:91:75:7b:65:
         a9:f8:95:57:8b:f8:4d:0c:96:ac:33:a5:a0:f7:5a:49:38:f3:
         25:59:64:92:f1:a2:85:b3:3d:65:f7:f9:f6:35:7f:cc:af:93:
         a3:88:b9:79:9d:22:fe:ad:62:19:4a:7e:0c:4c:4e:36:63:2e:
         cb:9f:c0:a5:d9:bf:d0:35:a7:9d:79:08:82:69:68:e0:61:fd:
         23:b8:2f:0a:81:6b:11:24:f3:59:b2:e0:d5:73:23:90:25:1a:
         22:96:17:57:3a:f7:09:38:3e:67:e4:3c:c1:e9:39:1f:9d:41:
         7a:3f:42:a8:3c:7a:f7:81:6e:b6:8e:4b:10:18:7d:a6:00:0a:
         4b:c7:fb:70:11:5f:d7:bf:b1:5f:90:2b:8a:ba:63:7d:a7:6c:
         cd:c7:0f:e4:1d:f0:cc:28:8e:48:89:9b:4b:9d:68:c1:6a:2d:
         a3:9c:ec:fe:30:8b:6d:ff:9a:a8:2a:65:09:da:be:b9:f9:2d:
         3e:58:9f:c1:86:cc:73:06:e2:9a:27:39:c2:a1:51:2d:34:c8:
         9b:69:fb:46:d8:48:48:38:c7:5f:01:78:b4:a9:8c:04:6d:44:
         0f:01:ec:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org