Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135332e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3135332e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          XtONIBUR7+HODm2H0PjOYYRqA1G4mzYcXa7HzZ9Sxh4=
Subject key identifier:   C1:22:EC:FA:8D:A5:94:D1:85:CD:A4:7B:29:9C:17:4F:36:FE:22:F0
Certificate issuer:       /CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
Certificate serial:       4BBCFBDF34A3EFB14F6091C6AD6CA604BC4E4B09
Authority key identifier: F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135332e302f32342d3234203d3e203238313630.roa
Signing time:             Fri 08 Mar 2024 18:50:53 +0000
ROA not before:           Fri 08 Mar 2024 18:45:53 +0000
ROA not after:            Fri 07 Mar 2025 18:50:53 +0000
asID:                     28160
IP address blocks:        187.62.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bc:fb:df:34:a3:ef:b1:4f:60:91:c6:ad:6c:a6:04:bc:4e:4b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Validity
            Not Before: Mar  8 18:45:53 2024 GMT
            Not After : Mar  7 18:50:53 2025 GMT
        Subject: CN=C122ECFA8DA594D185CDA47B299C174F36FE22F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:4c:54:f9:26:c7:0b:fc:db:dc:e0:a7:30:
                    cd:c8:3c:c1:87:3e:98:e4:cb:34:ad:4b:45:e1:40:
                    95:10:a0:5e:15:8f:d6:43:5d:6c:9a:c6:27:a1:c6:
                    cf:80:fc:b2:d7:8e:af:ac:b9:fd:8b:5e:2e:82:ef:
                    b6:05:5f:9b:47:1a:ba:7e:a7:25:40:8a:28:08:67:
                    42:ff:28:71:f9:74:b2:76:21:1c:0d:00:4b:a7:29:
                    5e:bb:88:e5:0d:97:09:0e:15:31:ff:0a:8e:ce:f3:
                    5d:52:a5:ba:79:ea:c1:ab:3e:fd:71:37:d6:e3:f1:
                    17:81:c8:ec:42:94:1a:af:88:83:01:64:8c:3c:f4:
                    2a:58:54:c8:e6:1e:01:70:4a:1f:f1:28:c2:e8:c8:
                    cb:1b:c8:3d:b3:01:c7:b2:b7:bd:a3:ec:c8:45:bf:
                    fe:54:a5:bf:e2:50:6c:ce:af:78:b0:d4:c2:92:4a:
                    f8:59:66:90:01:d5:9b:c5:8e:db:cc:82:23:ee:d0:
                    19:8b:cb:98:d0:c2:5d:61:60:40:2e:37:55:68:63:
                    07:a8:2b:b1:e6:4a:1f:56:02:4a:16:ef:10:60:29:
                    b2:09:cc:7f:9d:66:a3:d6:73:7a:98:16:2f:f9:54:
                    e6:5c:f5:e8:2e:7b:fa:86:77:58:63:c1:bf:aa:0e:
                    38:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:22:EC:FA:8D:A5:94:D1:85:CD:A4:7B:29:9C:17:4F:36:FE:22:F0
            X509v3 Authority Key Identifier:
                keyid:F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135332e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:45:99:7b:be:15:b9:bd:f7:70:19:1b:05:44:c4:c7:76:7b:
         9c:73:2f:a8:60:5c:99:7a:22:18:b8:3e:46:f3:c7:8a:30:39:
         79:c2:c8:36:ca:67:a1:fc:b9:bf:85:17:93:bc:be:85:98:d3:
         20:23:2f:17:3f:0b:37:6a:81:b4:5d:e1:25:5c:7d:a6:10:5a:
         3c:38:46:60:31:57:ef:bb:52:6e:eb:c2:89:70:68:29:dc:55:
         ae:ef:36:65:45:dd:b8:b1:37:46:db:6d:6b:e5:36:8c:c8:82:
         22:e4:4e:d3:7c:6b:00:4f:3c:c5:af:a9:6b:7e:f9:1b:8d:5b:
         91:05:13:9a:5e:19:05:11:13:c4:70:8b:33:64:0a:75:b2:16:
         a6:da:80:68:98:48:6e:c2:30:ca:29:ae:36:6a:49:1f:39:76:
         5c:6f:74:9d:e7:30:2d:1a:41:9f:b6:9c:44:3d:3a:e1:3c:8c:
         09:d7:05:5c:4a:71:c5:4e:1e:74:61:31:b1:59:b4:57:06:40:
         cd:42:e1:8a:96:42:6f:a2:f4:d1:96:de:7f:f9:a2:d6:fc:f4:
         d9:73:1a:44:76:19:61:b0:b5:79:52:9e:75:5d:80:08:40:b4:
         76:e7:4e:d7:7e:d3:5f:0b:72:93:4f:6b:4d:e2:9b:07:dc:9e:
         cb:45:4f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org