Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3230322e302f32342d3234203d3e203533303534.roa
File:                     3138372e37332e3230322e302f32342d3234203d3e203533303534.roa (raw, json)
Hash identifier:          AxypTkOL4uvDCr6aymLAnSiMiAjIrnqbfogDfT1zWww=
Subject key identifier:   B8:21:7D:C3:50:F1:67:53:98:CE:85:D0:1D:A5:BA:53:07:FA:6B:10
Certificate issuer:       /CN=C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2
Certificate serial:       13D36CDE202A43DF45509697BCA272AF7A65F41C
Authority key identifier: C1:46:AB:66:2C:B7:AA:07:4C:3C:FB:C2:F6:6C:C5:E5:12:8A:7F:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3230322e302f32342d3234203d3e203533303534.roa
Signing time:             Tue 09 Apr 2024 23:38:24 +0000
ROA not before:           Tue 09 Apr 2024 23:33:24 +0000
ROA not after:            Tue 08 Apr 2025 23:38:24 +0000
asID:                     53054
IP address blocks:        187.73.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d3:6c:de:20:2a:43:df:45:50:96:97:bc:a2:72:af:7a:65:f4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2
        Validity
            Not Before: Apr  9 23:33:24 2024 GMT
            Not After : Apr  8 23:38:24 2025 GMT
        Subject: CN=B8217DC350F1675398CE85D01DA5BA5307FA6B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:19:a0:a3:f7:4d:0c:79:01:60:aa:49:f0:
                    77:fa:c6:5e:e9:3a:1e:95:1d:1d:9d:1c:a9:62:13:
                    67:62:58:ee:5b:39:03:cc:90:15:1b:69:b8:83:a5:
                    ac:a4:dc:6a:e3:3d:92:b1:e4:dc:3c:9b:50:fe:1a:
                    bb:39:87:2a:0d:f9:48:df:6b:80:10:5b:e8:63:e9:
                    b8:97:3f:5b:ce:b1:08:76:dc:8b:7f:2c:8b:41:42:
                    ff:f9:c3:5c:97:7c:0a:ac:35:c4:85:77:ba:fe:a0:
                    f7:f4:3e:c0:5d:22:d4:86:9e:4c:73:2b:de:05:a8:
                    88:bf:6a:99:03:45:2b:78:e2:31:8d:c4:48:cf:bf:
                    33:e7:5e:58:c6:a1:85:8d:40:b6:85:39:07:b4:5d:
                    cc:35:4f:45:b7:5a:c9:40:c1:f1:fc:83:9b:a5:bc:
                    a1:81:3b:0c:e8:e4:7b:00:6f:43:b1:11:46:d6:ef:
                    98:69:3f:71:11:37:11:88:be:29:92:42:d9:8c:a1:
                    75:c9:83:67:c1:ec:67:2f:5b:54:57:af:b4:6a:39:
                    27:b5:8f:b4:9f:1b:ee:65:3b:6e:59:5d:f7:8b:89:
                    67:21:0e:bd:98:d8:d1:62:f7:82:69:7a:8a:24:67:
                    58:63:77:26:8a:fb:c8:99:bf:de:83:52:5c:11:7f:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:21:7D:C3:50:F1:67:53:98:CE:85:D0:1D:A5:BA:53:07:FA:6B:10
            X509v3 Authority Key Identifier:
                keyid:C1:46:AB:66:2C:B7:AA:07:4C:3C:FB:C2:F6:6C:C5:E5:12:8A:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3230322e302f32342d3234203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:3e:22:79:44:cd:c5:52:d9:78:4c:0e:73:4c:f5:5c:0a:95:
         2e:04:8a:d2:d5:9e:d5:08:fa:ca:8f:f4:ea:09:be:1d:8b:ed:
         f8:17:cd:6c:d1:67:87:2f:54:75:a9:7d:a4:a6:7f:9b:ed:a4:
         c8:3f:35:e3:36:41:42:5e:09:5f:7d:12:79:03:36:7a:a4:f0:
         5e:18:c5:ea:4e:b9:75:86:6d:79:a6:83:d1:93:c6:74:4a:43:
         35:78:62:36:ef:ef:b5:3c:ce:0c:d0:75:dd:41:e4:01:6e:e9:
         2a:d5:07:85:7f:b4:cf:9a:24:e3:10:ed:1f:18:04:35:5e:4b:
         b3:26:4c:e9:2d:5c:d6:6c:eb:0d:ac:88:e4:ff:38:1c:29:2b:
         71:d6:65:a1:68:15:50:78:0f:52:ad:4e:8e:9c:fb:57:b2:4e:
         9e:ee:e0:5a:96:41:00:e5:33:d7:fe:df:28:68:10:6e:39:26:
         46:c1:fd:f1:63:06:9d:58:3f:29:90:2c:dc:0a:26:a5:35:83:
         c2:56:3a:f5:26:6d:63:fa:33:81:ed:1c:24:24:37:b8:da:88:
         fc:48:8c:d9:a7:19:38:fd:8f:38:cc:73:49:a0:21:c9:34:b8:
         75:f6:10:b7:ef:5d:2f:bf:12:be:1d:2b:4d:0f:e1:37:84:88:
         2d:83:55:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org