Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135342e302f32332d3233203d3e203238313630.roa
File:                     3138372e36322e3135342e302f32332d3233203d3e203238313630.roa (raw, json)
Hash identifier:          NPwnN1C9PNYqy/wK20tK39gsc4zwzevpKQZ7jXi4/SM=
Subject key identifier:   C0:4A:F5:C3:B6:F8:81:15:7C:5B:50:A7:A5:DE:F3:E0:61:47:68:A0
Certificate issuer:       /CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
Certificate serial:       1A38790A4BA37CC0A637D1A8D99525EF02D8751F
Authority key identifier: F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135342e302f32332d3233203d3e203238313630.roa
Signing time:             Fri 08 Mar 2024 18:50:52 +0000
ROA not before:           Fri 08 Mar 2024 18:45:52 +0000
ROA not after:            Fri 07 Mar 2025 18:50:52 +0000
asID:                     28160
IP address blocks:        187.62.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:38:79:0a:4b:a3:7c:c0:a6:37:d1:a8:d9:95:25:ef:02:d8:75:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Validity
            Not Before: Mar  8 18:45:52 2024 GMT
            Not After : Mar  7 18:50:52 2025 GMT
        Subject: CN=C04AF5C3B6F881157C5B50A7A5DEF3E0614768A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:8b:a5:ed:9e:1c:c9:12:9e:95:c1:33:de:
                    7d:5a:90:d0:5b:86:79:33:db:76:e2:bc:1e:cc:8d:
                    91:73:25:0c:d7:24:f0:21:5f:b6:6e:c8:1d:8a:bb:
                    14:da:fe:80:73:88:dd:24:79:74:c6:a7:6d:ba:5d:
                    4c:63:90:b8:a6:fd:49:d6:3b:72:26:ca:0d:1c:0b:
                    a4:2e:7d:1f:92:eb:19:39:4c:8a:3d:b2:99:70:bc:
                    75:93:9b:f5:ba:76:cc:9e:ec:fa:7d:80:5b:6a:a2:
                    58:76:54:73:f0:72:b3:11:1f:1c:4b:aa:e3:19:64:
                    1b:9f:88:84:1d:8b:f2:68:7b:ad:3c:ce:57:bd:7f:
                    fc:d9:54:44:1d:a7:79:fc:95:b1:86:2c:11:6c:d2:
                    bf:98:95:18:3d:df:69:16:12:dd:f5:46:e7:65:36:
                    97:49:6e:95:13:b2:69:bb:b6:ed:88:1e:6d:03:c8:
                    65:11:7a:b3:ca:66:3a:76:15:6e:7d:3d:f3:32:b9:
                    c2:69:c6:51:19:c8:c9:65:33:f0:ce:d2:6f:90:d4:
                    01:45:89:28:ae:9d:7e:77:9f:a3:b6:d7:64:e0:81:
                    2a:d9:e4:a1:c7:43:66:6d:35:c7:cd:42:fe:03:59:
                    30:be:7c:cb:75:f6:8d:b2:54:d3:cd:2b:39:06:a6:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4A:F5:C3:B6:F8:81:15:7C:5B:50:A7:A5:DE:F3:E0:61:47:68:A0
            X509v3 Authority Key Identifier:
                keyid:F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135342e302f32332d3233203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:44:89:76:99:c1:64:df:7d:20:09:b6:12:37:e8:70:2d:16:
         92:91:60:32:a9:72:e3:58:07:55:36:60:84:02:2f:ef:57:68:
         07:43:c7:98:5b:8b:3e:87:6d:08:2a:16:cf:7e:a3:73:0d:74:
         a1:6d:52:e2:09:93:3c:ea:10:03:da:c4:f3:a5:dc:9c:6f:f1:
         a3:fc:09:26:2c:86:ac:f3:3d:13:0a:e7:ba:d7:76:99:42:d4:
         ea:9c:a0:7c:ad:d8:33:6c:28:46:e1:2f:90:b5:5d:cb:be:80:
         bf:07:13:a1:4b:46:fb:e9:af:d8:0b:0e:7d:91:8c:67:eb:63:
         10:10:0e:f5:6b:b4:3d:06:76:ae:62:36:77:4c:3d:78:52:5a:
         04:85:a8:35:42:ab:33:47:09:28:ab:e0:74:76:d4:5f:92:c9:
         b0:6c:55:80:83:c9:bb:bc:3d:b4:8d:f8:17:08:c4:79:ec:b3:
         df:06:b9:c5:70:e2:58:e9:75:de:46:16:2c:b7:4d:9f:f4:d8:
         2b:e4:42:df:f0:f0:56:99:70:56:12:2a:8f:5a:93:f8:47:f1:
         0b:fa:e2:22:7e:fa:8f:b2:34:fe:49:2a:a1:56:0e:85:c4:65:
         3f:04:dd:28:8e:83:06:82:56:14:d6:f3:bc:67:9b:66:67:3c:
         8c:81:fb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org