Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/3138372e3130322e3234382e302f32342d3234203d3e20323730373232.roa
File:                     3138372e3130322e3234382e302f32342d3234203d3e20323730373232.roa (raw, json)
Hash identifier:          QcOs83mOcrnOD6J9IPAjlECI6oLDGg1EUZ8K9m0pbdo=
Subject key identifier:   8C:20:B0:71:46:72:EA:54:FD:EB:35:74:72:81:E2:2E:89:2A:51:93
Certificate issuer:       /CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
Certificate serial:       337F162D443F675522B092DD12A422707A6785E4
Authority key identifier: F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/3138372e3130322e3234382e302f32342d3234203d3e20323730373232.roa
Signing time:             Fri 28 Apr 2023 03:42:35 +0000
ROA not before:           Fri 28 Apr 2023 03:37:35 +0000
ROA not after:            Fri 26 Apr 2024 03:42:35 +0000
asID:                     270722
IP address blocks:        187.102.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7f:16:2d:44:3f:67:55:22:b0:92:dd:12:a4:22:70:7a:67:85:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
        Validity
            Not Before: Apr 28 03:37:35 2023 GMT
            Not After : Apr 26 03:42:35 2024 GMT
        Subject: CN=8C20B0714672EA54FDEB35747281E22E892A5193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:1d:ad:5c:33:ff:d9:68:4b:3e:62:ae:66:
                    5a:29:72:98:c6:e5:5d:7f:de:40:e1:30:a6:6d:38:
                    46:01:29:60:59:e5:3e:c1:1d:25:c6:ca:6a:7b:7a:
                    c5:78:e2:1b:f2:fd:b4:9a:a8:54:a5:aa:4e:7d:28:
                    25:1f:91:e0:d3:91:c4:88:44:f6:6e:80:51:37:fd:
                    d4:35:00:07:4d:b5:f2:bc:3a:b7:80:c8:2d:da:c7:
                    92:54:e2:7b:0a:14:44:b3:e1:17:ce:33:b5:92:e7:
                    42:69:e2:8b:3a:eb:c9:8f:9c:b4:78:3e:cb:28:77:
                    e0:02:79:45:94:18:64:9c:68:df:39:4d:11:d4:f9:
                    cb:85:b4:f1:55:cf:99:97:7a:52:c5:d8:d4:df:62:
                    f6:9c:98:02:a8:4b:cd:4e:38:14:bf:f2:be:4f:57:
                    fb:63:aa:0d:df:5b:48:b5:79:e5:22:4b:f4:22:7f:
                    bb:5f:4c:7e:5b:8c:e4:0b:44:5c:d4:97:de:97:c4:
                    f4:b0:8c:c4:f2:58:7e:d2:a6:47:f8:d2:53:4b:a3:
                    04:9b:8e:55:13:72:2e:9b:5a:99:73:fe:57:50:36:
                    81:d1:28:c4:9b:db:36:e4:af:79:59:fd:95:47:39:
                    bc:cb:e2:79:bb:b5:26:3a:db:eb:e1:80:82:c2:59:
                    ef:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:20:B0:71:46:72:EA:54:FD:EB:35:74:72:81:E2:2E:89:2A:51:93
            X509v3 Authority Key Identifier:
                keyid:F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/3138372e3130322e3234382e302f32342d3234203d3e20323730373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:69:f4:21:71:3a:eb:b2:e5:12:5d:88:b4:93:f0:db:5c:fb:
         02:3d:ad:28:b2:74:98:5d:6b:1e:2b:2f:c3:9d:2e:f8:5e:3c:
         db:7a:e8:f6:bf:65:8b:64:ba:f5:35:15:76:3c:c8:ab:78:8a:
         82:9b:db:0f:ad:23:af:f4:98:42:dc:92:20:f8:a3:f2:eb:41:
         55:00:66:e9:f7:96:3b:19:f9:1b:a2:c6:b3:c3:cc:2a:bd:34:
         3f:8d:2c:29:8f:27:51:63:2b:aa:68:f1:04:8b:26:d9:98:f0:
         5f:13:7e:25:52:a4:c3:09:64:49:7a:7c:e5:6d:b3:d5:c5:f5:
         49:1c:e4:a0:71:0e:36:7c:7f:ce:fa:01:60:99:e8:21:18:51:
         9c:38:a0:e7:5b:8c:0b:2b:39:2c:45:49:16:80:b1:b1:a8:e5:
         91:f6:f3:5b:24:ee:e3:e6:a2:1a:39:18:52:bd:5b:09:8a:86:
         a6:0d:8e:03:01:43:6a:47:6b:84:79:0c:07:73:69:b2:40:bc:
         61:2d:e4:13:a1:89:5a:f3:ab:03:b2:5b:19:17:e2:d8:b0:64:
         a5:07:a8:3a:45:7b:4e:3e:cc:3a:3e:f8:72:df:24:e4:5d:96:
         60:0a:e0:32:87:b1:17:ce:e5:ea:3c:d9:a1:37:56:8d:17:6b:
         db:0a:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org