Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135312e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3135312e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          G8Ma/JIprnw1eqH8IDAy4qZVEOQNpbEYIzkv4icMT/4=
Subject key identifier:   B6:6D:20:8A:2B:53:76:D1:BC:23:3B:78:6E:CA:70:88:30:E5:92:0E
Certificate issuer:       /CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
Certificate serial:       43D78EA56800F64710CE06B6A7B0E9612F06A6BB
Authority key identifier: F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135312e302f32342d3234203d3e203238313630.roa
Signing time:             Fri 08 Mar 2024 18:50:51 +0000
ROA not before:           Fri 08 Mar 2024 18:45:51 +0000
ROA not after:            Fri 07 Mar 2025 18:50:51 +0000
asID:                     28160
IP address blocks:        187.62.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d7:8e:a5:68:00:f6:47:10:ce:06:b6:a7:b0:e9:61:2f:06:a6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Validity
            Not Before: Mar  8 18:45:51 2024 GMT
            Not After : Mar  7 18:50:51 2025 GMT
        Subject: CN=B66D208A2B5376D1BC233B786ECA708830E5920E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:ea:2a:cb:a1:e0:8d:f2:c2:96:ab:b4:88:
                    e7:a3:56:5f:23:73:c5:7d:68:6c:0b:d3:00:dd:3a:
                    6a:a7:4d:69:d6:98:2d:f0:09:73:44:2b:81:14:31:
                    b7:c0:67:1b:3c:f8:e9:ed:a7:16:05:d9:39:5a:ec:
                    f0:78:26:24:a7:3c:f9:d0:79:94:96:2d:3e:d8:85:
                    81:ca:c0:96:80:27:0f:76:0b:63:cb:82:56:2a:b4:
                    e0:2b:43:cb:3a:e2:2f:66:6f:56:e0:fc:ec:f4:a3:
                    26:f0:34:3f:07:6e:8f:a3:15:b0:df:17:66:b7:ed:
                    96:88:6d:e9:b8:7d:72:c3:4f:a0:5b:82:df:bf:89:
                    7b:1b:52:75:e2:0c:27:7e:de:45:d6:37:2d:43:12:
                    49:3d:30:45:bb:6a:a8:7f:7e:f9:eb:44:4e:54:04:
                    5a:8f:7c:a3:1d:e1:cc:fe:ae:97:58:75:ad:4d:9c:
                    4e:6f:16:eb:d7:e5:75:f4:47:d1:8c:24:04:08:8c:
                    ba:49:d9:88:bf:37:4b:5e:64:e6:d2:a6:c0:ba:56:
                    3e:0d:78:d2:bf:87:8a:da:0d:3f:0a:26:c4:39:e1:
                    4f:ad:51:4c:0d:d3:a8:cd:b8:c2:18:ca:a5:7f:42:
                    a4:6b:44:32:40:91:a1:86:9b:5c:5c:d4:1e:a7:ac:
                    7f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6D:20:8A:2B:53:76:D1:BC:23:3B:78:6E:CA:70:88:30:E5:92:0E
            X509v3 Authority Key Identifier:
                keyid:F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135312e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f1:74:e0:6b:c4:19:69:a0:5a:09:f2:07:b7:72:02:12:32:
         2a:6f:3d:30:e8:b1:14:f7:2a:69:6c:0b:64:01:fc:0e:c5:85:
         52:14:2a:eb:21:2f:9d:d3:24:1c:b1:41:8d:80:0e:3b:78:12:
         6e:72:30:9e:1f:5f:75:28:09:c9:ec:df:cb:85:e0:ac:1e:8b:
         62:14:9b:cb:91:6e:06:2c:9a:97:33:20:61:47:86:81:4e:30:
         be:8f:6d:89:53:94:61:6c:d6:05:2a:e2:3e:34:a6:d6:7a:87:
         d7:ef:a2:c2:c5:19:78:d8:49:c5:05:44:0a:da:be:a1:54:27:
         6c:80:4c:82:d7:cd:ca:a6:1c:b7:c5:96:e8:71:22:a3:6d:37:
         9c:42:d0:d3:6a:bb:54:29:bd:3e:07:ca:46:f4:61:75:f7:d6:
         71:ae:ce:87:1e:46:b7:c0:83:60:29:55:5e:36:10:5d:c9:1f:
         c2:78:7c:2f:b9:0c:62:8e:d1:b8:80:42:89:b7:2d:88:cd:fc:
         b5:c6:b4:47:28:4a:37:8d:5b:ee:70:5f:19:41:3a:a9:b5:1d:
         38:b4:ef:f8:03:8b:49:47:b9:ee:ad:7e:32:7e:b7:cf:68:c8:
         4e:0f:e9:23:fe:99:89:67:ea:68:81:c3:89:1d:ed:44:05:cb:
         64:e1:c9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org