Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138372e3130382e39362e302f32302d3230203d3e203238323230.roa
File:                     3138372e3130382e39362e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          XGYwrYZ0s3xCH7CTnlAk8gmoSuoapMW3zvMV3SKoWSA=
Subject key identifier:   C1:15:85:17:03:B2:59:60:19:C6:43:7D:47:D6:65:DC:AC:81:3D:3E
Certificate issuer:       /CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
Certificate serial:       72C48CCB22B7909B88E3964F21511773AB40B5A3
Authority key identifier: 26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138372e3130382e39362e302f32302d3230203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 17:57:07 +0000
ROA not before:           Thu 06 Oct 2022 17:52:07 +0000
ROA not after:            Thu 05 Oct 2023 17:57:07 +0000
asID:                     28220
IP address blocks:        187.108.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c4:8c:cb:22:b7:90:9b:88:e3:96:4f:21:51:17:73:ab:40:b5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F
        Validity
            Not Before: Oct  6 17:52:07 2022 GMT
            Not After : Oct  5 17:57:07 2023 GMT
        Subject: CN=C115851703B2596019C6437D47D665DCAC813D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1a:ac:14:d9:81:d2:f7:c9:39:6f:0c:0c:fd:
                    ac:10:ec:14:c0:d9:76:22:34:d0:3b:87:bc:d2:8e:
                    8a:f7:99:36:41:49:19:b2:36:d0:37:dd:b9:26:e2:
                    88:dc:83:28:ed:fd:66:17:3d:90:51:78:ee:54:c6:
                    e3:97:a3:dc:84:a2:49:cd:4f:92:1b:5a:f5:76:65:
                    bc:10:48:29:e0:f7:6c:22:47:10:7d:53:47:f5:68:
                    8f:1a:10:26:64:2e:1c:d6:16:43:b5:ca:a1:fe:e1:
                    19:17:ed:15:6a:c9:95:42:39:55:0a:dc:0d:ae:c6:
                    35:6c:cd:a3:6b:64:67:38:0a:d3:f5:cc:ee:54:03:
                    3e:18:be:b0:55:3a:cb:66:3e:11:e0:0e:9d:73:2a:
                    07:e4:8e:16:8e:0e:b7:32:55:e4:79:d0:39:5e:1a:
                    7a:70:88:10:4f:e9:3e:f9:52:b0:25:86:f9:8b:5f:
                    46:bd:87:74:0f:0e:71:87:34:bd:cc:da:65:d5:48:
                    91:a7:95:c3:66:73:0d:0d:0f:09:30:2f:49:bd:2a:
                    0f:be:d3:d0:46:4e:cb:27:28:db:09:b1:0a:09:6d:
                    06:7c:3c:6f:7f:ea:0d:f9:ba:4c:88:0f:bc:4d:73:
                    b3:a8:61:f9:c1:d7:8b:ed:d0:0e:45:6e:4b:08:52:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:15:85:17:03:B2:59:60:19:C6:43:7D:47:D6:65:DC:AC:81:3D:3E
            X509v3 Authority Key Identifier:
                keyid:26:65:C5:CD:E8:A4:2C:9F:8B:10:32:30:8A:EC:6C:F9:59:90:FC:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2665C5CDE8A42C9F8B1032308AEC6CF95990FC6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/0/3138372e3130382e39362e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:7d:84:32:28:8b:01:4a:75:92:a0:d6:de:09:e6:c5:27:e1:
         d9:96:02:4e:56:25:44:2a:44:3b:d5:22:74:97:ee:09:3a:04:
         18:74:a0:e0:19:dc:3a:78:19:55:50:08:77:d1:22:e2:f9:a6:
         2b:de:35:3f:02:75:02:2b:00:01:3b:41:3a:16:55:c0:b8:ed:
         af:03:1a:99:57:0d:82:4e:a0:d5:5d:06:8d:73:60:43:74:30:
         7d:1a:ae:79:d9:e8:b4:6a:69:2b:f3:33:04:86:ce:7e:58:0a:
         86:e7:67:ba:be:15:e4:01:2d:1b:49:a6:c7:8b:e4:97:c7:3f:
         8e:05:3d:22:14:f4:18:09:93:c2:fd:72:f9:97:2c:72:7a:16:
         4e:53:56:98:88:1a:94:f3:92:03:57:df:4b:f8:1a:84:e0:19:
         3e:74:99:74:44:3b:c5:fc:18:61:60:9b:ce:10:57:f4:48:1f:
         f2:a4:6d:60:cc:61:ef:79:8b:cb:9b:f4:43:1f:63:c6:90:ee:
         6f:0d:67:cb:80:88:ae:47:02:f7:eb:db:be:f0:a9:27:d1:71:
         d9:bc:41:22:72:39:01:9c:4e:49:4d:c4:42:bb:e3:4c:58:73:
         f8:86:0d:66:ca:6c:35:b1:11:9b:ac:11:09:c0:b5:c7:ca:74:
         40:75:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org