Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32332d3233203d3e203238333532.roa
File:                     3138372e302e34382e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          oAQLU6JNPE006t+R07VSmbJ7jMSDBW0KIOIUllkt3J8=
Subject key identifier:   C9:76:7B:F5:E1:A0:6E:D1:39:9C:2B:EB:69:F2:6F:B6:19:39:9D:AF
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       03D8E955B5132A19EF6EFC336B43089DFAF0C88B
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32332d3233203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:56 +0000
ROA not before:           Fri 13 Oct 2023 14:31:56 +0000
ROA not after:            Fri 11 Oct 2024 14:36:56 +0000
asID:                     28352
IP address blocks:        187.0.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d8:e9:55:b5:13:2a:19:ef:6e:fc:33:6b:43:08:9d:fa:f0:c8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:56 2023 GMT
            Not After : Oct 11 14:36:56 2024 GMT
        Subject: CN=C9767BF5E1A06ED1399C2BEB69F26FB619399DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:6d:6a:49:ba:c1:07:da:e2:59:56:b7:ff:
                    80:00:d7:11:c2:5c:85:2f:e6:34:cb:c6:45:5c:32:
                    a4:b6:e2:e7:f8:d0:be:ba:cc:fa:7d:c9:af:6b:69:
                    f4:aa:f0:30:55:25:3a:68:33:7f:a1:f1:c2:18:ce:
                    2e:28:6b:4a:9d:bb:c5:80:de:85:93:c6:43:0a:29:
                    a1:52:6e:48:47:1a:d0:f7:5e:06:3f:6c:3d:ac:b9:
                    bb:63:dc:99:c9:e9:dd:54:0a:2e:85:58:a2:b7:8c:
                    ad:13:20:2b:15:1a:28:d7:62:23:85:c0:1c:fd:23:
                    eb:58:cc:9b:0b:5f:77:a2:59:fa:87:3f:e6:b2:e8:
                    ac:d3:a4:27:31:41:77:81:cc:a6:28:89:33:90:e6:
                    fe:15:6c:9b:8e:06:d0:25:01:d4:8b:98:b9:29:35:
                    a1:a3:40:9c:4a:a8:99:c9:7d:e0:ca:7d:b3:3c:aa:
                    93:d8:23:5e:6f:14:8b:e4:43:68:5c:d5:55:ef:39:
                    23:53:a0:6c:d9:03:77:1f:33:d2:e5:d5:b3:92:aa:
                    da:66:ae:5e:90:2a:07:a7:cf:bb:62:cb:7b:a1:02:
                    59:a6:90:c8:aa:e5:67:b0:68:56:79:df:b7:d7:fd:
                    5b:f2:59:18:c8:8d:74:45:8d:6f:84:34:60:c8:ab:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:76:7B:F5:E1:A0:6E:D1:39:9C:2B:EB:69:F2:6F:B6:19:39:9D:AF
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:79:52:4a:b9:0c:bf:06:16:7d:32:c3:52:be:23:70:f1:7c:
         a1:e9:02:32:0f:8d:81:f9:36:85:ea:07:c7:b3:f3:9a:bb:a0:
         17:8d:94:0b:49:7c:b1:1b:3d:eb:14:59:05:65:16:ae:f8:c1:
         dc:83:35:e1:95:8a:ec:48:59:bc:bb:be:35:82:df:9d:69:7d:
         5d:3d:62:78:9f:39:b9:2b:85:b8:47:0c:24:a8:59:40:4a:bb:
         c6:7a:bf:c3:e7:64:dd:07:b3:60:64:3d:65:06:8c:b0:43:16:
         99:ee:b7:d2:f9:7a:31:df:e0:a1:26:3b:ce:be:ff:ce:fb:f1:
         66:0a:b5:80:f8:67:70:0c:d6:98:04:5b:e7:f5:c2:8b:50:eb:
         96:89:b0:d6:ba:10:f4:dd:74:4a:1d:3c:19:c5:5a:50:d2:3f:
         41:52:bd:03:99:a8:ad:8f:11:b6:25:f3:0c:62:5b:78:c1:26:
         10:5e:10:cc:b4:2e:b3:2d:ee:e1:a3:b4:e0:1a:b9:63:a4:a1:
         74:a1:2b:c8:95:db:db:a0:c8:e7:c2:5a:33:a1:51:49:35:f7:
         b7:9e:96:33:c5:48:18:17:a4:92:3d:88:c2:4f:45:be:af:cd:
         fe:2e:16:9d:75:ed:72:70:00:5e:27:4d:bd:dc:a1:8c:d3:d6:
         ab:d7:81:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org