Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3139322e3134302e3130382e302f32322d3234203d3e203238313938.roa
File:                     3139322e3134302e3130382e302f32322d3234203d3e203238313938.roa (raw, json)
Hash identifier:          b6N1Z8gQ27jMoqNLn8A/YwqsSui0AA4Rwna/GUvB9aE=
Subject key identifier:   7B:43:F6:5E:F8:EF:E4:C5:E7:B9:44:0D:41:35:2F:10:22:75:3E:EC
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       186E2DC6BD5BB2921C423F70F5D2B632E647B7DE
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3139322e3134302e3130382e302f32322d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:16:12 +0000
ROA not before:           Mon 21 Aug 2023 20:11:12 +0000
ROA not after:            Mon 19 Aug 2024 20:16:12 +0000
asID:                     28198
IP address blocks:        192.140.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6e:2d:c6:bd:5b:b2:92:1c:42:3f:70:f5:d2:b6:32:e6:47:b7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:11:12 2023 GMT
            Not After : Aug 19 20:16:12 2024 GMT
        Subject: CN=7B43F65EF8EFE4C5E7B9440D41352F1022753EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:e3:a0:71:82:e7:04:d3:aa:ba:cd:62:5c:
                    18:33:05:2a:69:2d:c5:a8:e3:84:99:b6:ad:46:7d:
                    56:3b:97:53:eb:23:fa:0e:39:38:59:5b:81:87:cb:
                    eb:1c:eb:c4:17:ad:2a:58:18:de:bd:c0:8e:2f:fa:
                    d2:fa:3c:b6:e5:b8:25:46:ec:38:f5:91:f9:2f:4f:
                    97:49:58:5c:56:f8:90:fc:79:b2:b2:e6:11:41:4d:
                    53:61:ce:5c:f3:11:20:82:94:70:c0:82:01:6b:d4:
                    bc:dd:50:0a:e2:9e:73:3e:11:b9:d1:f1:4e:73:c7:
                    21:49:0b:be:2e:8a:87:a1:b9:76:b1:fa:46:1b:94:
                    7d:a1:a2:60:6a:4a:d1:60:69:1c:28:7a:8f:98:68:
                    c8:e0:48:46:f0:be:d1:77:b2:53:01:93:ea:ba:c9:
                    8f:f0:50:37:16:19:2d:c0:24:f9:c0:d0:3d:e8:29:
                    c7:08:91:ba:9a:92:cc:04:a8:c1:7f:47:c8:fd:2f:
                    7a:40:04:83:58:f7:48:08:f5:32:24:b0:b3:0a:ad:
                    57:69:a6:3c:57:62:b7:9c:69:08:71:a7:13:de:3e:
                    41:a7:27:62:86:98:ff:8c:3c:52:55:be:b5:55:b7:
                    fd:79:e9:b2:d4:00:ae:ef:3a:a1:d6:1b:d5:82:c1:
                    b5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:43:F6:5E:F8:EF:E4:C5:E7:B9:44:0D:41:35:2F:10:22:75:3E:EC
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3139322e3134302e3130382e302f32322d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:3b:38:5c:b2:82:d3:1c:0d:3c:f0:80:b0:36:ce:f3:11:d4:
         d6:03:6a:16:54:02:c8:d1:b3:be:fd:66:54:18:54:4e:ac:0e:
         09:58:76:85:13:5f:b2:8d:07:e9:d8:fa:3a:71:88:77:6a:55:
         6a:96:82:b6:ca:31:57:1d:89:de:5f:e4:15:24:d6:67:bb:15:
         06:da:ad:38:10:47:23:ab:66:e1:05:6e:80:7e:f1:eb:af:be:
         b5:b4:9a:7b:b6:ef:46:ec:f6:c7:ee:90:30:a3:5e:e2:07:6e:
         a1:b5:73:4a:8b:96:d0:55:93:32:29:c6:e9:b6:e3:4d:25:c1:
         67:1f:50:bc:6c:79:a1:e3:25:51:b7:e1:84:a5:83:af:e7:6f:
         ee:dc:6b:c6:0a:e9:4a:7d:a3:0e:b4:25:cc:65:b0:ce:a0:ea:
         ab:16:98:73:78:3c:a2:5a:ec:53:af:c2:37:31:6f:c3:32:35:
         ac:1e:0c:a6:9e:eb:ae:e0:40:48:39:aa:87:fe:1b:d9:2a:9b:
         20:83:18:b4:94:34:42:06:6a:18:d5:78:ee:1d:8a:57:8c:18:
         12:be:93:fe:de:cf:4a:61:46:24:2b:7e:ce:e0:c3:ea:ba:d0:
         c2:58:d7:99:bf:a0:c5:1e:4c:c0:b1:fe:a9:5d:4d:74:07:dd:
         ec:2c:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:17 2024 by rpki-client on console-fra.rpki-client.org