Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/3138372e37332e3132382e302f32302d3234203d3e203238353736.roa
File:                     3138372e37332e3132382e302f32302d3234203d3e203238353736.roa (raw, json)
Hash identifier:          QTL9VfEfU1tOOMbqGe9n6uSnFrX5dDw9B1oYTo4tOZo=
Subject key identifier:   82:8C:9E:66:86:64:8A:A2:94:DC:21:A3:3C:EC:A8:4C:2C:B5:C2:87
Certificate issuer:       /CN=0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134
Certificate serial:       5738268D4046DFBA89F12168BC474AD58EED850C
Authority key identifier: 0D:2F:1A:C4:20:6F:6E:2C:C7:92:6E:DC:A9:F1:8D:2E:87:51:61:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/3138372e37332e3132382e302f32302d3234203d3e203238353736.roa
Signing time:             Wed 03 Apr 2024 18:30:39 +0000
ROA not before:           Wed 03 Apr 2024 18:25:39 +0000
ROA not after:            Wed 02 Apr 2025 18:30:39 +0000
asID:                     28576
IP address blocks:        187.73.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:38:26:8d:40:46:df:ba:89:f1:21:68:bc:47:4a:d5:8e:ed:85:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134
        Validity
            Not Before: Apr  3 18:25:39 2024 GMT
            Not After : Apr  2 18:30:39 2025 GMT
        Subject: CN=828C9E6686648AA294DC21A33CECA84C2CB5C287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:cc:e9:cf:1e:76:a0:e9:a3:65:28:5a:07:
                    ce:77:25:1a:b0:c3:47:05:c0:3c:77:cd:1e:12:90:
                    bb:cd:f3:fb:61:c4:bb:b7:76:5f:dc:65:65:08:df:
                    b4:5c:b3:87:82:05:5d:e7:aa:3c:00:c4:85:fa:34:
                    00:12:fb:8f:0c:b5:a1:3d:c7:e4:2b:24:b4:3b:e5:
                    67:97:13:23:01:38:c1:7b:02:af:f8:b6:e2:91:46:
                    d8:49:41:0d:a2:5a:b6:ab:1a:6e:8d:a4:e1:29:cd:
                    7d:5e:3d:8e:0a:32:69:bf:13:bc:ce:e8:7c:be:f3:
                    dd:95:c4:01:c0:7b:20:15:f8:7a:21:16:a6:ba:26:
                    37:f6:79:69:4d:49:d0:5c:5c:8b:40:cd:c2:a5:32:
                    00:a8:b5:bc:62:1c:66:00:4a:c1:ac:5d:6b:f3:fd:
                    71:ab:92:3c:29:0d:1f:d3:d1:b9:64:cd:a1:80:6f:
                    cf:fb:8a:ae:70:56:93:3d:e3:a0:a5:67:11:f3:9f:
                    e1:91:cb:ed:27:35:3d:5b:3b:bd:da:a6:8e:81:da:
                    a0:f4:5b:1e:c6:f1:83:91:dc:73:f5:cd:80:21:89:
                    aa:96:31:a2:32:de:f3:21:0f:2a:0c:ff:37:d0:c0:
                    41:71:df:5d:e7:ed:ca:e0:85:95:d7:cf:67:e7:ed:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8C:9E:66:86:64:8A:A2:94:DC:21:A3:3C:EC:A8:4C:2C:B5:C2:87
            X509v3 Authority Key Identifier:
                keyid:0D:2F:1A:C4:20:6F:6E:2C:C7:92:6E:DC:A9:F1:8D:2E:87:51:61:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D2F1AC4206F6E2CC7926EDCA9F18D2E87516134.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/1/3138372e37332e3132382e302f32302d3234203d3e203238353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c4:eb:26:c8:34:7e:68:16:00:c4:2f:fc:eb:1d:96:eb:ee:48:
