Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/1/3138372e3130322e31362e302f32302d3234203d3e203533303934.roa
File:                     3138372e3130322e31362e302f32302d3234203d3e203533303934.roa (raw, json)
Hash identifier:          jTopiiYl418L7IlYhXQFhOGT99AaFjfYOdWg1CAQFPE=
Subject key identifier:   2A:00:27:09:2C:9C:B9:4A:76:07:CF:EE:05:EA:E5:85:DE:DB:A4:BB
Certificate issuer:       /CN=CFE268146F94B25E5775F1EEA7547C0D76B04F44
Certificate serial:       7D2FAF281689763244B382C0FF0177938EB55003
Authority key identifier: CF:E2:68:14:6F:94:B2:5E:57:75:F1:EE:A7:54:7C:0D:76:B0:4F:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFE268146F94B25E5775F1EEA7547C0D76B04F44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/1/3138372e3130322e31362e302f32302d3234203d3e203533303934.roa
Signing time:             Fri 05 Apr 2024 19:43:39 +0000
ROA not before:           Fri 05 Apr 2024 19:38:39 +0000
ROA not after:            Fri 04 Apr 2025 19:43:39 +0000
asID:                     53094
IP address blocks:        187.102.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2f:af:28:16:89:76:32:44:b3:82:c0:ff:01:77:93:8e:b5:50:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFE268146F94B25E5775F1EEA7547C0D76B04F44
        Validity
            Not Before: Apr  5 19:38:39 2024 GMT
            Not After : Apr  4 19:43:39 2025 GMT
        Subject: CN=2A0027092C9CB94A7607CFEE05EAE585DEDBA4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:77:d7:3f:da:3a:38:76:b8:29:7c:3a:bd:14:
                    22:d7:01:b8:2d:80:6d:b7:76:cb:11:cf:d9:17:e1:
                    ad:3d:b0:3d:63:01:87:18:f3:cb:85:e0:7c:2c:ba:
                    e9:d3:9b:5f:27:6c:53:ff:0d:40:35:84:32:a4:83:
                    21:72:fe:28:77:de:61:3e:a2:ba:b1:c4:72:ed:91:
                    f6:13:ad:4d:81:26:07:c0:f8:1b:20:49:fb:4f:81:
                    16:45:17:e4:a9:f3:d9:b0:b9:f5:ff:68:52:76:32:
                    56:2f:58:b2:c3:6b:f1:d6:72:75:a1:e5:20:b5:64:
                    98:7a:10:55:c3:eb:8e:56:e0:c2:60:74:b9:2e:f5:
                    5d:27:dc:e3:5b:91:8c:2f:e1:63:fa:40:78:4f:0b:
                    92:4d:60:7b:1d:9e:b0:d2:a5:99:72:31:84:ae:c1:
                    08:25:6e:fc:d8:50:2e:98:61:30:95:3e:c6:3b:df:
                    4d:f7:8e:59:cc:c1:81:3b:dc:56:df:dc:9c:c8:d3:
                    20:ac:4d:47:d5:39:d7:a2:fe:07:98:83:1e:f2:d2:
                    f5:31:1b:b2:0a:2c:27:d4:5f:2c:b8:d9:5b:dc:19:
                    79:b8:87:6c:19:83:0b:b7:d2:cb:bf:1e:03:01:b7:
                    24:a5:81:d0:a8:4a:fe:70:6a:2a:8e:5e:f1:0f:69:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:00:27:09:2C:9C:B9:4A:76:07:CF:EE:05:EA:E5:85:DE:DB:A4:BB
            X509v3 Authority Key Identifier:
                keyid:CF:E2:68:14:6F:94:B2:5E:57:75:F1:EE:A7:54:7C:0D:76:B0:4F:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/1/CFE268146F94B25E5775F1EEA7547C0D76B04F44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFE268146F94B25E5775F1EEA7547C0D76B04F44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/1/3138372e3130322e31362e302f32302d3234203d3e203533303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:c7:11:c0:17:23:e9:ea:26:95:b7:fb:ae:ea:f3:ab:c9:32:
         aa:50:a1:59:5f:b7:ea:50:85:65:71:ee:dd:62:b6:2e:28:ee:
         05:e1:4f:6e:8a:7c:b1:22:65:62:62:49:b0:57:0b:23:b1:3c:
         10:1d:8e:50:f4:ce:12:98:c7:e8:43:5f:fa:ce:a0:02:b1:58:
         88:41:f5:a0:05:30:11:cd:ee:ad:66:9e:c3:80:f4:1d:1f:b3:
         e1:2f:85:ff:5c:18:f3:ee:bf:05:6e:c8:b0:05:a6:aa:32:52:
         68:09:54:3b:64:5b:7a:56:47:0f:95:cc:89:4a:d0:de:11:97:
         fc:34:3e:a7:6c:28:9b:b7:cc:f4:dd:3e:e0:66:dd:f6:c2:e2:
         fd:b8:04:02:68:22:63:52:04:32:4d:32:cf:17:88:34:6f:65:
         87:3b:94:aa:6f:2d:96:8e:56:43:aa:7a:a2:91:2a:f8:1b:18:
         5f:c4:f2:06:fa:21:b6:5a:fe:79:24:d9:2f:b2:09:f9:7b:b8:
         8f:85:a3:ed:be:c1:a1:e8:78:f0:1e:1b:2c:d4:1b:fc:d4:44:
         40:9c:fb:b5:1e:fc:cd:a3:94:c7:68:10:f6:59:1e:37:a4:b7:
         a5:8c:31:3d:12:5a:83:85:1d:a7:1b:73:23:d4:28:2e:da:1f:
         dc:2d:2b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org