Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135362e302f32332d3233203d3e203238313630.roa
File:                     3138372e36322e3135362e302f32332d3233203d3e203238313630.roa (raw, json)
Hash identifier:          +zhnbx2xTCk79AyOTfGbLgmqacJ13+g3akRXQ9CgdA4=
Subject key identifier:   76:95:70:AF:36:54:78:16:D0:A2:09:99:59:2D:B8:A1:D9:C5:94:89
Certificate issuer:       /CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
Certificate serial:       14D67CD2724843B5E1EEFE5388FB845138D4E933
Authority key identifier: F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135362e302f32332d3233203d3e203238313630.roa
Signing time:             Fri 08 Mar 2024 18:50:54 +0000
ROA not before:           Fri 08 Mar 2024 18:45:54 +0000
ROA not after:            Fri 07 Mar 2025 18:50:54 +0000
asID:                     28160
IP address blocks:        187.62.156.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d6:7c:d2:72:48:43:b5:e1:ee:fe:53:88:fb:84:51:38:d4:e9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Validity
            Not Before: Mar  8 18:45:54 2024 GMT
            Not After : Mar  7 18:50:54 2025 GMT
        Subject: CN=769570AF36547816D0A20999592DB8A1D9C59489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:c7:b7:ba:cd:0c:51:c9:c0:5a:2b:93:4a:
                    84:21:0a:53:a3:66:25:b6:11:85:25:b0:34:9b:9b:
                    90:27:31:81:93:60:8e:63:34:7d:81:2f:f7:e7:a9:
                    29:4a:07:a6:2b:f7:ba:7c:be:ee:54:b3:d9:f0:f0:
                    c6:6f:8c:14:a9:60:9b:1c:5c:4d:97:ea:dc:84:d7:
                    21:a3:7f:77:3d:85:b1:32:6f:e4:e4:82:8c:35:3f:
                    ed:a7:83:ce:32:08:ac:de:6d:2f:68:ac:ba:92:84:
                    1d:bf:f8:09:f2:92:a0:e1:fc:f3:7d:66:c9:f2:cf:
                    0d:46:a7:5e:f4:c7:e0:cf:17:c9:ba:72:e1:30:d1:
                    32:a5:f4:ac:91:e4:f4:5e:bb:be:7c:3c:d7:1a:ec:
                    77:7d:a0:ba:32:eb:ae:65:db:cd:15:e9:13:e8:24:
                    5a:b4:43:f0:13:73:4c:7d:7d:9e:da:b2:65:68:01:
                    6a:f6:b3:12:c2:ee:1d:c8:94:e5:98:22:3a:38:a4:
                    a2:df:f7:b1:57:2f:cf:55:4a:4c:a4:b4:47:a6:cb:
                    6a:8b:bb:8b:5b:6c:ef:70:cc:e5:e2:95:02:58:2b:
                    96:2d:70:97:f7:40:15:8d:cd:c4:d9:55:75:1f:ed:
                    3f:7b:35:db:db:6d:17:75:90:78:60:52:d7:cc:d6:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:95:70:AF:36:54:78:16:D0:A2:09:99:59:2D:B8:A1:D9:C5:94:89
            X509v3 Authority Key Identifier:
                keyid:F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135362e302f32332d3233203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:ca:eb:71:34:fd:53:d6:82:e6:20:f6:90:22:80:3e:31:31:
         08:27:1f:fa:86:4b:ee:60:a6:bb:1e:7c:33:1e:1f:63:19:8f:
         69:41:c7:c8:a5:4b:cb:36:71:1c:46:ed:af:60:04:d4:6d:34:
         46:ae:e3:7d:55:cb:67:93:6c:79:d7:69:2e:e0:73:1d:83:e7:
         5c:82:c1:4c:95:67:5a:ae:2e:c5:fd:56:71:15:92:c6:92:81:
         7d:15:ef:e0:30:ce:89:bf:bf:f1:79:79:91:c0:a5:2e:00:79:
         d2:36:eb:d0:bd:5d:8c:01:39:94:06:e0:c4:c1:63:05:6a:f1:
         f1:2b:94:5b:7b:42:cb:99:41:a3:0d:21:90:1f:9e:45:69:38:
         f7:ac:50:77:a2:29:b4:ba:73:6d:95:62:89:a8:2f:2d:0b:77:
         a6:19:0d:a7:a7:ea:fc:35:ae:44:15:db:ed:ea:d3:d0:4d:c2:
         aa:a9:f4:9a:f7:3b:53:05:14:af:1a:07:92:78:34:8f:1c:a3:
         4b:96:fc:d5:17:f4:56:c4:d1:1e:f2:da:83:6c:e3:fb:63:47:
         27:af:18:68:c0:df:96:7b:c9:60:f6:c6:cf:a9:da:48:0b:6e:
         28:1a:21:a3:01:9d:0f:22:ce:47:7d:64:c7:6b:28:46:18:09:
         74:ae:5e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org