Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3132382e302f32322d3232203d3e203238323338.roa
File:                     3138372e302e3132382e302f32322d3232203d3e203238323338.roa (raw, json)
Hash identifier:          CPLskYYb1joaH17f3s9nkojtbl4fpFKDxI3kUP8pcgU=
Subject key identifier:   A9:D8:A3:23:96:BD:31:F3:61:0E:AF:84:C5:29:0B:BD:38:B0:77:93
Certificate issuer:       /CN=729B4CD9A37F20431C93A42826003C836E39EB20
Certificate serial:       6CD1B86DC08DAAE3438FF31A45B4AF78D203BCE1
Authority key identifier: 72:9B:4C:D9:A3:7F:20:43:1C:93:A4:28:26:00:3C:83:6E:39:EB:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/729B4CD9A37F20431C93A42826003C836E39EB20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3132382e302f32322d3232203d3e203238323338.roa
Signing time:             Mon 11 Jul 2022 19:05:31 +0000
ROA not before:           Mon 11 Jul 2022 19:00:31 +0000
ROA not after:            Mon 10 Jul 2023 19:05:31 +0000
asID:                     28238
IP address blocks:        187.0.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d1:b8:6d:c0:8d:aa:e3:43:8f:f3:1a:45:b4:af:78:d2:03:bc:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729B4CD9A37F20431C93A42826003C836E39EB20
        Validity
            Not Before: Jul 11 19:00:31 2022 GMT
            Not After : Jul 10 19:05:31 2023 GMT
        Subject: CN=A9D8A32396BD31F3610EAF84C5290BBD38B07793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:56:03:87:cc:86:ac:4f:5d:d3:8b:c4:b4:
                    54:d5:09:d0:8c:e6:ff:b6:2c:d9:39:0e:a5:12:51:
                    f1:c0:5d:a6:82:22:2f:88:13:ad:ec:b7:b4:cd:c3:
                    f5:84:f0:8f:ce:ee:f2:bf:b4:1e:ba:a7:bd:e2:2d:
                    a3:c9:3d:40:02:d0:49:02:ba:80:89:89:eb:a1:91:
                    43:51:65:c0:d9:ba:67:ec:b0:e3:8a:40:6b:f6:4e:
                    6f:56:17:38:8f:f8:92:a5:79:de:22:89:5b:8a:32:
                    8a:c4:b3:5f:dc:4e:39:e4:50:6f:7e:c7:6a:f2:d3:
                    d8:68:9b:5f:a7:b9:52:27:1a:fe:f2:b7:3b:e4:25:
                    d3:a5:c1:42:7a:37:55:ad:30:54:70:94:b6:88:5a:
                    41:70:f8:65:c4:69:6b:b3:ef:58:64:a7:b1:62:3c:
                    2a:25:53:4c:81:b3:f0:e4:72:73:8a:9e:e7:58:ae:
                    0b:dc:e0:d3:55:75:83:7f:73:a5:1f:36:f5:a1:09:
                    19:29:47:59:99:18:e9:e0:7d:fb:fd:85:15:e6:41:
                    66:1f:d7:69:2a:76:08:cf:2e:d6:c9:69:aa:e3:8c:
                    23:4e:0e:93:9f:08:84:3d:33:a6:4d:83:58:5b:93:
                    db:03:31:9a:3b:65:05:c3:90:8d:a8:72:0a:0b:1a:
                    bf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D8:A3:23:96:BD:31:F3:61:0E:AF:84:C5:29:0B:BD:38:B0:77:93
            X509v3 Authority Key Identifier:
                keyid:72:9B:4C:D9:A3:7F:20:43:1C:93:A4:28:26:00:3C:83:6E:39:EB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/729B4CD9A37F20431C93A42826003C836E39EB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/729B4CD9A37F20431C93A42826003C836E39EB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138372e302e3132382e302f32322d3232203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:94:81:17:91:61:99:0c:d9:14:73:83:1e:91:a9:c8:c9:13:
         19:cd:6c:52:07:ab:9b:cb:50:c3:ec:22:08:6c:67:2a:2b:30:
         6c:ee:f0:c2:a0:35:d5:57:25:eb:70:c1:86:e4:41:94:ab:88:
         24:ac:62:fa:26:9d:37:7f:89:7b:b5:97:77:90:da:cd:be:4f:
         17:ce:8d:73:aa:f2:68:1a:d4:a5:ac:0f:e6:6b:d0:32:fb:c6:
         39:ba:87:a7:06:c9:6e:9f:01:91:ca:52:2b:fd:45:98:66:dd:
         43:ef:d5:94:11:dc:14:de:df:a9:1a:bf:fa:dd:69:47:62:23:
         72:9e:15:43:5b:2e:cb:34:14:85:c2:bc:34:ee:00:3a:17:24:
         c3:01:85:f5:1f:0e:64:f0:8f:f5:d4:8f:b5:b9:e8:60:93:24:
         10:ee:9c:6a:8a:a5:02:c4:7f:ac:44:ea:f2:48:03:1b:d7:41:
         94:d4:7b:6a:94:e0:fb:35:0d:b8:31:b1:96:2e:cf:9f:b0:83:
         8f:97:9b:a1:e5:77:c3:20:ad:51:89:ca:72:e2:66:85:0d:82:
         14:4f:a0:25:6a:35:c5:f6:5d:91:47:79:89:26:55:bb:61:89:
         e0:32:5f:7f:ae:13:50:26:5c:32:b6:1b:3f:06:3d:6e:e4:bb:
         b5:fd:fb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org