Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35362e302f32332d3233203d3e203238333532.roa
File:                     3138372e302e35362e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          a4aRqgFLMUSfex/04TkeSLrjKV09t9xiR4pQzYqlbMI=
Subject key identifier:   CE:47:D9:0A:85:B7:9C:FB:B2:76:D1:D4:17:D2:8F:ED:EF:E5:BF:A6
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       4BC594068AB19A25A8539EEC9BFA22C9D53F25B0
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35362e302f32332d3233203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:52 +0000
ROA not before:           Fri 13 Oct 2023 14:31:52 +0000
ROA not after:            Fri 11 Oct 2024 14:36:52 +0000
asID:                     28352
IP address blocks:        187.0.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c5:94:06:8a:b1:9a:25:a8:53:9e:ec:9b:fa:22:c9:d5:3f:25:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:52 2023 GMT
            Not After : Oct 11 14:36:52 2024 GMT
        Subject: CN=CE47D90A85B79CFBB276D1D417D28FEDEFE5BFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:67:f6:07:5f:6e:cf:f2:3b:76:5c:e6:fa:2b:
                    f3:24:ba:a0:e7:f2:4d:62:3d:a5:9c:13:e6:e7:f4:
                    c6:8d:54:e9:8d:ec:6c:c1:df:59:60:cd:7c:9a:90:
                    2f:99:ea:bc:95:da:68:54:6b:b8:ed:0e:75:39:22:
                    32:ce:c9:3c:27:20:a1:15:63:96:5e:bc:5b:02:68:
                    7e:c9:27:dd:df:f6:7c:60:cb:34:c4:f7:d5:a2:3a:
                    bf:9c:b6:ff:ed:62:86:2b:dc:a9:5f:25:4c:b5:91:
                    a8:16:c1:5f:0c:e4:3a:a5:7a:66:ef:37:23:69:b1:
                    f4:fc:45:da:41:08:78:a3:f5:51:cb:68:9b:ef:da:
                    ba:d7:86:d7:ce:90:12:90:a0:c1:84:88:01:e3:5f:
                    3c:f0:00:43:52:ed:0a:04:a5:2a:d3:99:be:35:ef:
                    dc:9a:28:ee:7d:5a:11:a4:8a:cf:8f:42:71:38:46:
                    9a:be:c6:79:a2:63:45:66:f9:14:e1:45:dd:37:f2:
                    e8:b1:23:ce:69:5b:34:12:34:83:31:5f:ca:30:52:
                    6d:36:ee:1d:af:fa:77:66:b3:a3:fb:8d:cf:7c:91:
                    b7:b5:ed:0d:89:7f:3c:72:24:88:42:13:89:da:16:
                    c8:93:b5:4d:5a:8d:e4:02:95:87:28:f6:56:fa:f0:
                    10:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:47:D9:0A:85:B7:9C:FB:B2:76:D1:D4:17:D2:8F:ED:EF:E5:BF:A6
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e35362e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:e3:b1:10:b1:6f:d3:48:0f:30:41:90:f3:8b:a0:be:1c:2a:
         f4:df:e6:7b:19:2c:3a:53:8d:16:20:c5:53:c1:8f:d3:90:dc:
         99:fb:1e:07:db:63:9d:6c:1b:8d:bd:eb:9d:dc:0e:1d:78:ab:
         c6:fc:8e:ef:b8:a5:a8:64:46:0e:e8:be:7d:c9:58:8d:5d:18:
         6b:b9:be:85:57:24:1a:37:0c:ff:eb:0f:f6:49:4b:a1:2a:ac:
         b8:74:da:c8:2b:c9:65:75:12:22:09:0d:1c:c7:b5:81:f9:62:
         8a:a7:1f:bb:16:0b:ca:71:78:13:6f:ca:83:43:f9:cd:3a:ad:
         f6:99:33:4a:a4:21:12:95:b0:a4:08:da:4e:a9:cb:1b:b3:82:
         0e:df:17:47:ab:cf:ca:eb:d5:49:16:8f:18:1e:e5:b0:37:a2:
         d7:98:de:92:d5:7c:90:39:12:9d:53:a9:91:f5:ce:c6:67:98:
         4c:38:f0:93:82:2f:23:17:27:bd:16:79:c2:af:d3:03:53:ee:
         ce:e8:b4:9f:10:86:36:0d:76:79:a4:3f:d1:0c:e3:2e:a8:ae:
         11:1e:8b:06:59:92:14:eb:ca:3d:7d:41:20:59:b3:47:2d:09:
         71:0b:86:a6:99:43:b4:18:b6:ce:11:88:40:58:05:6b:6c:e3:
         d6:86:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org