Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3230203d3e203238333532.roa
File:                     3138372e302e34382e302f32302d3230203d3e203238333532.roa (raw, json)
Hash identifier:          8owCkSYTnc9MaFRVpgBcTMYQn+5REhyP2cQffjdSQsQ=
Subject key identifier:   86:95:5D:1D:60:64:E0:14:FD:22:C1:A9:FC:2D:50:1E:22:E3:2F:8C
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       30E6BAA07CF652F515A7B5777E3CE3857AEA5A58
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3230203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:52 +0000
ROA not before:           Fri 13 Oct 2023 14:31:52 +0000
ROA not after:            Fri 11 Oct 2024 14:36:52 +0000
asID:                     28352
IP address blocks:        187.0.48.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e6:ba:a0:7c:f6:52:f5:15:a7:b5:77:7e:3c:e3:85:7a:ea:5a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:52 2023 GMT
            Not After : Oct 11 14:36:52 2024 GMT
        Subject: CN=86955D1D6064E014FD22C1A9FC2D501E22E32F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:0e:74:db:76:d4:9f:9e:bc:3a:c1:16:f7:
                    98:f1:27:67:47:03:64:21:ac:5b:71:55:9e:0e:db:
                    16:98:0c:77:90:d6:a8:20:01:03:c3:e9:5b:06:5a:
                    df:22:1d:c1:0f:94:8f:6a:2f:37:37:c1:0c:13:1c:
                    a5:0c:5b:b0:20:9d:25:77:95:6f:58:60:35:06:8d:
                    a7:63:b6:5d:e4:99:10:e4:8d:29:86:06:e2:fe:f4:
                    25:83:7b:b6:76:87:7a:21:b5:01:8c:24:2a:0f:64:
                    64:74:25:67:5c:b6:de:a2:46:a6:03:a8:52:21:66:
                    fd:80:95:22:bb:3c:3e:09:2c:57:1b:7a:20:1d:41:
                    23:12:42:e3:7c:c9:7d:60:80:83:a3:78:e4:e9:7f:
                    88:ff:19:c7:29:2c:8c:aa:96:03:67:3c:a5:70:ee:
                    44:20:1c:eb:21:08:3c:96:b0:25:fa:0c:ff:00:2b:
                    86:64:45:58:56:dd:6e:94:0f:ec:16:5b:0f:18:43:
                    d2:65:b7:3f:17:df:cf:ad:b6:ff:a0:c0:06:d9:4d:
                    84:cf:cc:e0:11:57:5a:34:fa:27:63:4e:25:a4:c2:
                    bb:8f:07:f2:84:11:87:23:61:4c:4f:a1:c5:bd:a9:
                    a9:f9:95:09:b7:3f:ef:c5:b0:93:6a:7c:d3:1a:84:
                    b4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:95:5D:1D:60:64:E0:14:FD:22:C1:A9:FC:2D:50:1E:22:E3:2F:8C
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32302d3230203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:b9:6b:28:8a:ec:3d:20:d3:bc:5e:6a:01:9c:e2:1c:9d:80:
         03:ea:7e:5f:8b:b7:e9:af:15:7d:f7:49:18:8d:9c:17:97:e9:
         c3:88:d9:b1:4c:8c:83:62:32:e2:e9:34:8c:89:05:5a:32:0e:
         1b:20:ef:36:d3:74:82:2c:14:df:2b:69:08:a3:b8:2a:19:94:
         ae:2b:ed:28:57:c6:99:6c:e4:fe:42:b9:e4:9c:ab:46:6e:d8:
         e8:f4:4b:fd:dc:32:e2:35:b8:e6:8c:ba:86:19:cf:72:d7:8b:
         93:2f:b9:00:75:78:3f:60:11:85:43:0e:0d:6b:77:94:b2:44:
         46:e2:6e:77:19:bc:e2:d5:6a:78:d2:fb:d7:42:71:b9:87:be:
         c1:13:a7:a4:9c:7b:90:27:34:48:27:5e:d0:59:09:24:c9:a2:
         b8:a3:8d:4a:0f:70:ba:17:b3:29:96:b2:ca:ba:20:80:da:ab:
         9b:66:fe:f2:98:ea:14:68:b6:d7:a8:c2:bc:c5:8b:40:8e:61:
         89:bd:82:bf:f3:fa:ef:f3:1a:62:85:1f:8b:29:9a:bf:c7:a9:
         a9:00:a0:33:62:ea:bd:b8:4f:75:b1:9f:b5:25:3d:5c:e6:16:
         1d:f7:24:14:f9:c0:bc:ce:f0:8d:10:aa:69:ad:b9:87:9f:51:
         7d:50:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org