Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e34382e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          Z66l9syrObjsry+UYMN2Ieo5NS5zJIsw4gdmkgvJZ50=
Subject key identifier:   44:DF:D7:F7:A4:15:20:42:83:24:28:D5:E2:96:EA:5E:49:A4:5B:8F
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       6CA55BEB9418CB16B4BDCE3620FBA6978D161410
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32342d3234203d3e203238333532.roa
Signing time:             Wed 20 Dec 2023 18:53:34 +0000
ROA not before:           Wed 20 Dec 2023 18:48:34 +0000
ROA not after:            Wed 18 Dec 2024 18:53:34 +0000
asID:                     28352
IP address blocks:        187.0.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a5:5b:eb:94:18:cb:16:b4:bd:ce:36:20:fb:a6:97:8d:16:14:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Dec 20 18:48:34 2023 GMT
            Not After : Dec 18 18:53:34 2024 GMT
        Subject: CN=44DFD7F7A4152042832428D5E296EA5E49A45B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:d8:cf:ec:49:95:12:2c:68:8e:32:ea:b6:
                    2a:dd:71:9e:56:55:fb:6c:9b:bc:0f:02:e5:a5:85:
                    03:d5:07:76:08:dc:ca:40:27:d3:bb:89:67:c6:df:
                    62:18:bb:ec:3a:1c:b9:74:ff:bc:17:b1:2b:2b:18:
                    75:af:15:64:51:54:b0:12:f0:bf:36:4a:05:dd:7a:
                    8f:1c:67:06:a2:b0:d1:76:40:73:29:e0:c1:ad:8d:
                    ad:05:9a:bb:1a:b5:14:a6:63:b8:5d:05:90:8e:c9:
                    5f:66:02:02:af:5e:90:21:bc:c1:f2:9c:1b:3e:00:
                    73:9e:17:c5:d7:e9:99:57:4b:c2:dc:76:ee:15:9c:
                    c3:5c:c3:a2:e0:59:69:0d:9c:4e:06:59:47:b6:0b:
                    12:52:48:f5:cc:b8:b2:3a:1e:64:96:da:4d:28:3d:
                    5a:a4:57:da:a1:33:25:66:76:c7:92:56:7b:b3:5c:
                    28:9f:11:d2:94:35:0b:fe:71:20:40:b0:bc:1a:fc:
                    b1:c3:56:90:14:8e:d4:7e:73:c3:56:11:40:60:e0:
                    27:1c:f3:c7:63:a4:16:ac:8c:f3:d5:84:be:5b:05:
                    bd:8b:93:4a:f7:96:bd:21:ba:f9:87:d3:82:af:a1:
                    b5:f5:af:c6:a6:83:59:4a:7d:8f:9d:57:2d:d6:04:
                    bd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DF:D7:F7:A4:15:20:42:83:24:28:D5:E2:96:EA:5E:49:A4:5B:8F
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e34382e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:6a:4e:e5:ae:87:f5:dc:40:d2:44:db:86:07:51:e2:d0:cb:
         25:6e:96:9a:15:1f:70:7b:a9:5c:e0:2a:c8:ec:07:83:f1:ab:
         50:20:57:e3:67:95:03:1a:e5:1f:6a:1e:9c:ae:57:83:53:28:
         19:f0:a4:9b:68:01:91:8f:d0:96:03:8a:9f:51:ce:fc:8f:98:
         4d:6b:bf:00:8c:1c:30:8a:9a:a9:87:93:bb:88:73:48:61:2e:
         64:0e:e6:f0:7c:de:e9:e6:c3:be:e4:df:5a:45:46:9d:01:9d:
         4b:5e:42:ce:92:38:64:ab:48:50:a1:54:08:94:97:a8:61:4c:
         9f:4f:ea:08:33:88:c2:bc:b0:a0:98:3a:08:16:34:b9:6c:58:
         01:a2:84:93:36:13:23:ba:26:b0:2d:d5:f0:ac:bc:0d:13:d2:
         e2:12:83:b6:b0:18:80:6c:13:18:06:43:69:50:db:dc:ad:33:
         7b:e9:b3:c7:3a:97:f7:86:df:5b:86:98:d4:34:68:e6:05:b9:
         3d:10:6c:fc:01:83:8f:56:8a:19:1a:d2:5f:c0:86:ca:b8:dc:
         0e:64:02:98:c3:5b:c9:7c:30:2a:e1:b1:3a:4d:0b:b3:86:30:
         87:f9:ca:4d:6c:9a:bc:ba:90:af:ba:12:6c:0e:a7:19:30:c3:
         bd:09:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org