Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3139382e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3139382e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          RFsF9yUW315fl3vMJ98LmUS3Qvp4ejyyNMYWFGMsBro=
Subject key identifier:   E1:11:15:1E:80:98:41:5C:9A:F8:C6:6F:F8:76:26:04:82:68:65:6E
Certificate issuer:       /CN=C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2
Certificate serial:       6C0C5DE2D3BDDA8A123159824063EC154F31402F
Authority key identifier: C1:46:AB:66:2C:B7:AA:07:4C:3C:FB:C2:F6:6C:C5:E5:12:8A:7F:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3139382e302f32332d3233203d3e203533303534.roa
Signing time:             Mon 08 Apr 2024 20:08:32 +0000
ROA not before:           Mon 08 Apr 2024 20:03:32 +0000
ROA not after:            Mon 07 Apr 2025 20:08:32 +0000
asID:                     53054
IP address blocks:        187.73.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0c:5d:e2:d3:bd:da:8a:12:31:59:82:40:63:ec:15:4f:31:40:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2
        Validity
            Not Before: Apr  8 20:03:32 2024 GMT
            Not After : Apr  7 20:08:32 2025 GMT
        Subject: CN=E111151E8098415C9AF8C66FF87626048268656E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:39:42:22:9b:23:e9:83:fa:e5:0d:67:48:
                    cc:30:3b:af:fd:32:84:d9:e2:51:23:2d:31:a3:7a:
                    ac:4c:4e:7d:10:5a:9a:d9:d8:37:ff:0a:9d:ef:39:
                    4c:99:ff:dd:06:a1:c7:ec:5a:2c:2b:85:a9:cf:6b:
                    51:a6:13:f7:49:e0:50:e4:d8:e6:b0:54:f7:c0:eb:
                    9d:9d:76:67:85:ed:c9:8f:19:13:5f:84:dd:e7:7e:
                    1b:e1:da:8a:d2:8a:ee:88:a4:3f:f5:b5:92:33:33:
                    69:a0:b2:73:b9:04:1c:68:e2:0d:5b:8b:e3:ad:6f:
                    6f:9d:8f:8c:aa:cc:e1:de:4d:71:62:7a:a5:cf:6c:
                    86:c5:39:55:26:71:32:ad:94:ef:30:73:f9:a3:c9:
                    e4:d9:26:42:a6:c4:91:e1:5c:ed:d8:0c:dd:60:af:
                    5c:50:b3:06:a9:be:1b:31:af:79:7f:fd:23:9a:52:
                    91:a7:16:08:ac:be:f1:9c:1d:c3:67:24:6b:19:07:
                    fb:06:6c:5b:8b:2d:cd:78:33:49:71:9c:99:55:fa:
                    24:cb:e6:47:04:a9:3d:3b:8a:3a:67:d8:e6:f4:92:
                    4c:73:81:53:ac:4f:7d:23:6e:f2:2c:3b:b6:0f:db:
                    7e:65:57:f4:b9:1d:40:07:3a:15:6f:39:db:22:86:
                    e4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:11:15:1E:80:98:41:5C:9A:F8:C6:6F:F8:76:26:04:82:68:65:6E
            X509v3 Authority Key Identifier:
                keyid:C1:46:AB:66:2C:B7:AA:07:4C:3C:FB:C2:F6:6C:C5:E5:12:8A:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3139382e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:b3:9f:53:68:a7:fc:70:0f:d2:ca:66:e9:97:58:24:f4:57:
         76:42:35:90:bc:01:ee:37:f8:d7:09:52:41:5b:54:9e:de:84:
         b0:75:38:37:1b:fa:08:86:53:54:87:4e:2d:4a:3a:1f:e9:56:
         43:25:65:09:3e:7c:dc:81:82:82:07:8a:c3:60:f7:ee:69:1d:
         b0:6b:73:d6:77:a6:bb:d3:2d:c2:fe:46:d6:0b:e7:78:77:cc:
         e3:98:81:3d:6e:22:99:d0:d8:fa:99:09:e4:55:ed:32:c2:72:
         a8:79:b4:68:62:24:43:2f:4d:93:ef:66:8e:66:81:4a:ef:d6:
         d7:4c:1c:7c:15:00:e4:72:44:75:20:ef:3d:f4:c1:07:68:91:
         b4:dd:51:f0:b9:54:58:9b:a4:c1:a9:12:a7:6c:ee:d9:a7:3a:
         40:4a:8e:7d:ef:d6:50:96:91:e5:ed:6d:40:17:98:d4:57:64:
         dc:29:4a:d0:7b:63:49:e2:06:d6:e7:4d:f7:d9:ae:15:f2:0e:
         bf:0b:e5:fd:63:60:1b:a7:ea:52:26:cf:1e:52:c8:2b:15:d8:
         35:ef:41:01:f5:fe:59:86:a9:1f:26:f7:58:25:0b:39:e7:f1:
         bc:44:e4:69:16:3c:d4:e4:05:b4:a9:36:f4:35:4b:e6:bb:dd:
         82:13:b2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org