Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138372e36322e3233322e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3233322e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          znlI7f1PHmH6ODaIjGGHzWynV/BQcrTwPBMLAtbGCj0=
Subject key identifier:   0B:8E:8C:F8:FC:1B:72:39:5D:9A:5F:68:EE:7F:05:91:59:95:D1:A3
Certificate issuer:       /CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
Certificate serial:       05335A382903AFA4FC623D5987C7246543F05B6B
Authority key identifier: C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138372e36322e3233322e302f32342d3234203d3e20323632363633.roa
Signing time:             Fri 16 Jun 2023 16:22:20 +0000
ROA not before:           Fri 16 Jun 2023 16:17:20 +0000
ROA not after:            Fri 14 Jun 2024 16:22:20 +0000
asID:                     262663
IP address blocks:        187.62.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:33:5a:38:29:03:af:a4:fc:62:3d:59:87:c7:24:65:43:f0:5b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
        Validity
            Not Before: Jun 16 16:17:20 2023 GMT
            Not After : Jun 14 16:22:20 2024 GMT
        Subject: CN=0B8E8CF8FC1B72395D9A5F68EE7F05915995D1A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:aa:1f:d9:9b:37:a9:bd:e5:90:4c:df:e9:
                    ed:d2:d6:f3:b2:76:c9:10:01:49:57:2f:85:09:74:
                    56:a0:c5:e9:f7:fa:ce:d9:bb:c8:91:81:7d:9e:7d:
                    09:83:ad:2e:78:5d:81:48:49:5d:cb:51:ed:cc:40:
                    28:b6:f4:ab:a3:7a:83:89:1f:6c:63:02:10:c4:0d:
                    4a:19:60:b9:c9:97:d2:c4:df:2e:c9:39:10:37:bb:
                    a3:65:84:c9:36:b5:d1:03:4d:da:76:94:cf:c5:e5:
                    84:3f:f4:34:4c:7c:4f:bd:c8:99:0e:b4:1c:e2:0e:
                    35:59:23:55:e4:07:66:cf:5a:cb:4e:77:2e:39:d6:
                    a0:9c:c3:05:3b:91:a4:81:a1:cf:35:24:70:91:2c:
                    40:17:bb:23:0f:f5:ab:69:d2:54:69:54:9f:b9:c5:
                    a1:c9:18:cc:f4:65:e0:08:98:39:4a:ad:f3:b4:7b:
                    13:3e:76:74:47:05:63:3d:66:f0:b4:fc:59:a4:0a:
                    37:7a:cf:4b:10:11:21:e9:9f:7f:04:7a:60:00:d8:
                    ca:2f:e3:1c:99:e6:69:a1:c8:37:60:b1:b8:3e:9c:
                    97:77:24:a4:0a:ec:04:48:f8:e3:81:56:e4:03:7d:
                    f7:7a:09:ca:24:90:92:08:50:14:b2:a3:df:fa:fa:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:8C:F8:FC:1B:72:39:5D:9A:5F:68:EE:7F:05:91:59:95:D1:A3
            X509v3 Authority Key Identifier:
                keyid:C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138372e36322e3233322e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:42:13:99:df:6b:f6:b5:a9:1e:0e:65:3d:8d:1a:f7:be:fb:
         ab:9c:63:52:ef:0f:f8:ea:35:cb:45:0c:68:ab:0c:25:27:04:
         a8:2f:f7:c4:27:02:ee:ef:70:d4:90:14:16:81:ec:27:2d:e4:
         cc:c0:95:a3:ff:b5:bb:23:c6:26:31:db:e1:bc:38:fe:d5:29:
         05:5f:c4:12:32:cb:36:5e:4f:96:93:19:1d:82:c8:95:f5:aa:
         6e:9d:a1:54:48:aa:a5:c5:60:9a:1a:1f:f8:91:fd:d2:06:cf:
         04:16:0f:de:76:9a:5e:d2:42:11:5c:a4:a4:81:60:01:7e:ad:
         1d:54:14:9a:fb:ad:7a:12:5d:eb:aa:d4:cc:de:24:61:22:ee:
         6f:c5:57:49:8f:c0:18:4b:b9:1d:f4:8d:91:fc:0c:9e:61:51:
         8e:00:ac:f2:f9:cf:8f:3e:83:50:6b:91:51:1f:6a:7c:9b:ef:
         a2:72:8f:65:68:93:62:39:d6:68:b5:23:90:7b:2a:37:05:fe:
         be:7e:d6:73:6c:03:1f:99:6e:eb:90:fe:2d:4c:0a:e7:a9:20:
         e5:8d:84:bd:0c:f4:7a:5c:3f:44:1c:44:fc:15:47:03:91:f6:
         7f:de:eb:02:2e:52:c5:18:8e:12:82:a9:08:aa:fb:70:8c:51:
         55:e9:30:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org