Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3139362e302f32342d3234203d3e203533303534.roa
File:                     3138372e37332e3139362e302f32342d3234203d3e203533303534.roa (raw, json)
Hash identifier:          0kdRFSSg/ahS/Qym/ml+rADJgSTFJ7Eydanfn3FRF/0=
Subject key identifier:   2E:B3:E9:E1:65:42:B8:C5:F3:F5:CB:D5:73:71:CD:F2:DF:45:35:6B
Certificate issuer:       /CN=C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2
Certificate serial:       5FC96EA603A555A25C0EB946399F07FAAE027921
Authority key identifier: C1:46:AB:66:2C:B7:AA:07:4C:3C:FB:C2:F6:6C:C5:E5:12:8A:7F:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3139362e302f32342d3234203d3e203533303534.roa
Signing time:             Tue 09 Apr 2024 23:38:25 +0000
ROA not before:           Tue 09 Apr 2024 23:33:25 +0000
ROA not after:            Tue 08 Apr 2025 23:38:25 +0000
asID:                     53054
IP address blocks:        187.73.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c9:6e:a6:03:a5:55:a2:5c:0e:b9:46:39:9f:07:fa:ae:02:79:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2
        Validity
            Not Before: Apr  9 23:33:25 2024 GMT
            Not After : Apr  8 23:38:25 2025 GMT
        Subject: CN=2EB3E9E16542B8C5F3F5CBD57371CDF2DF45356B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:1d:e3:4c:56:1f:95:14:27:eb:db:be:0d:
                    b3:06:4c:81:27:7a:ab:fb:a9:56:70:98:57:13:78:
                    6e:dc:22:ad:3a:89:cb:2b:f5:54:d8:11:11:2a:b7:
                    dc:6a:46:06:58:48:3b:a4:c6:a6:74:80:7f:ed:a5:
                    9b:1f:e2:ff:f3:cb:d7:58:69:7b:ce:bb:4b:de:be:
                    45:e8:17:b6:dc:da:16:03:e1:95:d5:7d:dd:46:c2:
                    a6:37:b7:34:be:2b:67:6e:e1:c0:ee:64:12:5f:2a:
                    59:50:0b:7c:4e:50:62:66:d2:7c:89:ac:aa:bf:1d:
                    9f:72:a0:c5:8e:2b:bc:8b:c4:c8:ce:79:5e:12:c8:
                    37:fe:e2:7f:5f:73:b8:c2:98:6a:ff:eb:22:1b:61:
                    4b:57:f1:72:ab:15:3c:01:2d:8b:fa:57:8b:e2:e6:
                    76:9c:7d:b8:62:35:1b:fe:25:17:9e:1d:c2:f9:8e:
                    16:f5:4d:7d:90:1e:54:2c:3f:30:f7:a0:44:b9:58:
                    9c:55:bc:f5:fc:d4:c2:61:ec:56:ea:fe:32:cf:88:
                    d5:f4:71:bc:7d:b2:91:2e:b1:3c:b3:58:1f:6a:86:
                    46:df:1f:66:a5:c4:d5:36:9f:8f:da:90:a0:0b:50:
                    69:48:42:32:39:9c:86:d9:90:5a:9c:fb:3b:9c:32:
                    08:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B3:E9:E1:65:42:B8:C5:F3:F5:CB:D5:73:71:CD:F2:DF:45:35:6B
            X509v3 Authority Key Identifier:
                keyid:C1:46:AB:66:2C:B7:AA:07:4C:3C:FB:C2:F6:6C:C5:E5:12:8A:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3139362e302f32342d3234203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:de:d4:40:12:9f:3d:ba:a8:b2:f3:c0:fd:58:c0:e2:c4:00:
         39:d9:94:cf:4d:90:29:45:a2:40:b5:a1:3f:11:07:0f:06:6e:
         6e:51:35:5e:52:d3:1a:c1:e0:3c:d9:b7:22:13:84:c3:79:56:
         34:f9:67:05:2c:88:f2:15:83:1c:f7:f4:e5:c7:39:6b:dd:f0:
         75:35:d1:24:bb:65:37:ab:8d:aa:2d:39:9a:06:80:f4:d8:b5:
         de:c1:10:1c:88:4d:e4:10:3a:96:8d:3f:38:2a:aa:6d:de:31:
         5a:50:63:5a:65:5f:27:5f:08:3c:b6:ae:9d:7a:82:a3:bc:6e:
         fc:d0:78:98:48:5e:07:d8:84:33:7c:39:a5:0e:04:dc:f1:09:
         12:7c:4e:2f:b7:de:70:06:7c:a7:9e:ce:60:9c:14:83:8a:bf:
         38:77:c5:78:93:90:95:85:14:71:0e:9d:5c:f1:45:07:d4:bf:
         58:e3:18:0b:3f:4f:cf:75:cd:9b:80:e2:ad:b5:ae:b3:24:86:
         6c:37:42:59:c5:18:3a:6a:23:b9:1e:12:e5:e4:e4:90:5e:cc:
         6b:03:e9:25:2b:c6:ac:c0:2b:e0:ac:e8:f7:bc:e9:76:2e:b1:
         88:c4:9b:24:79:46:ce:ad:49:02:42:70:2a:e9:e2:d6:7a:4d:
         e6:d5:f2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org