Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32332d3233203d3e203238333532.roa
File:                     3138372e302e36302e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          6DGyYd2KYNdGvc8SOzFIkAFTRRKrRlwXflriuriesX0=
Subject key identifier:   30:9D:4C:D1:3F:EA:FD:03:F9:A5:79:FD:60:64:1B:7A:7E:88:FC:A7
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       43EBD3983F3D0F47B74A542CF25F7274E1F4E694
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32332d3233203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:57 +0000
ROA not before:           Fri 13 Oct 2023 14:31:57 +0000
ROA not after:            Fri 11 Oct 2024 14:36:57 +0000
asID:                     28352
IP address blocks:        187.0.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:eb:d3:98:3f:3d:0f:47:b7:4a:54:2c:f2:5f:72:74:e1:f4:e6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:57 2023 GMT
            Not After : Oct 11 14:36:57 2024 GMT
        Subject: CN=309D4CD13FEAFD03F9A579FD60641B7A7E88FCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:37:06:66:67:2b:25:de:f4:8a:a7:bf:87:92:
                    f5:3e:19:7c:e3:8f:64:72:8d:e0:c5:69:34:1d:89:
                    7d:7c:e8:8b:b0:ea:23:63:0a:fd:f8:fa:cb:38:5e:
                    e3:02:4d:04:62:53:72:f4:c8:6e:36:1a:ec:20:e2:
                    ec:26:03:14:63:63:ee:a6:42:53:cf:60:8e:23:a8:
                    fc:19:08:58:3b:3a:db:1f:d7:9c:49:ac:48:6e:b5:
                    3a:2c:c6:c2:2e:af:f4:5d:0f:b2:6b:47:4c:46:47:
                    0f:83:2c:f0:1a:75:69:a4:a7:cc:c9:bd:18:98:06:
                    69:30:38:76:3e:5c:53:3d:d6:d8:2a:86:f4:45:0a:
                    fe:e3:14:fd:69:43:42:19:dc:6f:92:71:85:d4:35:
                    8e:54:24:c9:e3:1a:fe:4e:10:e4:d6:91:07:69:c2:
                    25:2a:95:63:8c:81:2e:09:aa:36:a0:24:28:f9:61:
                    03:3e:a0:c3:07:e0:3e:e3:cd:1c:9e:5a:52:b1:2a:
                    81:ed:90:af:ee:60:d5:ab:5a:a6:31:2b:e5:19:93:
                    74:dc:32:c1:9b:15:fb:cb:b3:63:27:9c:bb:84:95:
                    87:51:0c:73:4e:4c:47:0d:b1:d5:22:e5:2d:e5:d8:
                    c7:e5:14:ed:5e:77:35:95:fb:ab:19:d3:08:c1:e3:
                    c8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9D:4C:D1:3F:EA:FD:03:F9:A5:79:FD:60:64:1B:7A:7E:88:FC:A7
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36302e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:70:9d:d6:90:e7:62:7e:30:3a:19:f1:25:8a:b5:14:05:78:
         b8:3e:d0:fd:47:0b:8f:4e:8a:bb:b2:24:47:69:b8:a0:18:4f:
         b4:e1:5e:32:9e:11:3d:fe:a8:08:09:56:39:4b:8b:c2:10:76:
         3d:7e:3a:ba:af:82:b7:79:35:34:2b:0d:96:47:3a:73:d2:cb:
         9e:97:ec:8a:4d:c0:d9:3d:b3:a6:f8:be:19:78:fa:66:e2:d1:
         54:7d:fd:e9:b2:11:96:dc:db:c9:cf:92:d5:b1:df:b0:ea:fb:
         a6:30:b3:a6:52:96:89:68:12:a9:e4:c0:96:af:ee:bf:5d:b7:
         67:f0:69:c3:ec:0f:20:8c:01:38:e5:31:91:45:bc:f4:a2:10:
         e0:e5:5f:95:87:49:9d:a0:e3:9e:e5:3f:22:72:f0:7d:7d:86:
         e2:8a:e7:02:cf:f2:2c:c2:32:4d:31:fa:02:66:0d:92:72:8f:
         6d:df:13:c1:7d:32:b0:4d:3a:b3:44:52:cf:9c:ca:6c:d5:fb:
         56:71:8a:73:1e:5d:61:6b:ed:c3:42:58:38:39:4a:2e:0d:b9:
         ab:de:f0:28:eb:d0:22:9c:af:9b:7b:ef:a1:d4:d9:56:c6:2d:
         2c:c1:65:54:8a:d4:42:ab:71:aa:0b:55:f7:4c:dd:8c:76:01:
         40:e1:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org