Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138372e38342e3234302e302f32302d3234203d3e203238313938.roa
File:                     3138372e38342e3234302e302f32302d3234203d3e203238313938.roa (raw, json)
Hash identifier:          hNdfA0a/jXNuckN+HWKSRc1p1YmN2i/wnPvelvY+Vbw=
Subject key identifier:   A5:CB:64:28:7F:69:BD:C2:71:78:D7:4A:61:E5:14:25:59:5A:69:5C
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       49176BCCC0B3AC840760656D263A292AF82452DC
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138372e38342e3234302e302f32302d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:19:27 +0000
ROA not before:           Mon 21 Aug 2023 20:14:27 +0000
ROA not after:            Mon 19 Aug 2024 20:19:27 +0000
asID:                     28198
IP address blocks:        187.84.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:17:6b:cc:c0:b3:ac:84:07:60:65:6d:26:3a:29:2a:f8:24:52:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:14:27 2023 GMT
            Not After : Aug 19 20:19:27 2024 GMT
        Subject: CN=A5CB64287F69BDC27178D74A61E51425595A695C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:61:ae:b0:56:c6:83:96:4a:1b:12:c8:ba:06:
                    7d:07:c1:ac:5d:e9:3d:70:28:15:7b:f0:04:04:fb:
                    61:4d:b4:fe:dc:35:08:a0:e7:a2:a1:22:b1:88:99:
                    0f:a6:9c:10:bc:5e:5f:8d:38:46:8d:ef:60:d4:8c:
                    89:a1:2e:ce:d8:e1:be:f8:95:0f:da:e7:c4:52:3f:
                    c6:73:bb:32:00:c6:06:1a:7b:66:15:3d:0f:c6:56:
                    d4:41:b0:4f:92:f0:1e:a0:2c:52:5d:7b:69:7f:8a:
                    08:cb:de:d9:3f:48:18:7e:93:73:57:d2:3b:25:d1:
                    66:cb:92:1b:22:7f:b1:ac:08:e4:78:13:0e:8d:2d:
                    ed:39:56:b9:55:70:1c:64:d9:de:8d:d1:bf:e1:2f:
                    12:74:3b:12:3c:19:26:98:b3:01:14:c6:cb:cf:e5:
                    33:c2:6e:21:59:d0:2b:8d:48:56:18:5d:b6:ca:90:
                    af:65:f0:b1:d8:39:67:7d:9d:c6:bd:53:0e:ba:5e:
                    47:20:51:fd:cb:38:1b:35:f6:4d:ee:af:47:7e:e2:
                    95:6d:c8:fd:c0:7d:1b:e2:9b:d7:4a:8c:bc:c1:84:
                    b9:51:1e:30:dc:7e:8f:bc:93:a2:de:48:43:65:b1:
                    f1:49:86:c2:15:e4:fd:26:ee:4a:ba:f0:b4:2c:7b:
                    c6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CB:64:28:7F:69:BD:C2:71:78:D7:4A:61:E5:14:25:59:5A:69:5C
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138372e38342e3234302e302f32302d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:71:cf:f9:af:20:fe:94:77:94:c0:9d:83:90:94:c2:2f:5c:
         2e:73:e3:5d:df:34:2c:92:0f:6a:42:74:84:e2:e4:4f:95:f8:
         79:99:c5:b5:61:98:0b:c9:83:89:8f:1a:3b:34:90:b5:d1:c7:
         22:82:49:38:b5:6b:df:90:02:4d:d5:f3:e9:5f:e6:60:c1:53:
         60:69:ab:40:8f:b5:c8:61:37:c3:aa:8e:af:f3:76:f0:d5:ea:
         19:b0:b6:df:97:d3:dc:61:7d:e7:bb:7d:a6:b6:09:4d:e4:eb:
         40:41:c0:90:26:d0:2c:22:26:63:cd:50:3b:5d:6b:f9:15:9b:
         f1:28:d8:15:7a:fe:00:36:fa:09:b4:d5:ca:ea:94:11:ef:06:
         61:32:f0:a7:68:17:bc:d7:9a:d9:7b:3b:bf:6f:7f:48:ef:4c:
         65:bc:50:cb:9c:71:7f:fd:4e:5e:03:c3:e9:0c:67:c9:c9:d2:
         51:64:84:09:ab:ea:0e:8a:cf:ce:3f:98:19:14:ed:55:d0:e6:
         73:05:30:2a:1a:de:98:57:81:a9:63:ae:f8:a5:f0:0e:63:27:
         5d:55:1b:20:00:82:ee:6d:10:79:b5:6d:43:29:1b:a5:2e:17:
         8d:0f:a7:d6:b7:e0:f1:ae:a9:a1:74:bc:e3:21:35:e0:c1:ef:
         e3:b8:27:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:17 2024 by rpki-client on console-fra.rpki-client.org