Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134382e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3134382e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          IIp8IbbCGYdHORFlMiSXfegFRRBKkKzp+ywWwEsGm2I=
Subject key identifier:   C4:20:B1:9A:E6:F6:20:8A:3F:14:0B:67:BB:5E:19:F8:18:75:AE:B2
Certificate issuer:       /CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
Certificate serial:       645DF2F0495FC769A0267749EAF3F9EAF65A855A
Authority key identifier: F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134382e302f32342d3234203d3e203238313630.roa
Signing time:             Thu 04 Apr 2024 17:32:56 +0000
ROA not before:           Thu 04 Apr 2024 17:27:56 +0000
ROA not after:            Thu 03 Apr 2025 17:32:56 +0000
asID:                     28160
IP address blocks:        187.62.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5d:f2:f0:49:5f:c7:69:a0:26:77:49:ea:f3:f9:ea:f6:5a:85:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Validity
            Not Before: Apr  4 17:27:56 2024 GMT
            Not After : Apr  3 17:32:56 2025 GMT
        Subject: CN=C420B19AE6F6208A3F140B67BB5E19F81875AEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:99:f9:d8:83:85:61:e9:7b:b8:0b:18:9a:
                    9e:4d:fe:bd:87:8a:06:5b:41:1e:81:01:c1:00:7b:
                    5e:b7:4c:cd:62:6d:57:2a:3c:41:60:d9:92:f6:e4:
                    6a:4e:81:09:a4:bb:a1:20:8a:36:0c:bc:d5:e9:e9:
                    cd:ef:27:9b:5c:1a:d2:b1:df:44:f2:aa:9a:3a:22:
                    a8:50:e8:1d:9c:bc:09:5b:f8:16:ab:5f:4d:9c:fb:
                    4d:e5:e0:e9:87:a6:3d:6a:43:95:7f:4f:53:c7:2b:
                    bc:03:e9:98:21:25:76:1e:53:40:a0:7b:30:6a:04:
                    48:6d:ca:54:8f:66:db:09:7b:14:66:81:e6:cd:ad:
                    a9:6f:9b:6f:82:c7:10:bb:d1:7e:20:7a:c2:99:a9:
                    9e:b6:8a:97:66:f4:76:81:0e:a3:4f:a2:fc:ae:fe:
                    41:af:1e:f4:07:f7:86:fe:57:ce:0d:d3:d2:cf:52:
                    35:2e:34:4c:69:04:ed:83:2c:77:09:1e:fe:52:62:
                    56:f2:1d:26:d3:82:99:d4:71:2c:cc:17:73:32:2a:
                    f1:39:f8:9d:73:30:36:ee:d5:cd:77:74:c0:00:54:
                    3f:76:cc:d0:b0:dc:05:27:41:4c:eb:52:74:cf:5b:
                    26:fb:2c:f1:88:6d:30:8c:51:6f:98:7b:26:95:ef:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:B1:9A:E6:F6:20:8A:3F:14:0B:67:BB:5E:19:F8:18:75:AE:B2
            X509v3 Authority Key Identifier:
                keyid:F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3134382e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:bf:dc:5d:c7:03:90:3d:62:69:0f:d6:07:f9:99:75:1e:27:
         2b:ef:86:82:8f:b8:f4:90:fc:8a:ec:92:ca:13:24:8f:75:a2:
         ef:c5:77:39:3a:ed:eb:73:b3:6d:fc:7b:a3:74:6e:0d:e6:30:
         7f:53:0b:70:33:ac:5b:4d:2c:1d:2b:36:b1:10:ca:b3:30:8f:
         f6:bd:a3:73:6c:57:fa:29:0c:75:22:14:31:f7:42:70:60:1d:
         6e:9f:7d:6f:54:11:9d:fe:cf:5f:76:65:cf:47:e6:a2:b4:fc:
         81:a0:55:40:e2:d6:d7:14:cb:d1:36:13:86:cd:a3:3c:03:ef:
         8b:3d:b1:d6:ca:e2:fd:0b:5d:6b:e5:60:3a:bf:7c:2e:97:36:
         46:de:db:d6:87:1f:99:a9:f3:e0:46:a5:59:2c:a4:54:e0:78:
         3a:18:3c:60:68:79:9a:87:98:4e:fa:93:08:35:20:ad:86:03:
         2c:88:01:ff:61:e1:db:5a:22:ec:ee:5c:56:bb:0a:ea:7f:62:
         38:84:24:8a:15:c0:08:ee:9a:fb:a4:19:4c:c0:f1:91:16:5d:
         4c:29:28:b2:e2:45:da:1e:1c:db:3c:e6:7e:74:44:ae:e9:43:
         8f:2f:08:c4:9d:a7:df:02:a2:2f:96:5b:e6:a8:7d:68:c2:a6:
         45:ce:95:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org