Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32322d3232203d3e203238333532.roa
File:                     3138372e302e36302e302f32322d3232203d3e203238333532.roa (raw, json)
Hash identifier:          5L16rtUg+++UDrgXOVTJ32JoZDdNekKqKA7Vwi61p9E=
Subject key identifier:   BF:70:8E:C0:0D:D1:EC:18:FC:B8:74:F0:AA:84:B7:2F:E5:D2:31:F6
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       3F490BFD560B2C61265438FDABFD64C32F650A13
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32322d3232203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:57 +0000
ROA not before:           Fri 13 Oct 2023 14:31:57 +0000
ROA not after:            Fri 11 Oct 2024 14:36:57 +0000
asID:                     28352
IP address blocks:        187.0.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:49:0b:fd:56:0b:2c:61:26:54:38:fd:ab:fd:64:c3:2f:65:0a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:57 2023 GMT
            Not After : Oct 11 14:36:57 2024 GMT
        Subject: CN=BF708EC00DD1EC18FCB874F0AA84B72FE5D231F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:53:b8:e4:58:88:75:44:9d:d8:4f:2d:08:
                    1b:7d:20:91:07:2d:9e:e7:7c:14:b4:4a:5f:e0:90:
                    0f:a8:79:66:1d:c5:e7:15:1b:7b:82:af:4f:ae:2d:
                    fc:17:b9:bb:7d:c7:23:a7:42:76:bf:a0:d1:92:41:
                    64:b5:fb:7d:fd:f7:5b:c8:2d:63:b7:23:f4:b3:2f:
                    a6:04:73:32:1c:d2:37:51:4d:90:e6:dd:2e:d1:64:
                    c3:46:95:69:72:88:00:2c:f8:f0:0e:12:6c:ec:eb:
                    4a:cc:76:a5:bd:af:ac:fe:27:7e:ec:e1:23:cb:e5:
                    7c:24:fc:04:ac:3e:37:ee:91:52:f2:82:07:f7:25:
                    8b:c4:32:16:27:c7:d8:28:12:50:bc:d7:1f:e8:f2:
                    99:ea:2a:23:79:80:7f:ac:7a:d5:86:c2:d7:42:0d:
                    33:a3:1d:9b:80:d1:22:d1:32:1a:ee:72:b3:32:7f:
                    23:d5:74:f5:49:97:0f:2a:89:78:88:f1:aa:b7:05:
                    41:df:f0:ab:ed:66:92:b6:df:bc:17:e6:12:39:91:
                    6c:78:c7:c1:5c:19:f6:de:64:d9:a4:fb:bc:3f:d6:
                    a7:92:d7:7c:f5:4e:97:d4:c5:c0:ee:72:88:65:a0:
                    7f:31:53:aa:46:0c:d9:d9:01:f8:a4:df:c2:3f:98:
                    bc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:70:8E:C0:0D:D1:EC:18:FC:B8:74:F0:AA:84:B7:2F:E5:D2:31:F6
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32322d3232203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:8f:93:95:3d:23:cb:b7:a9:05:8d:bc:92:8e:f3:55:03:43:
         17:9a:91:f3:99:bf:3b:56:5f:e3:8e:a8:10:2d:33:88:57:d0:
         e4:8b:24:29:f2:fa:53:df:d6:36:86:00:9d:a6:91:a2:6f:05:
         26:fe:ad:cf:a4:c7:32:32:7f:82:b6:9b:9e:62:e1:23:34:b8:
         20:2f:d2:69:f8:59:f1:3f:26:6c:7d:26:c6:3f:60:c3:a8:3d:
         7d:02:82:c2:3b:45:48:d0:81:7a:fd:1e:51:a4:e2:e0:18:2f:
         99:4f:f3:e0:0d:03:17:52:82:71:18:0f:7c:e1:20:2e:4b:d7:
         59:64:3a:bf:1c:77:70:68:68:c0:f6:03:2b:ae:a4:65:31:ac:
         50:8d:9c:51:15:00:54:bc:84:e6:8a:2b:ca:25:b4:24:ba:3b:
         0e:6a:6c:75:2a:0a:12:b2:d9:36:92:72:28:85:2f:91:b6:e6:
         df:94:ba:8a:c1:49:a5:dd:d7:1f:f2:a0:5f:c6:4d:76:3e:4a:
         50:6f:29:68:fd:fc:b2:cf:c7:34:a0:8c:96:59:cf:2f:06:85:
         5f:fd:66:e8:65:79:8d:87:17:62:1f:a6:8b:4e:e8:9b:27:cd:
         e1:5c:a2:78:ce:36:8d:97:b2:9e:52:b7:9c:97:d1:17:00:20:
         b9:e9:f8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org