         b9:f1:f1:86:04:23:32:77:b3:6b:23:58:fa:a9:f4:d6:47:15:
         cc:8a:b9:28:f4:c4:04:45:3f:c8:ed:1d:fc:14:95:49:ce:df:
         06:b3:27:fe:50:15:ff:8a:f9:6f:a6:ae:80:29:18:24:da:ab:
         0f:ab:45:5b:a3:2a:e1:12:37:38:2f:6f:5b:b3:40:8a:56:10:
         92:28:dd:53:8e:a5:01:70:c1:23:70:f7:e4:89:61:e8:f0:cb:
         93:ac:63:b5:e8:ba:0b:0d:2d:37:95:87:f9:0f:8e:c7:0a:a5:
         20:ee:ee:b2:5b:70:9a:f7:de:82:7a:21:e7:87:67:67:62:03:
         a0:f0:a9:d0:8d:5b:09:e5:49:90:b8:c5:80:01:39:25:9b:dd:
         86:05:36:03:aa:ac:1a:43:b7:d1:c7:a8:2a:df:58:81:d5:17:
         c1:0f:7c:2d:f7:36:89:36:6e:80:25:41:8d:ea:8b:af:9d:49:
         12:f1:cb:12:7b:8d:5f:a7:28:49:9a:bc:77:50:ac:c3:2a:06:
         09:80:c9:13:b1:11:2e:1f:32:f0:5e:f1:de:32:28:97:41:6d:
         a6:c5:fa:9b:a9:4f:53:2f:cf:16:63:0e:59:45:6c:43:aa:5a:
         27:01:16:13
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVzgmjUBG37qJ8SFovEdK1Y7thQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQyRjFBQzQyMDZGNkUyQ0M3OTI2RURDQTlGMThEMkU4
NzUxNjEzNDAeFw0yNDA0MDMxODI1MzlaFw0yNTA0MDIxODMwMzlaMDMxMTAvBgNV
BAMTKDgyOEM5RTY2ODY2NDhBQTI5NERDMjFBMzNDRUNBODRDMkNCNUMyODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaMzpzx52oOmjZShaB853JRqw
w0cFwDx3zR4SkLvN8/thxLu3dl/cZWUI37Rcs4eCBV3nqjwAxIX6NAAS+48MtaE9
x+QrJLQ75WeXEyMBOMF7Aq/4tuKRRthJQQ2iWrarGm6NpOEpzX1ePY4KMmm/E7zO
6Hy+892VxAHAeyAV+HohFqa6Jjf2eWlNSdBcXItAzcKlMgCotbxiHGYASsGsXWvz
/XGrkjwpDR/T0blkzaGAb8/7iq5wVpM946ClZxHzn+GRy+0nNT1bO73apo6B2qD0
Wx7G8YOR3HP1zYAhiaqWMaIy3vMhDyoM/zfQwEFx313n7crghZXXz2fn7QFhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgoyeZoZkiqKU3CGjPOyoTCy1wocwHwYDVR0j
BBgwFoAUDS8axCBvbizHkm7cqfGNLodRYTQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0NHV0x1YW1XQlJTWnJ6eUFWZzZyd1BhOGQ2NWhvN2FnNEY5Wnl4WkJj
NU4vMS8wRDJGMUFDNDIwNkY2RTJDQzc5MjZFRENBOUYxOEQyRTg3NTE2MTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBEMkYxQUM0MjA2RjZFMkND
NzkyNkVEQ0E5RjE4RDJFODc1MTYxMzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdDR1dMdWFtV0JSU1pyenlBVmc2cndQYThkNjVobzdhZzRGOVp5eFpCYzVOLzEv
MzEzODM3MmUzNzMzMmUzMTMyMzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzUzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEu0mAMA0GCSqGSIb3DQEBCwUAA4IBAQDE6ybINH5o
FgDEL/zrHZbr7ki58fGGBCMyd7NrI1j6qfTWRxXMirko9MQERT/I7R38FJVJzt8G
syf+UBX/ivlvpq6AKRgk2qsPq0VboyrhEjc4L29bs0CKVhCSKN1TjqUBcMEjcPfk
iWHo8MuTrGO16LoLDS03lYf5D47HCqUg7u6yW3Ca996CeiHnh2dnYgOg8KnQjVsJ
5UmQuMWAATklm92GBTYDqqwaQ7fRx6gq31iB1RfBD3wt9zaJNm6AJUGN6ouvnUkS
8csSe41fpyhJmrx3UKzDKgYJgMkTsREuHzLwXvHeMiiXQW2mxfqbqU9TL88WYw5Z
RWxDqlonARYT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org