Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135322e302f32322d3232203d3e203238313630.roa
File:                     3138372e36322e3135322e302f32322d3232203d3e203238313630.roa (raw, json)
Hash identifier:          EpL1I742dS3R0YF0DebP3gm3IatIeiSquBwwfz7c/kM=
Subject key identifier:   95:50:65:02:EB:58:36:59:AF:9F:AC:1F:D9:9E:74:C6:65:45:D3:A3
Certificate issuer:       /CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
Certificate serial:       2117A5601ECD4EA93EA03AF61B191E7AEC7B7BDA
Authority key identifier: F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135322e302f32322d3232203d3e203238313630.roa
Signing time:             Fri 08 Mar 2024 18:50:52 +0000
ROA not before:           Fri 08 Mar 2024 18:45:52 +0000
ROA not after:            Fri 07 Mar 2025 18:50:52 +0000
asID:                     28160
IP address blocks:        187.62.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:17:a5:60:1e:cd:4e:a9:3e:a0:3a:f6:1b:19:1e:7a:ec:7b:7b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Validity
            Not Before: Mar  8 18:45:52 2024 GMT
            Not After : Mar  7 18:50:52 2025 GMT
        Subject: CN=95506502EB583659AF9FAC1FD99E74C66545D3A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:93:db:7f:29:27:04:b2:dd:e1:64:47:51:c6:
                    fe:81:70:03:df:5b:d9:8c:66:fe:2d:bd:13:1e:d7:
                    a1:e0:b8:50:42:39:2f:7a:04:32:b2:9d:3e:ec:aa:
                    d9:c6:f0:da:79:9d:43:66:da:96:cb:e1:67:af:b4:
                    47:63:6f:95:fa:0f:f9:73:09:dc:d6:64:f1:52:0c:
                    ff:9e:a4:dd:1e:7a:a5:92:74:e4:63:ae:a3:f4:fe:
                    e5:5c:ff:14:ff:b8:14:20:e0:ac:7e:df:95:07:00:
                    13:70:52:80:cc:07:46:be:c7:51:b4:23:79:e2:88:
                    97:d1:37:d1:42:01:76:b2:c5:c0:7b:eb:86:df:60:
                    cf:ce:5c:c5:25:b2:96:1d:4b:91:92:6d:c8:70:75:
                    aa:bf:0d:17:81:62:e2:f1:1b:8a:12:25:a8:ca:fc:
                    80:96:c6:98:82:56:33:89:8c:b5:74:86:75:86:9a:
                    af:d4:35:ba:17:da:4c:78:11:e4:c6:4f:ab:98:a2:
                    14:be:9a:7d:c7:9a:43:7a:bf:ac:bb:04:ae:45:9a:
                    f3:5f:aa:8a:a0:05:a0:47:2c:ce:3b:33:08:ce:50:
                    b1:15:40:1d:05:5d:34:ea:00:f9:56:53:8c:49:af:
                    93:d9:b8:59:55:56:5f:be:6d:fa:27:e9:78:31:df:
                    d5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:50:65:02:EB:58:36:59:AF:9F:AC:1F:D9:9E:74:C6:65:45:D3:A3
            X509v3 Authority Key Identifier:
                keyid:F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135322e302f32322d3232203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:6c:c4:64:fe:fd:ba:09:9c:7e:f1:69:30:f6:94:ca:4a:82:
