Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134342e302f32302d3230203d3e203238313630.roa
File:                     3138372e36322e3134342e302f32302d3230203d3e203238313630.roa (raw, json)
Hash identifier:          8MXntuu/KNGqk13KDm/3Y5BrsdEwzsVk6RRujkel1Ec=
Subject key identifier:   D6:49:3D:21:F4:4F:A9:D4:32:A6:F1:6C:8D:49:A9:B2:14:E4:D8:6D
Certificate issuer:       /CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
Certificate serial:       7E158524D7834C29FAB9655FE52A09E784CB9FAB
Authority key identifier: F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134342e302f32302d3230203d3e203238313630.roa
Signing time:             Fri 08 Mar 2024 19:03:46 +0000
ROA not before:           Fri 08 Mar 2024 18:58:46 +0000
ROA not after:            Fri 07 Mar 2025 19:03:46 +0000
asID:                     28160
IP address blocks:        187.62.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:15:85:24:d7:83:4c:29:fa:b9:65:5f:e5:2a:09:e7:84:cb:9f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Validity
            Not Before: Mar  8 18:58:46 2024 GMT
            Not After : Mar  7 19:03:46 2025 GMT
        Subject: CN=D6493D21F44FA9D432A6F16C8D49A9B214E4D86D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:79:98:4d:4e:63:32:a8:1b:b2:cc:be:05:f9:
                    4d:03:0c:0a:33:40:63:da:41:ad:55:48:02:ad:2f:
                    f3:43:6e:0d:6a:9f:40:2a:db:82:21:ff:7f:c5:ae:
                    3e:5c:ce:58:54:0d:bd:ca:4e:79:90:77:79:54:58:
                    78:c5:f7:f1:51:e0:20:e0:b4:06:26:8b:39:14:42:
                    e5:f0:1a:24:35:c1:c4:ee:12:cf:66:4c:69:02:59:
                    b9:58:d3:57:ea:c9:16:de:75:32:2b:0c:09:bc:e8:
                    54:f4:59:88:39:01:34:8c:f2:2e:65:dc:c3:33:9a:
                    04:64:ac:98:5c:08:23:98:9c:4d:0f:9a:91:04:cc:
                    15:e4:a6:78:ac:8c:58:fc:67:a2:95:2a:43:ce:fd:
                    00:f1:71:20:65:9f:28:66:aa:3a:ee:f3:f4:f4:89:
                    10:c4:5c:e3:e3:2b:84:7a:2b:20:f9:a8:4c:82:17:
                    7a:3e:46:7b:59:10:8a:7b:5f:a4:de:a4:5d:44:d6:
                    58:50:89:53:b6:4d:9f:a6:40:b8:b8:ef:9a:d4:3c:
                    12:df:eb:8c:0e:34:ed:29:31:e8:67:79:bf:14:05:
                    07:45:bc:44:a2:f5:ac:c0:54:bb:6c:a8:e1:ff:3d:
                    f7:6c:67:83:0a:b0:ae:51:e6:16:bd:e1:22:86:a1:
                    fe:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:49:3D:21:F4:4F:A9:D4:32:A6:F1:6C:8D:49:A9:B2:14:E4:D8:6D
            X509v3 Authority Key Identifier:
                keyid:F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134342e302f32302d3230203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:e3:c4:af:9b:59:4f:5c:b3:ed:e4:dd:22:1b:c1:37:cd:b1:
         1a:43:84:cb:29:2d:25:f4:aa:6f:2a:5c:67:0f:09:1f:a9:92:
         2d:df:b5:f8:da:35:8a:0c:d9:f8:7a:b1:28:de:42:b3:8f:2c:
         d9:5b:04:4e:5d:af:53:49:f5:9a:12:28:1e:e9:b3:76:95:c7:
         e6:48:6a:d9:c6:ea:98:d8:7b:31:19:f5:c9:02:67:26:b7:76:
         fa:3c:e6:7d:53:dd:d4:86:3e:2b:61:2e:c2:86:96:f7:3c:2c:
         a3:ef:92:09:b1:b6:30:3f:34:de:82:b0:ef:b0:8e:d6:3c:4b:
         1e:d3:2b:93:bf:57:6c:f7:53:d1:cc:3b:fe:54:ec:82:82:09:
         ca:6b:2e:8f:8a:f8:5f:51:3d:f6:00:e1:93:41:97:e5:88:91:
         f5:6e:b3:36:ff:a7:dd:31:9e:c4:2e:fc:29:b9:94:ff:6b:a5:
         e6:7f:50:79:82:d6:c8:30:50:0e:95:07:25:40:69:22:55:94:
         fd:06:5d:db:b0:2e:90:43:0e:4a:a9:b3:84:79:ae:b4:04:15:
         d8:a8:39:9f:14:e8:d9:b2:2e:a1:cb:89:ac:df:18:d5:b6:62:
         ae:c3:c9:1d:1c:f2:b4:a6:4a:a6:b2:9e:d5:6a:c3:58:3e:20:
         68:44:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org