Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/3138372e3130322e3234382e302f32332d3233203d3e20323730373232.roa
File:                     3138372e3130322e3234382e302f32332d3233203d3e20323730373232.roa (raw, json)
Hash identifier:          2lkBkFjIlWB5HZfapz/O6hpmDZTHTKmgVfhulluDCwQ=
Subject key identifier:   6B:4A:0A:D1:F1:73:28:AE:B0:E4:CB:2F:3D:E3:70:83:03:86:DB:6D
Certificate issuer:       /CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
Certificate serial:       37C52D5A0DE6747221F339EA22FB2D9C9C120BF6
Authority key identifier: F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/3138372e3130322e3234382e302f32332d3233203d3e20323730373232.roa
Signing time:             Fri 09 Jun 2023 14:38:07 +0000
ROA not before:           Fri 09 Jun 2023 14:33:07 +0000
ROA not after:            Fri 07 Jun 2024 14:38:07 +0000
asID:                     270722
IP address blocks:        187.102.248.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c5:2d:5a:0d:e6:74:72:21:f3:39:ea:22:fb:2d:9c:9c:12:0b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
        Validity
            Not Before: Jun  9 14:33:07 2023 GMT
            Not After : Jun  7 14:38:07 2024 GMT
        Subject: CN=6B4A0AD1F17328AEB0E4CB2F3DE370830386DB6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:83:d1:18:b2:1d:fd:b9:ec:49:ab:2f:87:
                    66:be:7d:70:78:f5:b3:59:bc:a3:cd:60:b1:a8:e4:
                    2d:d6:c0:96:d2:ca:5a:2e:2d:42:59:51:81:1f:91:
                    b7:f6:01:32:3b:e2:1c:7c:78:b3:e2:d2:b0:03:da:
                    af:e1:91:4c:a3:61:6b:a4:9d:1f:82:5b:87:a6:f7:
                    1e:27:c1:04:ef:12:0a:23:eb:5e:2f:d6:20:ac:47:
                    1c:28:66:de:0f:5a:5c:85:e5:c7:f5:b6:bc:37:d8:
                    ae:f3:c8:c5:6e:95:a8:17:7a:f3:33:57:9c:54:2c:
                    98:40:82:c2:ea:c8:ef:54:d2:4e:8f:52:21:2e:ba:
                    a5:48:67:85:63:f0:ad:17:53:7c:e1:e5:bd:7a:84:
                    7a:b6:8b:68:28:f5:bc:67:f3:ce:e4:57:df:00:d0:
                    6f:54:ab:34:51:c4:3e:b0:b1:58:0f:52:7d:33:d6:
                    53:9e:14:13:74:82:d2:bf:97:ef:96:df:f8:41:b3:
                    f0:cd:bf:24:87:7b:85:0a:af:42:46:a0:2b:78:e6:
                    67:84:58:2c:bd:7b:0f:38:ae:91:0b:0b:1c:23:e3:
                    b2:da:67:65:42:f4:48:be:08:66:ee:f9:ed:af:45:
                    32:e4:02:d2:3d:9f:be:5d:9e:cb:19:8e:e3:f7:2a:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4A:0A:D1:F1:73:28:AE:B0:E4:CB:2F:3D:E3:70:83:03:86:DB:6D
            X509v3 Authority Key Identifier:
                keyid:F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/3138372e3130322e3234382e302f32332d3233203d3e20323730373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:81:74:d4:a4:56:7b:bb:a6:94:0e:c5:8d:90:5e:9b:a3:97:
         df:7f:ff:a3:7d:93:e0:a9:32:2c:c7:83:99:07:f2:01:ec:f1:
         bd:bf:f2:1a:12:3f:a7:34:d4:86:61:25:ee:7f:a6:ed:4f:58:
         0e:db:06:f6:05:75:72:43:82:7c:ba:70:eb:5a:9e:44:7b:b5:
         96:f2:b3:d6:64:ea:66:4b:42:f3:cb:3b:71:38:36:c4:11:67:
         09:f6:2e:07:2f:6a:4d:39:80:68:53:97:d2:d4:51:28:c2:00:
         50:2a:66:b0:4c:d5:42:3f:28:20:8d:87:93:1a:a9:13:87:23:
         cb:f0:e5:dd:22:51:41:89:04:2f:ad:47:65:ce:b9:6e:03:6e:
         8c:dc:0b:3c:9b:81:2e:9a:3f:63:95:63:6d:9c:27:f8:36:a4:
         42:15:11:2d:63:eb:46:28:97:ee:f7:24:8e:67:2f:05:6a:db:
         c4:eb:38:8b:d1:c7:69:f9:ae:c5:59:93:5b:71:df:9c:b9:d4:
         02:20:32:80:b2:b6:34:d1:28:1f:0d:5e:4c:6c:ea:c7:d6:6a:
         28:56:62:01:2f:fd:26:cb:5a:c8:f2:9c:d0:b3:55:a3:6a:63:
         34:55:2f:f8:e3:ae:d5:ce:ea:20:44:df:4c:70:c1:5a:d0:f5:
         8b:4d:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org