Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230382e302f32302d3234203d3e20323632343933.roa
File:                     3138372e37332e3230382e302f32302d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          ifWbADD1gBopsUmR1O8QorwgubVEL7LZj42MGwRAyCY=
Subject key identifier:   1A:7D:C1:B0:9C:C4:8F:EE:6C:AE:15:A5:9E:26:DD:88:D3:3B:CF:2E
Certificate issuer:       /CN=16F441F1C682BD5AC84BC3CA02D6CF416A379C1D
Certificate serial:       3910F3831ED31DCC6F776B21380568EFD0EF7E86
Authority key identifier: 16:F4:41:F1:C6:82:BD:5A:C8:4B:C3:CA:02:D6:CF:41:6A:37:9C:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F441F1C682BD5AC84BC3CA02D6CF416A379C1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230382e302f32302d3234203d3e20323632343933.roa
Signing time:             Sun 08 Oct 2023 14:30:09 +0000
ROA not before:           Sun 08 Oct 2023 14:25:09 +0000
ROA not after:            Sun 06 Oct 2024 14:30:09 +0000
asID:                     262493
IP address blocks:        187.73.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:10:f3:83:1e:d3:1d:cc:6f:77:6b:21:38:05:68:ef:d0:ef:7e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F441F1C682BD5AC84BC3CA02D6CF416A379C1D
        Validity
            Not Before: Oct  8 14:25:09 2023 GMT
            Not After : Oct  6 14:30:09 2024 GMT
        Subject: CN=1A7DC1B09CC48FEE6CAE15A59E26DD88D33BCF2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b8:12:a9:15:88:20:fc:09:e2:60:37:ec:2f:
                    78:41:6f:25:8f:42:96:ec:a7:6e:9f:f9:c2:42:af:
                    a7:c3:aa:5b:e3:54:cc:46:08:91:29:a8:a4:73:10:
                    33:8e:53:03:ee:65:a1:ab:2a:64:1b:7b:53:13:3e:
                    44:cd:5f:7a:60:95:06:64:e0:8a:22:2a:b6:7d:f4:
                    b3:23:f7:2e:0f:f4:64:6a:a4:1c:b4:f2:e5:bf:fd:
                    54:9e:6b:9c:65:5f:be:b3:33:40:08:85:3a:7f:6c:
                    4d:a8:27:9f:9a:78:4c:08:29:27:31:a2:b5:c3:08:
                    d2:c0:7a:0d:93:0a:44:e2:c9:54:fd:13:35:05:6e:
                    07:7a:d2:a3:2f:96:91:24:f3:5f:df:f1:7e:1c:df:
                    74:90:31:49:cf:f6:8f:f2:69:da:a2:db:01:bc:60:
                    0d:b5:af:7f:4b:1f:e2:90:fe:3e:85:3a:f4:9b:51:
                    17:a2:46:f0:5b:e5:86:89:48:a8:c7:cd:a0:6f:ed:
                    d0:c8:83:bc:94:7d:80:c4:1c:fc:e2:e9:7f:9d:d4:
                    1f:e2:ee:33:1c:15:f9:5a:43:1e:c4:1c:2a:db:d2:
                    ec:b2:9f:e0:83:82:10:f0:e0:5f:c2:34:0e:ed:d5:
                    e0:60:72:27:07:c8:9a:3e:15:bd:88:ac:02:60:c3:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7D:C1:B0:9C:C4:8F:EE:6C:AE:15:A5:9E:26:DD:88:D3:3B:CF:2E
            X509v3 Authority Key Identifier:
                keyid:16:F4:41:F1:C6:82:BD:5A:C8:4B:C3:CA:02:D6:CF:41:6A:37:9C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/16F441F1C682BD5AC84BC3CA02D6CF416A379C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16F441F1C682BD5AC84BC3CA02D6CF416A379C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/0/3138372e37332e3230382e302f32302d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:bf:d9:db:c3:28:90:40:cd:05:bc:c8:3d:3c:89:5c:fc:5e:
         59:2a:b6:a4:ec:32:0a:81:d6:c4:f3:2d:ae:4b:d7:fd:22:08:
         b5:05:68:e7:3d:90:20:61:b9:45:95:9e:e5:69:d8:4d:ca:67:
         97:8d:23:af:f8:9e:89:98:55:12:79:02:9c:35:54:bc:e9:1e:
         1d:fd:8b:84:50:85:b8:e0:79:a1:76:07:cc:ce:4c:ab:60:52:
         6a:36:22:b5:f3:bb:db:56:24:63:2b:b8:8f:e6:88:47:e3:24:
         0a:0f:cc:40:04:08:b6:22:af:99:ac:a7:c6:e5:c8:86:59:04:
         5c:cd:01:a2:aa:f2:c1:f6:37:68:d7:b1:16:20:4b:d9:f6:c5:
         28:52:41:85:4e:a0:ce:88:94:4f:65:e8:46:f6:83:44:30:5a:
         b4:52:f3:b8:70:a1:e4:f1:5e:e0:08:aa:97:92:ca:3a:7e:81:
         b0:22:69:f7:8f:05:98:ef:3a:5d:f5:cb:4c:f8:79:75:51:fb:
         bf:3c:73:47:d5:53:e8:08:1f:09:03:25:12:1f:a2:3d:c3:19:
         8c:ca:4f:85:f4:ae:25:19:a0:4c:d7:ad:77:c2:22:42:62:cb:
         62:c0:58:cf:0d:de:0c:bb:9e:6d:44:56:ae:31:ee:9c:35:d9:
         6b:44:2b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org