Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135342e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3135342e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          F+xN8RqalGOkF6nBm5MqG3WhGV6AbFxmJ5xQioqeK5o=
Subject key identifier:   8B:3C:84:66:88:18:20:E5:7A:2C:DE:AF:8E:40:D3:0F:0E:7B:9C:C0
Certificate issuer:       /CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
Certificate serial:       21B90E0490CDCDB572B4AC0BE9C9F694F6572C2E
Authority key identifier: F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135342e302f32342d3234203d3e203238313630.roa
Signing time:             Fri 08 Mar 2024 18:50:53 +0000
ROA not before:           Fri 08 Mar 2024 18:45:53 +0000
ROA not after:            Fri 07 Mar 2025 18:50:53 +0000
asID:                     28160
IP address blocks:        187.62.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b9:0e:04:90:cd:cd:b5:72:b4:ac:0b:e9:c9:f6:94:f6:57:2c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Validity
            Not Before: Mar  8 18:45:53 2024 GMT
            Not After : Mar  7 18:50:53 2025 GMT
        Subject: CN=8B3C8466881820E57A2CDEAF8E40D30F0E7B9CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:33:02:c9:39:c2:cf:ad:7b:32:1f:76:7b:37:
                    60:50:fa:a2:02:c5:6a:c1:3a:52:1c:8c:b2:1a:86:
                    e2:70:25:96:8f:fc:11:03:5c:0a:2c:a6:a2:d7:38:
                    39:cc:11:21:5d:cc:ba:c8:60:e6:54:cd:c5:7e:99:
                    1d:7d:32:1b:d9:33:c5:0f:9a:6d:a2:07:8d:77:50:
                    51:77:0f:8f:68:d8:5b:7f:a1:81:63:0a:76:6d:50:
                    e3:81:5b:b5:1d:5e:10:de:cc:ef:f7:0d:57:11:1c:
                    8b:4c:66:bd:d0:8d:51:db:18:44:ae:57:a6:99:8c:
                    a4:6a:a5:ee:f5:c0:42:54:fb:27:65:1d:58:14:21:
                    06:d6:b5:9c:2d:78:48:0f:78:55:e3:3e:37:1d:24:
                    e7:8e:66:6b:dd:7f:8c:ed:01:17:c4:23:dd:52:c0:
                    6e:40:d0:e1:68:e0:05:09:bf:2c:76:ff:46:3f:60:
                    4c:db:60:4d:2f:a0:fa:af:25:bc:fc:39:47:77:b3:
                    21:15:bd:92:6f:0c:bf:36:52:10:60:48:12:28:50:
                    4d:2d:81:cd:a4:45:d8:00:fd:df:dc:03:e4:2e:10:
                    4f:b2:2e:93:10:32:a2:83:bd:2d:9e:27:5c:c3:ed:
                    36:eb:d7:11:05:ed:68:1b:a0:d7:ff:e7:26:af:f7:
                    36:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3C:84:66:88:18:20:E5:7A:2C:DE:AF:8E:40:D3:0F:0E:7B:9C:C0
            X509v3 Authority Key Identifier:
                keyid:F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135342e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:ad:a1:3d:81:c4:0a:b7:40:69:de:da:b6:79:3b:05:f0:4a:
         6b:11:43:87:4b:af:0e:7e:05:a6:b9:fc:c7:7e:dd:c1:96:54:
         dc:5f:80:bd:4a:9f:89:0b:b0:6f:09:fd:c0:eb:5e:47:d6:24:
         c9:3d:0b:da:55:42:36:1d:1f:0c:4a:d9:a1:e5:1c:cf:de:df:
         f7:c4:98:db:46:4f:8f:9c:ad:eb:ed:37:88:87:47:57:bf:db:
         25:16:66:06:de:20:db:52:7c:9c:b9:f9:8b:fc:51:9a:76:6a:
         49:59:f1:5c:65:b2:6a:21:4f:ca:2f:be:3b:60:48:0f:61:6c:
         30:96:94:22:bd:73:34:80:fb:a2:aa:d0:f0:f5:93:f8:3c:13:
         d5:6b:77:76:b8:00:08:f2:dd:80:e4:54:47:a7:ab:d7:40:27:
         89:25:51:2c:12:08:c6:ce:6b:70:58:59:d4:fd:cd:3d:da:77:
         59:27:cf:90:eb:59:c3:f5:89:00:52:4b:dd:e7:1f:b0:e6:34:
         4b:93:72:95:5c:d8:b1:8a:e3:c4:9d:e4:10:a5:6e:42:8b:71:
         b2:fd:89:0b:49:a4:83:d2:d7:b7:2d:fc:06:de:1f:1a:d2:fb:
         62:85:8c:55:ba:d8:f6:66:6c:c5:38:6a:a1:3e:1a:63:44:3a:
         16:f2:5e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:36 2025 by rpki-client