Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36322e302f32332d3233203d3e203238333532.roa
File:                     3138372e302e36322e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          ccBtBEzu+KsHlobMLQdVcaWByUGNpbexMVr7Z2AkcMU=
Subject key identifier:   D0:43:CB:8A:73:F3:5D:CF:84:1E:39:9A:7A:24:19:A0:22:A7:C6:D4
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       210FEC105E9145043A95DE5D7948E403A47B7F5B
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36322e302f32332d3233203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:52 +0000
ROA not before:           Fri 13 Oct 2023 14:31:52 +0000
ROA not after:            Fri 11 Oct 2024 14:36:52 +0000
asID:                     28352
IP address blocks:        187.0.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0f:ec:10:5e:91:45:04:3a:95:de:5d:79:48:e4:03:a4:7b:7f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:52 2023 GMT
            Not After : Oct 11 14:36:52 2024 GMT
        Subject: CN=D043CB8A73F35DCF841E399A7A2419A022A7C6D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:68:a0:a4:02:44:1a:37:4d:42:42:41:1b:1f:
                    3c:ee:21:70:5d:b4:17:3c:21:c1:f9:bb:e4:b1:8c:
                    23:cc:7a:93:80:b5:76:09:47:90:90:d0:21:82:7e:
                    41:1d:28:98:91:75:ec:f1:93:d0:03:72:bb:98:42:
                    87:b9:ed:0b:10:41:9c:85:b9:d7:e6:0a:57:b5:61:
                    8e:35:ef:81:9d:de:2d:59:27:71:32:b9:32:49:13:
                    f5:30:92:00:e3:e0:46:03:79:2e:d6:2c:3f:d0:26:
                    df:9c:d2:1a:27:f4:46:f8:44:3b:c6:46:fe:5e:6f:
                    35:90:e7:6f:3a:87:17:de:bf:29:54:01:2e:b9:39:
                    ea:a8:e6:d8:57:f3:c5:29:7c:1d:45:a9:39:4a:9c:
                    6a:2f:ac:ec:34:52:ee:ce:a9:93:56:44:3e:cb:53:
                    25:48:3c:b8:f6:a7:14:66:f4:08:d9:8b:d4:96:18:
                    ad:b8:7e:16:21:f3:5a:36:bc:16:f1:c0:d9:1f:aa:
                    9f:6d:ac:dd:5c:cf:07:6d:5b:33:62:16:2b:0c:32:
                    fe:77:c7:a6:df:73:a0:78:c9:63:e4:fb:51:c2:c4:
                    76:8b:09:bf:e0:50:48:f0:f4:1c:e7:dc:67:81:e2:
                    2b:63:81:dc:e8:a1:c0:46:86:d2:3b:bd:fe:d8:dd:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:43:CB:8A:73:F3:5D:CF:84:1E:39:9A:7A:24:19:A0:22:A7:C6:D4
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138372e302e36322e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:eb:7f:b7:84:46:89:0c:47:31:00:cc:0e:2b:67:f6:ad:f9:
         bf:17:d7:12:9c:d9:d9:6e:ec:7e:95:92:4a:ae:19:32:c6:4d:
         27:71:b4:be:8d:2e:99:cb:1b:ab:67:a1:fe:50:f9:ca:ad:36:
         6a:ac:8d:62:87:39:03:47:74:12:80:9c:62:3c:ec:97:f9:25:
         ae:7e:e6:06:09:ef:25:2d:71:ea:0a:6c:a0:2a:75:bd:61:98:
         ec:8f:b5:df:a1:a8:b7:26:b8:6f:24:b3:31:b9:64:3c:eb:de:
         ed:3b:d0:88:db:95:2d:fb:90:58:b8:87:2e:29:f5:73:05:a2:
         83:a7:d0:5a:6e:cc:ff:2d:25:36:30:5a:96:60:32:ed:d0:28:
         c2:c4:a1:c5:34:74:19:10:f3:52:ef:a5:07:d0:6d:ed:7e:95:
         fd:59:cb:f6:e6:0c:8f:d8:0a:18:5d:78:06:eb:b3:29:f6:b9:
         3f:10:99:c1:39:52:ed:64:e4:4c:0c:c8:d3:e9:f5:61:4d:11:
         8a:12:70:96:fa:8d:ab:a9:22:1f:ca:17:36:56:96:24:53:3c:
         f9:6a:97:2c:e5:1a:00:d5:2b:81:9a:a1:cf:06:a1:0d:8c:15:
         a9:38:2d:0d:c8:06:7d:6b:b2:d8:54:5b:18:35:ba:1f:4b:03:
         c4:53:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org