Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35322e302f32332d3233203d3e203238333532.roa
File:                     3138372e302e35322e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          Vwbj3xSL/Z673nxQP/Mus0nHteHLD2OQLg2uQnzHl50=
Subject key identifier:   F3:23:5F:5F:54:0F:5C:9B:28:CC:A8:DD:24:A9:F0:DF:38:DC:34:BE
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       4F4123B19A2A29212D5777D1B5B1DEAD9A040830
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35322e302f32332d3233203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:57 +0000
ROA not before:           Fri 13 Oct 2023 14:31:57 +0000
ROA not after:            Fri 11 Oct 2024 14:36:57 +0000
asID:                     28352
IP address blocks:        187.0.52.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:41:23:b1:9a:2a:29:21:2d:57:77:d1:b5:b1:de:ad:9a:04:08:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:57 2023 GMT
            Not After : Oct 11 14:36:57 2024 GMT
        Subject: CN=F3235F5F540F5C9B28CCA8DD24A9F0DF38DC34BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:c4:10:4f:1d:18:12:21:93:8c:df:5b:d6:
                    36:f2:67:93:c8:bb:76:d9:d5:b8:aa:87:6c:05:db:
                    80:c9:d5:8e:a9:35:32:c3:c5:14:1e:f3:3b:3f:d2:
                    37:2a:53:9a:b9:d1:2d:95:c8:e8:2d:ba:c8:92:96:
                    f4:4b:27:33:ca:88:af:a4:f1:8e:99:f1:58:16:a6:
                    09:f8:24:a4:d3:30:d5:1f:6e:e3:fb:96:03:94:55:
                    e8:af:b2:e4:41:46:34:dc:2a:ce:77:04:a1:e5:21:
                    9a:f6:56:56:7f:de:1b:ff:69:3e:fc:5a:83:89:2d:
                    1d:70:78:4e:3d:52:0d:04:84:98:ce:cb:c1:51:84:
                    0e:1e:0d:65:16:89:b5:45:c3:0f:e0:a3:76:2c:52:
                    ac:d0:18:c2:37:95:e7:59:21:f4:6c:0e:73:77:c4:
                    e0:db:87:36:24:67:ab:08:5d:25:99:56:a1:70:54:
                    41:8b:c7:70:94:8e:e7:43:da:26:ec:4b:20:8d:9a:
                    8b:a8:c7:2e:62:41:d6:a0:f6:d1:94:06:0d:69:ce:
                    d8:7a:c6:72:46:6b:a2:f0:83:b2:d5:d6:3c:5f:97:
                    d9:2a:a5:19:94:a4:3d:2a:57:05:a9:a6:c7:60:50:
                    60:98:84:5a:fd:d3:b4:c4:da:78:ac:aa:f2:6f:db:
                    03:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:23:5F:5F:54:0F:5C:9B:28:CC:A8:DD:24:A9:F0:DF:38:DC:34:BE
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35322e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:a2:b3:6d:d8:7a:79:e2:5b:5e:c1:f9:3c:1f:a9:5c:f0:9f:
         66:c5:a5:e6:c9:4e:0a:e2:32:e7:01:87:fd:88:98:d5:de:b4:
         f2:65:8d:de:81:79:31:62:14:19:7c:36:57:9f:75:a5:ca:d8:
         e1:7e:7a:68:e4:09:81:48:7e:54:a9:7e:3d:ea:68:f1:4c:3e:
         ea:51:b1:95:85:34:5b:c7:bf:a4:7e:5e:05:16:5d:2a:bb:00:
         f3:4c:bf:09:ef:01:24:dc:be:ee:33:99:15:fe:f6:09:6d:a9:
         b7:ca:b0:f4:5c:55:b0:c1:9e:a6:f9:09:b2:f1:df:a4:10:59:
         e6:39:03:74:27:f8:52:0c:c3:91:0f:b5:0f:22:7f:ee:74:59:
         37:f5:ff:41:58:18:58:a3:f0:97:fe:02:fc:ce:cf:64:bd:ce:
         36:eb:5e:eb:95:30:01:e3:86:63:b9:6a:fc:9c:5a:87:f5:f2:
         c6:75:29:ad:0d:b0:19:c3:4b:92:df:b8:04:fb:dd:e5:84:f7:
         b5:0d:69:a0:35:05:34:a2:1e:1a:a1:3d:fa:fd:d7:09:16:9c:
         bd:9f:48:60:7e:4d:76:56:d8:9a:c8:45:d1:aa:8c:44:e5:10:
         60:e8:1f:d5:ce:27:5f:cc:00:b2:63:f9:b6:b6:30:6b:d0:33:
         e5:f8:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org