Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36312e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e36312e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          lS8w+tZr/BemDmDCIZirvXfISlN+/mbucqYu0r2vtMo=
Subject key identifier:   9F:79:2E:A2:F4:88:1D:3C:99:76:03:AE:9F:0D:AB:8B:1F:65:D1:50
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       0282FBE35F8BE3021A44AA9646473F8C83FC6C03
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36312e302f32342d3234203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:52 +0000
ROA not before:           Fri 13 Oct 2023 14:31:52 +0000
ROA not after:            Fri 11 Oct 2024 14:36:52 +0000
asID:                     28352
IP address blocks:        187.0.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:82:fb:e3:5f:8b:e3:02:1a:44:aa:96:46:47:3f:8c:83:fc:6c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:52 2023 GMT
            Not After : Oct 11 14:36:52 2024 GMT
        Subject: CN=9F792EA2F4881D3C997603AE9F0DAB8B1F65D150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:70:a0:23:fc:32:c0:a8:83:6b:2d:a6:a7:
                    e1:17:d9:37:e0:60:58:ed:ec:78:0e:8a:b6:5e:8f:
                    54:40:26:c0:4a:83:25:f4:d4:8f:e1:a9:8c:66:2e:
                    55:79:b5:ae:14:1a:c0:8a:d9:22:7a:d0:4a:fd:95:
                    db:73:a4:ad:df:ae:60:67:e8:9d:37:57:bb:6d:88:
                    11:0a:2e:ca:ac:13:04:c2:b1:8c:5a:a4:43:28:7a:
                    85:6a:cb:be:fc:9a:e4:94:b0:d7:b4:84:00:8d:9d:
                    3a:87:25:8b:e9:ce:31:fc:27:e2:0a:df:ac:dd:b1:
                    86:30:54:e0:5c:47:6e:c5:de:28:73:81:a7:46:e3:
                    78:bc:d3:f0:68:e1:be:fa:fe:55:b5:ff:e1:76:97:
                    07:f9:a2:93:23:f5:c8:83:e7:b6:cc:88:d6:15:61:
                    00:0a:53:ab:3d:6c:92:49:aa:d6:3b:8f:2a:07:32:
                    e8:41:2b:8b:9f:ab:56:c1:22:9f:5e:b3:86:de:fa:
                    ab:b2:2a:e0:38:9a:49:21:0a:00:da:06:c7:cb:2f:
                    19:b7:66:c8:49:bb:1c:dc:95:5a:6c:f1:99:39:6f:
                    57:6a:72:89:44:0e:54:a2:ec:5a:d5:d9:9f:dd:70:
                    e1:92:75:76:e9:4c:e2:7f:38:48:a8:76:e0:e5:7f:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:79:2E:A2:F4:88:1D:3C:99:76:03:AE:9F:0D:AB:8B:1F:65:D1:50
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36312e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:71:6b:10:9c:11:6b:b3:fc:2b:9f:05:d8:ed:b0:2d:b3:33:
         27:d1:3b:56:a8:09:08:9d:51:e9:74:9a:3a:5e:b8:b2:9b:58:
         9c:93:a7:17:99:9d:60:43:e6:c8:c8:ae:a1:3d:33:54:71:de:
         06:c0:d6:76:9a:d1:84:fa:37:7f:a7:93:7e:e5:7f:4d:bb:19:
         a0:a0:21:ce:5b:27:ac:18:1e:69:e6:f9:94:e6:cd:a4:3c:c3:
         83:e9:b3:e1:95:ac:99:fb:f2:71:39:37:4e:45:9f:c0:df:a9:
         9c:12:15:b5:b2:5b:4e:ba:8c:15:f5:de:e6:e6:3a:18:9a:90:
         bf:37:90:0f:7f:f8:9d:c5:2f:d5:98:56:5f:96:3b:f2:85:28:
         c6:2e:43:e0:c4:b0:2f:f9:7c:b9:b9:9f:85:cb:15:33:f3:b7:
         ac:5b:ef:23:e8:55:24:a1:5c:92:e2:c8:ec:c1:c6:ba:f6:8b:
         b7:bf:a2:c9:6b:e1:d7:f9:e2:84:13:af:e7:da:ff:24:63:90:
         c3:f0:d2:6f:fd:d7:24:61:d2:3f:8b:b6:19:5c:de:c9:4a:a9:
         17:cc:e6:76:07:10:3e:b2:1e:c5:59:81:1a:64:4b:21:bc:3f:
         a6:34:67:48:d7:e7:e5:62:18:2d:9f:28:44:1a:d2:0f:2a:aa:
         22:14:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org