Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3230342e302f32332d3233203d3e203533303534.roa
File:                     3138372e37332e3230342e302f32332d3233203d3e203533303534.roa (raw, json)
Hash identifier:          YkRBr1a6vc2Ykwkg6+7lHWE+sakfRWeBOe1N7XIu3lk=
Subject key identifier:   A1:B3:81:86:DB:30:69:8A:7C:6B:CC:A1:4C:2A:65:21:21:71:9B:6C
Certificate issuer:       /CN=C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2
Certificate serial:       506514F224F06C890B872EE956B4EA7274826294
Authority key identifier: C1:46:AB:66:2C:B7:AA:07:4C:3C:FB:C2:F6:6C:C5:E5:12:8A:7F:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3230342e302f32332d3233203d3e203533303534.roa
Signing time:             Mon 08 Apr 2024 20:08:32 +0000
ROA not before:           Mon 08 Apr 2024 20:03:32 +0000
ROA not after:            Mon 07 Apr 2025 20:08:32 +0000
asID:                     53054
IP address blocks:        187.73.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:65:14:f2:24:f0:6c:89:0b:87:2e:e9:56:b4:ea:72:74:82:62:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2
        Validity
            Not Before: Apr  8 20:03:32 2024 GMT
            Not After : Apr  7 20:08:32 2025 GMT
        Subject: CN=A1B38186DB30698A7C6BCCA14C2A652121719B6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:7e:9a:b6:8b:50:c4:2a:36:56:7b:39:3e:
                    20:33:f3:7f:65:2f:d0:95:0d:64:5f:9b:4b:0f:b0:
                    80:cc:b8:56:a3:82:19:1a:10:d6:e5:17:53:85:9c:
                    05:60:3e:3a:a6:78:bf:09:99:90:e3:47:52:03:ab:
                    ed:c2:a5:b2:17:ad:86:ff:6f:23:29:a2:14:20:50:
                    05:7e:79:51:b2:b1:cc:f7:51:92:f6:31:93:c0:5e:
                    72:75:72:dd:b3:2e:a7:ea:ea:a3:f3:3d:27:c6:39:
                    11:0d:d5:29:8e:25:38:8d:88:2d:fd:1c:4d:6d:de:
                    ea:29:a8:df:67:b3:e2:f4:44:2f:be:d4:e9:08:2d:
                    c4:ef:88:c1:26:30:7d:21:01:16:94:4a:c8:4e:0d:
                    5c:26:50:71:a4:ef:61:5e:24:1a:b4:8d:09:82:a5:
                    88:b1:48:d6:db:3f:81:d8:7c:9f:7d:03:e0:8d:b9:
                    46:b8:6b:90:83:2d:85:eb:79:85:34:18:f2:a5:4b:
                    d6:db:aa:35:35:30:07:6d:3b:a2:c7:45:9a:94:1d:
                    e1:7d:02:7e:1e:78:de:83:03:bf:d9:1a:1d:28:1c:
                    e9:f3:fa:9f:27:5c:dd:92:ce:57:d5:ad:de:6a:b2:
                    d2:05:47:35:4c:f0:8d:cc:bc:3a:41:ae:e5:83:ab:
                    88:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B3:81:86:DB:30:69:8A:7C:6B:CC:A1:4C:2A:65:21:21:71:9B:6C
            X509v3 Authority Key Identifier:
                keyid:C1:46:AB:66:2C:B7:AA:07:4C:3C:FB:C2:F6:6C:C5:E5:12:8A:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C146AB662CB7AA074C3CFBC2F66CC5E5128A7FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5C3Ci2DuCC9KCqkdz17qqcWohDebZPpiAa15E1MAdnPv/1/3138372e37332e3230342e302f32332d3233203d3e203533303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         de:57:43:95:ee:33:97:ce:47:fd:c9:52:5c:e5:10:8a:e9:f9:
         df:dd:62:43:98:f0:7f:74:c2:f8:0f:bb:49:8b:f3:bc:90:e8:
         84:98:08:9f:42:4a:5d:6c:c0:c3:f9:fa:3c:10:73:97:f4:21:
         b9:0b:f8:b7:24:8f:f2:49:91:79:f1:e6:7e:70:8f:b1:83:f3:
         84:7f:6d:9e:cf:a7:19:35:ae:03:f8:bf:a2:8f:55:04:a6:1c:
         0a:90:0c:e8:27:96:3e:f8:a2:68:7d:e9:1d:0e:01:41:84:ba:
         de:32:4e:42:05:05:79:e1:4a:c3:0f:65:89:c3:e1:68:d9:4e:
         fb:68:93:55:a4:90:8a:f8:34:8d:77:24:ea:77:4a:ca:75:15:
         b1:0d:d0:98:86:42:fc:26:34:80:b3:25:f1:e2:76:e3:5f:b2:
         d8:93:02:91:8b:ff:4f:2e:ef:f9:5f:85:f6:48:75:63:f8:a6:
         ce:b6:86:5f:b7:00:7f:5c:7a:80:6b:95:34:de:21:d9:6b:1c:
         12:82:24:55:ae:11:b5:38:ac:5e:8d:d6:57:e5:ba:4f:66:33:
         8d:d3:01:de:f1:9b:47:36:6c:cd:7a:9a:78:1c:0c:22:3f:a7:
         0e:67:06:e1:a6:67:90:39:ef:bf:a1:b2:79:5d:3d:0b:7e:8c:
         5f:6f:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org