Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35302e302f32332d3233203d3e203238333532.roa
File:                     3138372e302e35302e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          aPQOibGNO0bykk0dE6s4li4mtGAXLpfidaho55iBesE=
Subject key identifier:   6E:E4:85:97:67:3B:E2:9D:F0:B2:4D:B1:CC:CD:CE:CE:8B:E9:91:44
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       13D2AABD4C793604EC49F2028885D38B2C9290AD
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35302e302f32332d3233203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:57 +0000
ROA not before:           Fri 13 Oct 2023 14:31:57 +0000
ROA not after:            Fri 11 Oct 2024 14:36:57 +0000
asID:                     28352
IP address blocks:        187.0.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d2:aa:bd:4c:79:36:04:ec:49:f2:02:88:85:d3:8b:2c:92:90:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:57 2023 GMT
            Not After : Oct 11 14:36:57 2024 GMT
        Subject: CN=6EE48597673BE29DF0B24DB1CCCDCECE8BE99144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e1:a8:8c:ca:52:4d:59:6c:c7:7f:41:6d:67:
                    7e:e9:b4:33:04:c6:8b:33:05:e1:79:35:24:bc:ea:
                    9b:ca:fa:5a:95:59:97:50:ba:16:e0:47:72:07:60:
                    9c:37:d9:03:7a:c5:ba:ee:e9:3f:6e:71:ca:a4:d9:
                    e9:62:4c:e1:7e:03:14:86:eb:02:a9:0b:68:e3:0a:
                    95:4f:a1:bc:c9:85:a5:84:b0:5a:ed:25:4d:55:a2:
                    b8:39:7e:93:6e:16:7b:f5:88:3d:60:64:35:98:a4:
                    c7:ef:67:85:04:6a:7a:86:3b:d5:54:9b:80:66:88:
                    91:d3:e8:c2:c0:da:62:d4:c9:b1:06:7b:3b:e8:52:
                    e4:6c:6b:70:f2:bf:3e:d5:90:d1:8a:b2:e2:ee:03:
                    97:04:9f:7e:47:e1:8e:c0:f1:18:f5:6e:72:6c:cb:
                    bc:38:7d:8c:d9:5a:3b:28:37:e4:82:94:cb:5b:a6:
                    b3:76:ab:8d:04:87:9e:52:4f:1c:3b:c8:6a:1c:55:
                    66:0e:46:2c:67:5c:ca:46:63:35:d2:ce:ce:4a:5d:
                    3b:0e:02:43:f9:e4:ed:d8:17:81:f2:48:4f:fb:3e:
                    e6:60:41:88:f9:b8:82:a5:92:fe:8d:27:a6:16:a0:
                    d6:d0:71:8a:d4:66:85:95:93:96:37:bf:e7:6e:38:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E4:85:97:67:3B:E2:9D:F0:B2:4D:B1:CC:CD:CE:CE:8B:E9:91:44
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35302e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:c2:d8:15:35:28:3e:36:a0:83:23:48:f4:17:6e:07:aa:34:
         6c:10:7a:e7:9c:84:fd:ee:ed:57:e0:8b:cc:c4:86:1e:f1:bd:
         32:c7:1e:5d:4e:54:a3:47:84:50:29:4f:7c:e6:b2:ba:0c:91:
         03:11:12:2f:a3:ba:4e:b4:4d:97:54:5b:8d:45:ec:75:d8:de:
         99:cc:c6:56:d6:7f:cd:6e:a8:63:7f:55:f2:cf:df:d7:b5:d4:
         3b:09:0c:7e:91:6f:78:c1:57:92:a2:f1:0c:84:53:fc:61:30:
         5b:5b:95:55:1f:01:c4:81:7a:b0:cc:37:8a:ac:dd:c1:85:59:
         68:fa:b4:42:d2:f1:98:57:ee:37:7e:a7:83:98:76:00:ff:2f:
         b7:46:5f:37:80:9d:98:38:c8:4a:f9:c1:0f:1a:da:a3:ca:43:
         5d:2d:0a:a1:92:89:62:cd:f9:e9:22:7f:64:5c:93:a5:0f:b6:
         36:e0:94:06:fe:57:a0:6d:b7:9d:bf:fe:33:7f:f1:46:da:b7:
         83:98:bb:1b:bd:dd:4d:56:79:47:b7:4e:0f:35:d8:0c:d3:5b:
         b9:b4:15:82:7f:67:17:84:4d:aa:d1:50:5c:ca:0e:81:5e:6d:
         88:ca:eb:16:7f:cd:23:3d:4f:74:b3:fb:77:d5:e7:61:76:b9:
         e4:05:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org