Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e31362e3232342e302f32302d3234203d3e20323632393037.roa
File:                     3138372e31362e3232342e302f32302d3234203d3e20323632393037.roa (raw, json)
Hash identifier:          yh4ZVYQNYTB2YY21qPCvJ60wq8uZaf5v8s1dquCEqD4=
Subject key identifier:   14:1B:CD:4A:CD:6B:BB:D7:20:3A:C8:7A:63:A5:6E:99:1A:C5:B5:53
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       70CE3261DB610E4CC2BE68C52702905379016CC1
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e31362e3232342e302f32302d3234203d3e20323632393037.roa
Signing time:             Sat 03 Feb 2024 12:53:23 +0000
ROA not before:           Sat 03 Feb 2024 12:48:23 +0000
ROA not after:            Sat 01 Feb 2025 12:53:23 +0000
asID:                     262907
IP address blocks:        187.16.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ce:32:61:db:61:0e:4c:c2:be:68:c5:27:02:90:53:79:01:6c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:23 2024 GMT
            Not After : Feb  1 12:53:23 2025 GMT
        Subject: CN=141BCD4ACD6BBBD7203AC87A63A56E991AC5B553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b3:0f:18:46:f0:6c:ce:be:13:35:31:9f:f7:
                    6a:26:8e:1e:c8:32:05:56:3f:53:62:bb:da:8c:8f:
                    1c:12:59:fe:13:0c:ec:5e:d6:f1:a3:96:2f:d6:c0:
                    0c:73:52:4c:56:62:72:0c:49:c0:79:97:7a:2b:61:
                    1e:69:bb:4e:45:ab:0a:ac:75:5f:31:ae:c2:39:d6:
                    cf:71:f3:28:1c:ff:fa:6a:63:5f:76:15:5a:05:82:
                    ef:fc:83:59:51:2a:fd:98:29:f3:01:dd:d6:87:ba:
                    ff:28:47:11:c6:d6:03:0f:d9:57:cd:84:90:8b:f0:
                    08:a9:cd:27:d8:7a:e5:6b:2d:2d:ec:f9:78:e4:5b:
                    c2:2c:a4:8b:21:3f:f4:35:1e:1e:06:05:17:99:91:
                    1e:de:3e:a1:18:ba:43:d4:6a:fc:96:39:e5:f5:4c:
                    bb:b0:f2:0d:99:8f:6c:d5:f8:af:fb:f6:82:3b:4d:
                    da:33:4c:0c:b3:be:ad:c3:a5:97:70:3b:4b:c4:6c:
                    1b:54:f1:0f:b6:de:91:c3:1d:94:b2:fa:6d:d0:4c:
                    32:44:5e:41:56:74:ce:04:e5:23:e8:f8:44:c9:8a:
                    8e:d1:e1:33:11:f1:ef:5b:23:b3:bc:37:16:37:5f:
                    a2:31:1c:f7:4e:05:a0:ac:1d:ad:1e:3c:49:0e:f9:
                    23:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1B:CD:4A:CD:6B:BB:D7:20:3A:C8:7A:63:A5:6E:99:1A:C5:B5:53
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138372e31362e3232342e302f32302d3234203d3e20323632393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:c2:6e:11:5b:55:58:c7:11:b4:a2:d3:59:db:71:06:85:3a:
         c2:2a:86:44:34:60:3e:0f:b5:84:8a:a4:3b:82:b2:52:39:11:
         70:01:d6:b3:93:ac:f2:2a:63:99:4e:6e:e9:e8:91:28:ce:b7:
         1f:2b:87:38:62:2b:c1:4e:4b:4c:6e:c1:91:eb:5f:81:e3:06:
         40:8f:55:8a:c9:0a:f9:ab:15:80:c3:a1:e2:51:6f:af:08:ae:
         05:1d:09:ee:04:83:d9:74:d1:e8:56:d8:c3:fa:e4:98:be:d5:
         5a:52:8b:e3:16:23:ec:0a:b5:ed:db:8c:e3:cb:00:2b:b2:66:
         79:68:e2:d6:26:22:dd:c1:88:5c:bb:91:f8:34:c0:df:85:a1:
         d0:fe:59:ee:8c:e4:a2:05:cc:a0:20:b3:b4:d3:51:8c:33:02:
         8f:cf:4b:1a:be:17:a2:b3:3d:e0:55:b1:e3:0e:a0:5a:6e:b0:
         a9:ac:40:be:cc:d7:d3:ab:63:2e:54:e8:cb:07:f2:02:7f:53:
         84:6a:99:6c:04:44:3f:37:dd:a1:2d:12:73:3b:3f:f2:4f:cf:
         4e:32:23:42:53:17:56:9b:81:59:ea:e1:69:31:79:88:db:a9:
         54:3c:74:76:a9:06:e4:3c:ff:be:dc:5a:97:c8:db:83:ca:ab:
         73:2a:e2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org