Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138372e36322e3234342e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3234342e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          c1BtE/XLAcLODzW5uLjeWBI5huK2LBBY0mvUZmvREDE=
Subject key identifier:   C4:4C:D5:96:22:0F:FB:7D:67:D9:9D:A4:9E:46:30:78:F5:2F:7F:A7
Certificate issuer:       /CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
Certificate serial:       2D24F389279A0406988F54E90DB64045328C95D5
Authority key identifier: C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138372e36322e3234342e302f32342d3234203d3e20323632363633.roa
Signing time:             Fri 22 Mar 2024 13:34:01 +0000
ROA not before:           Fri 22 Mar 2024 13:29:01 +0000
ROA not after:            Fri 21 Mar 2025 13:34:01 +0000
asID:                     262663
IP address blocks:        187.62.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:24:f3:89:27:9a:04:06:98:8f:54:e9:0d:b6:40:45:32:8c:95:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C809254760A5E7001DE1BBAEA7549A4E45D009E2
        Validity
            Not Before: Mar 22 13:29:01 2024 GMT
            Not After : Mar 21 13:34:01 2025 GMT
        Subject: CN=C44CD596220FFB7D67D99DA49E463078F52F7FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:10:cb:30:b9:b4:93:26:9c:5f:35:38:34:
                    71:aa:2f:b1:e5:78:7f:1e:08:11:77:11:7e:6a:36:
                    78:a5:cf:86:b5:22:41:fa:93:42:31:ba:bc:d5:5d:
                    85:0a:38:29:9a:5d:ba:92:8c:57:14:06:c5:cc:e3:
                    36:f7:62:ea:6f:d9:fe:43:88:d3:d7:96:f8:a4:36:
                    50:c1:46:ea:40:92:c7:75:f4:e5:c0:c2:99:68:c6:
                    3e:e9:c0:88:f9:2b:a3:cb:a9:f9:07:fb:ec:39:9a:
                    23:80:11:bc:ca:d3:ec:30:de:00:d8:eb:83:16:6e:
                    aa:5c:dd:a3:9a:e4:61:78:9b:9e:c0:80:ec:e5:58:
                    29:8f:6b:a6:38:5f:71:22:09:4b:8e:d7:25:f7:45:
                    6c:ae:d5:4e:5d:15:ca:cd:21:b3:69:48:38:f1:c9:
                    0a:67:3b:15:ea:27:3f:e8:6b:52:5c:0b:97:26:66:
                    29:0a:a3:5f:8c:ad:66:2b:67:c7:0d:da:88:01:6c:
                    22:f5:0d:db:13:f2:3b:7f:51:ee:9f:81:5f:bf:88:
                    26:cb:62:64:2a:20:6e:42:2d:cc:ce:74:5d:27:9b:
                    ac:e5:91:9e:23:45:04:40:3c:4e:5a:28:1a:26:f1:
                    fa:57:ac:8c:d0:70:57:a0:24:04:39:1a:55:53:b9:
                    db:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4C:D5:96:22:0F:FB:7D:67:D9:9D:A4:9E:46:30:78:F5:2F:7F:A7
            X509v3 Authority Key Identifier:
                keyid:C8:09:25:47:60:A5:E7:00:1D:E1:BB:AE:A7:54:9A:4E:45:D0:09:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C809254760A5E7001DE1BBAEA7549A4E45D009E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/0/3138372e36322e3234342e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:eb:04:92:7a:4c:4c:d5:f7:ef:03:bb:b7:5d:15:e2:cc:0a:
         26:df:ae:e4:20:db:e2:3c:ad:96:b7:97:bc:a9:a2:be:93:7d:
         29:1a:8a:37:53:fd:a8:c1:ef:11:24:ec:65:78:7c:03:34:ee:
         6f:dc:f9:87:0c:04:3a:58:db:97:18:0f:d0:a5:24:7d:15:24:
         6c:81:af:c8:40:3f:af:40:6f:81:28:f0:6d:61:ef:4c:9f:de:
         0e:d9:c6:db:6b:04:ea:4f:96:ee:5c:6a:8f:39:ac:31:95:7d:
         69:b5:10:b6:69:1a:ba:b2:bc:1e:76:ad:f3:f1:4e:aa:f4:c4:
         ec:85:2a:fe:33:dd:32:d3:7e:12:08:9d:db:5a:6e:12:2f:eb:
         ea:2b:1d:2a:02:01:23:fa:5c:2c:ec:85:6b:2c:6a:6c:ee:34:
         02:d1:27:95:5a:9c:c7:1f:e2:d0:1f:fd:05:30:4f:9d:16:5c:
         cb:f2:ad:a0:ef:35:0e:6d:a1:5b:51:bf:c0:7e:bf:23:06:77:
         64:86:a0:17:c5:57:77:24:50:26:33:ae:77:80:b7:e3:51:c5:
         dd:87:c1:b3:1e:42:5f:7f:4c:bd:0f:6f:b4:55:7a:24:73:b0:
         57:09:82:49:3b:23:25:ca:28:58:b2:d2:f0:7d:60:eb:32:ad:
         80:18:a2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org