Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35322e302f32322d3232203d3e203238333532.roa
File:                     3138372e302e35322e302f32322d3232203d3e203238333532.roa (raw, json)
Hash identifier:          HC4LYCuAlMuSr6Y8o4jtx/Fure8sn56mEUHfQX+9N38=
Subject key identifier:   63:A7:54:1B:3E:42:FC:C1:D9:30:68:5B:50:A8:7F:FE:98:05:5D:C5
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       3CDC7DDD9F42B6B3316CF6B9B938AAACB9A33B14
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35322e302f32322d3232203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:53 +0000
ROA not before:           Fri 13 Oct 2023 14:31:53 +0000
ROA not after:            Fri 11 Oct 2024 14:36:53 +0000
asID:                     28352
IP address blocks:        187.0.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:dc:7d:dd:9f:42:b6:b3:31:6c:f6:b9:b9:38:aa:ac:b9:a3:3b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:53 2023 GMT
            Not After : Oct 11 14:36:53 2024 GMT
        Subject: CN=63A7541B3E42FCC1D930685B50A87FFE98055DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:ce:3d:3d:fe:eb:4c:ae:63:97:33:7f:bf:
                    bc:23:bd:de:bc:a6:d8:59:6f:64:93:de:d4:c6:36:
                    96:4b:97:07:47:21:6b:ab:1d:82:5a:d1:a8:35:fb:
                    1f:7c:17:23:26:64:21:ee:58:29:bd:48:30:c3:d0:
                    be:c8:05:d4:38:c3:04:96:21:0e:83:a2:72:b2:2a:
                    4d:58:33:43:5f:c4:a4:c4:29:08:16:98:83:06:3a:
                    58:44:56:6f:17:76:19:08:f2:2f:7a:28:9d:88:d6:
                    1b:ac:77:86:8e:6e:40:e1:cd:b6:2f:cd:89:32:13:
                    9d:07:12:e8:71:b8:9a:27:05:0c:14:0a:a7:6f:52:
                    19:44:92:31:25:bc:ca:2f:e8:28:b2:f3:ae:0f:ad:
                    dc:7a:e8:f4:c9:dc:17:7f:df:69:8b:75:a7:ad:ba:
                    b1:17:0a:a3:f0:22:11:33:9e:ac:82:91:27:1d:0b:
                    9c:3c:eb:20:43:c7:76:c6:26:58:36:6b:98:1f:0f:
                    f2:71:42:be:98:f7:94:8b:00:d2:8d:d8:46:41:3c:
                    3a:18:83:1b:bc:f9:03:c1:ff:b7:4b:cf:fd:75:7b:
                    e6:ee:43:77:75:72:db:d1:89:cf:51:4b:8f:f4:d0:
                    d6:b9:47:45:d0:0f:d3:39:84:ca:31:b0:c5:f1:ee:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A7:54:1B:3E:42:FC:C1:D9:30:68:5B:50:A8:7F:FE:98:05:5D:C5
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35322e302f32322d3232203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:0e:14:4a:33:66:5c:c9:08:9b:76:8f:fe:85:9f:05:47:
         c6:dd:27:16:c0:d5:d4:74:b0:21:fc:b1:ae:2f:8c:b0:e4:3e:
         e5:fa:ba:ad:1a:87:96:80:fb:c2:4b:c2:91:f4:f9:6c:7a:a2:
         b9:93:d3:93:04:94:4c:f1:44:48:2c:20:4e:d2:ee:50:6f:cc:
         6c:89:70:39:a1:34:a7:d1:db:81:1c:d1:05:34:c2:87:d3:f2:
         81:3f:4b:cc:03:6a:63:98:d5:4a:c0:1e:2b:68:72:03:a9:0e:
         74:7c:01:02:5f:87:b4:2d:23:61:9d:05:d1:82:d0:bb:06:66:
         d4:fb:32:25:ce:0d:e9:6b:2a:f4:9f:ce:38:8f:b2:5e:a4:e2:
         8c:1e:dc:7e:a9:61:66:1b:69:40:90:4a:e8:d7:65:2b:6d:0c:
         21:eb:31:e0:24:f3:ad:57:a1:d1:d9:22:97:0f:32:e7:47:1b:
         79:21:51:e4:c6:bb:9d:ed:c5:77:01:a0:d8:c3:19:c1:63:78:
         03:e2:03:d8:b8:02:00:11:78:d2:bc:29:5e:12:e6:56:db:ef:
         fa:51:62:33:70:50:a0:46:04:4a:4a:d5:49:85:04:d4:d7:bf:
         97:c8:28:ca:a0:fd:70:42:b7:10:d7:50:4f:7e:b7:da:f6:ad:
         e9:74:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org