         76:f1:7a:a8:f9:87:f7:bc:1a:d6:c9:3d:b2:8b:1d:df:8e:c5:
         c4:6b:10:47:1c:26:a4:b2:00:9f:b7:64:77:2d:b1:8f:cd:c1:
         8e:b5:c2:ef:6c:50:21:39:ed:0f:99:1b:23:d6:21:83:39:97:
         d6:65:20:56:8d:8b:1b:3b:9a:4e:dd:57:7c:5c:35:18:c7:db:
         68:ad:d0:aa:3a:0e:14:9c:b5:ff:b0:57:53:7f:06:06:7f:dd:
         5e:21:fd:b5:90:e1:3b:e5:25:3c:5c:44:6a:89:5a:61:4b:3c:
         3f:b8:3c:4b:00:18:43:3a:6b:0f:7d:53:cf:15:bd:0d:da:65:
         c1:d3:01:31:80:fe:26:9d:cc:a3:e3:db:06:9d:55:e4:5f:34:
         d0:33:b5:e0:c7:fb:7e:eb:0b:89:33:fe:99:76:18:7b:44:37:
         ed:dd:15:1c:4b:09:31:59:98:96:3d:9f:2d:96:94:54:f1:d1:
         b1:a4:de:9b:a3:1c:3d:53:08:f8:e6:9a:8a:db:be:c9:3c:fd:
         2c:ab:b4:b0:3e:91:83:95:4c:a1:e0:df:b0:3a:2d:bd:9e:6a:
         04:fe:c7:25:61:b1:78:e0:42:b0:09:95:e9:e2:08:4e:19:47:
         73:b8:9c:ca
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIRelYB7NTqk+oDr2Gxkeeux7e9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjcwMzQ5NTk0MDU5Q0VDQUIzRDk3MzNBNkNDRDhFQjFD
MEI2MkZDNzAeFw0yNDAzMDgxODQ1NTJaFw0yNTAzMDcxODUwNTJaMDMxMTAvBgNV
BAMTKDk1NTA2NTAyRUI1ODM2NTlBRjlGQUMxRkQ5OUU3NEM2NjU0NUQzQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlk9t/KScEst3hZEdRxv6BcAPf
W9mMZv4tvRMe16HguFBCOS96BDKynT7sqtnG8Np5nUNm2pbL4WevtEdjb5X6D/lz
CdzWZPFSDP+epN0eeqWSdORjrqP0/uVc/xT/uBQg4Kx+35UHABNwUoDMB0a+x1G0
I3niiJfRN9FCAXayxcB764bfYM/OXMUlspYdS5GSbchwdaq/DReBYuLxG4oSJajK
/ICWxpiCVjOJjLV0hnWGmq/UNboX2kx4EeTGT6uYohS+mn3HmkN6v6y7BK5FmvNf
qoqgBaBHLM47MwjOULEVQB0FXTTqAPlWU4xJr5PZuFlVVl++bfon6Xgx39VPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlVBlAutYNlmvn6wf2Z50xmVF06MwHwYDVR0j
BBgwFoAU9wNJWUBZzsqz2XM6bM2OscC2L8cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3ZXalVyMVN5Z1VDbXFacllFWkwyS0p6aWdvRVJ5UWc0ZEFxbWFmTGFB
VXQvMC9GNzAzNDk1OTQwNTlDRUNBQjNEOTczM0E2Q0NEOEVCMUMwQjYyRkM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y3MDM0OTU5NDA1OUNFQ0FC
M0Q5NzMzQTZDQ0Q4RUIxQzBCNjJGQzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N2V2pVcjFTeWdVQ21xWnJZRVpMMktKemlnb0VSeVFnNGRBcW1hZkxhQVV0LzAv
MzEzODM3MmUzNjMyMmUzMTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCuz6YMA0GCSqGSIb3DQEBCwUAA4IBAQA7bMRk/v26
CZx+8Wkw9pTKSoJ28Xqo+Yf3vBrWyT2yix3fjsXEaxBHHCaksgCft2R3LbGPzcGO
tcLvbFAhOe0PmRsj1iGDOZfWZSBWjYsbO5pO3Vd8XDUYx9tordCqOg4UnLX/sFdT
fwYGf91eIf21kOE75SU8XERqiVphSzw/uDxLABhDOmsPfVPPFb0N2mXB0wExgP4m
ncyj49sGnVXkXzTQM7Xgx/t+6wuJM/6Zdhh7RDft3RUcSwkxWZiWPZ8tlpRU8dGx
pN6boxw9Uwj45pqK277JPP0sq7SwPpGDlUyh4N+wOi29nmoE/sclYbF44EKwCZXp
4ghOGUdzuJzK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org