Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134342e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3134342e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          LMDrhDTmQ163SxTLvqEDD3UfybJTTjzeKNnuPjABzt4=
Subject key identifier:   40:B7:FA:75:69:15:98:8B:E4:29:E2:A9:25:AC:60:1D:3D:60:E5:F4
Certificate issuer:       /CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
Certificate serial:       085E661EE4D95463744E4139AF05A41445A7A4C6
Authority key identifier: F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134342e302f32342d3234203d3e203238313630.roa
Signing time:             Fri 08 Mar 2024 18:50:53 +0000
ROA not before:           Fri 08 Mar 2024 18:45:53 +0000
ROA not after:            Fri 07 Mar 2025 18:50:53 +0000
asID:                     28160
IP address blocks:        187.62.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5e:66:1e:e4:d9:54:63:74:4e:41:39:af:05:a4:14:45:a7:a4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Validity
            Not Before: Mar  8 18:45:53 2024 GMT
            Not After : Mar  7 18:50:53 2025 GMT
        Subject: CN=40B7FA756915988BE429E2A925AC601D3D60E5F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:ff:44:27:44:ee:3f:96:37:3b:54:34:ec:
                    e7:2c:1a:7c:64:e8:0a:1e:39:92:73:47:cc:12:f3:
                    17:12:8e:0a:79:64:53:cf:fb:c2:7e:0f:af:6d:97:
                    7d:59:f7:28:f5:e2:e8:61:cd:e6:8f:ab:88:58:24:
                    ae:a1:29:17:2a:54:43:44:44:fa:25:75:27:57:f8:
                    89:66:03:13:9f:bb:ad:8d:12:ff:b8:0a:43:8f:47:
                    db:5c:5f:46:b5:77:bb:ea:4c:0d:00:a4:11:4f:8b:
                    67:15:82:9b:b1:81:e0:26:22:31:e1:27:05:18:4f:
                    98:7b:55:d7:ee:22:97:10:a1:a0:bc:78:7f:55:aa:
                    ff:29:f6:7e:2f:f3:b4:d8:49:fd:7a:02:67:f8:3d:
                    a6:ca:87:f6:c9:db:71:20:34:e2:8c:7a:cc:fc:2f:
                    54:fb:5b:70:94:cf:85:05:c8:6c:90:76:e7:0d:0b:
                    1b:a5:9d:30:fc:2c:ea:24:dc:76:6d:55:cf:86:d9:
                    4c:e8:ee:53:ce:0b:2a:e1:32:d2:c2:af:b1:20:63:
                    60:83:9c:ff:ef:5e:c5:d9:75:bf:7d:2e:67:fe:e9:
                    67:41:30:47:b2:a1:42:24:a4:16:43:b2:4d:4b:56:
                    98:f7:20:51:74:34:14:5d:7e:22:9b:dc:6a:17:ad:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B7:FA:75:69:15:98:8B:E4:29:E2:A9:25:AC:60:1D:3D:60:E5:F4
            X509v3 Authority Key Identifier:
                keyid:F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134342e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:09:45:ed:2b:ff:95:c6:00:09:1c:45:02:69:a4:88:bf:bf:
         e6:96:ef:4f:c3:3a:52:a4:37:eb:04:76:77:87:2b:1a:4d:c1:
         1d:0b:4b:a5:09:1b:bc:15:10:11:33:39:45:8a:2a:5c:99:98:
         4e:13:c7:08:29:fe:c6:7e:f8:54:66:b6:15:ae:39:11:e3:fe:
         76:d4:d5:43:60:13:ae:cf:d1:87:ed:5a:c5:94:86:91:48:fb:
         0f:cd:ee:7c:4d:21:60:02:92:b4:b3:09:4a:e4:42:0b:16:56:
         ca:30:05:43:36:84:d4:85:16:1b:fb:13:f2:ca:5a:11:54:80:
         ef:dc:51:89:df:70:d1:e5:7e:b4:b0:8a:4d:63:72:8a:77:30:
         c5:e1:2c:9f:82:ef:4f:70:bd:c1:c2:c1:65:92:e9:21:b6:49:
         7a:e4:60:13:b7:0a:54:99:dc:0c:83:81:bf:35:f8:d5:2f:85:
         b4:21:9c:f4:bc:03:2a:46:ed:7d:0f:75:12:0f:15:43:3f:73:
         8e:36:0d:1c:be:5f:fe:f4:5f:80:5a:55:2b:b3:c7:ff:72:77:
         f2:3d:41:d6:f5:55:75:85:08:61:8c:c1:0c:2f:a8:03:b7:7f:
         9f:c1:3b:15:1c:ca:fa:f3:fd:f9:44:37:d6:68:05:b7:41:40:
         5e:f8:94:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org