Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135372e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3135372e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          8ds1WzbnKvGQarfgolwTFA5AUl5GCyCNVkAukIzX064=
Subject key identifier:   21:49:8C:AC:A7:59:2E:65:34:E7:BC:2F:8D:D3:02:9E:50:4A:2B:7B
Certificate issuer:       /CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
Certificate serial:       764F21F5AC180F55FC3F669D29A58A7CEC71CA87
Authority key identifier: F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135372e302f32342d3234203d3e203238313630.roa
Signing time:             Fri 08 Mar 2024 18:50:52 +0000
ROA not before:           Fri 08 Mar 2024 18:45:52 +0000
ROA not after:            Fri 07 Mar 2025 18:50:52 +0000
asID:                     28160
IP address blocks:        187.62.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4f:21:f5:ac:18:0f:55:fc:3f:66:9d:29:a5:8a:7c:ec:71:ca:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Validity
            Not Before: Mar  8 18:45:52 2024 GMT
            Not After : Mar  7 18:50:52 2025 GMT
        Subject: CN=21498CACA7592E6534E7BC2F8DD3029E504A2B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:06:f1:61:dc:5a:c5:24:2d:e3:ba:49:cb:c7:
                    21:ea:86:d6:82:30:db:db:51:ca:89:94:49:41:f3:
                    6f:33:17:e6:6a:21:ab:e5:66:6b:6a:ee:f0:6b:aa:
                    f2:89:5e:b0:8f:06:20:82:6f:00:23:f4:87:4a:b2:
                    28:50:3e:cd:f8:38:fc:85:83:6b:93:7f:6b:e7:bd:
                    9c:d7:b6:63:bd:3b:7d:e2:e1:bb:40:55:99:75:f4:
                    9b:b0:68:a4:4b:72:80:86:da:90:5e:96:27:fc:c4:
                    38:cb:20:76:c4:52:06:ea:9a:25:27:fb:db:ab:e6:
                    a8:fa:17:b9:6a:22:45:ef:f8:26:d5:a6:35:0b:0c:
                    31:74:8f:9b:3c:13:14:f3:2a:24:cb:44:7d:42:12:
                    59:89:d6:d9:e8:64:b6:d1:15:21:50:46:56:47:9a:
                    47:61:3f:87:7f:01:cf:bb:1f:f0:68:9d:bc:c7:e2:
                    64:7e:c7:3b:1b:7a:c2:5f:61:bf:35:db:4f:b0:6b:
                    8c:21:cd:57:c1:2b:4e:3e:8b:a4:84:61:81:e8:e0:
                    6c:c3:77:7e:c6:80:be:a8:03:14:c2:8f:23:a7:6f:
                    75:f2:c6:f2:89:17:08:8a:66:5e:0b:c3:10:7f:c2:
                    2a:dc:d1:37:26:b1:44:fc:74:6d:60:e7:ef:f0:75:
                    1d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:49:8C:AC:A7:59:2E:65:34:E7:BC:2F:8D:D3:02:9E:50:4A:2B:7B
            X509v3 Authority Key Identifier:
                keyid:F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135372e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:7d:d0:f2:c2:53:5e:fd:91:e9:cc:69:ce:54:82:79:af:b5:
         ec:58:b5:2b:70:ac:56:ac:c5:ca:da:a1:1c:e8:3c:a8:71:97:
         a7:07:14:d7:29:9b:a7:85:38:09:b7:f8:2a:65:bc:59:59:12:
         ab:0a:4e:9e:f5:fd:8b:6c:63:dd:80:03:e3:1d:bd:0f:a7:b9:
         54:59:b7:c3:4e:8b:aa:44:39:37:9f:11:80:ae:65:47:fc:d0:
         02:0f:96:2a:99:68:54:8e:bb:9f:39:26:92:b6:e5:94:a6:7e:
         18:75:43:dc:c5:ca:d7:86:73:57:e8:12:1c:9d:40:b4:63:70:
         2d:6a:5a:4e:69:ef:0b:8a:eb:4d:2d:b3:bf:21:9c:90:88:1c:
         9d:ef:b1:54:3a:31:e1:9e:3e:82:b6:c1:8d:50:04:91:50:36:
         d2:ac:0d:90:58:31:6d:75:7c:2e:81:4f:a5:31:ab:f4:08:0b:
         72:77:d9:95:aa:e9:42:2f:34:dc:a0:28:bd:41:a9:bf:a8:5d:
         74:cc:25:c7:01:96:49:55:e9:ec:bc:10:35:21:6d:25:ab:c3:
         26:81:e9:1f:4f:b7:e5:b4:ad:35:28:0b:6f:24:fc:a2:d6:ad:
         6d:24:39:8c:0d:02:e5:c8:c8:72:8f:5f:ad:f0:05:62:b1:0e:
         b5:0e:28:3b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdk8h9awYD1X8P2adKaWKfOxxyocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjcwMzQ5NTk0MDU5Q0VDQUIzRDk3MzNBNkNDRDhFQjFD
MEI2MkZDNzAeFw0yNDAzMDgxODQ1NTJaFw0yNTAzMDcxODUwNTJaMDMxMTAvBgNV
BAMTKDIxNDk4Q0FDQTc1OTJFNjUzNEU3QkMyRjhERDMwMjlFNTA0QTJCN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZBvFh3FrFJC3juknLxyHqhtaC
MNvbUcqJlElB828zF+ZqIavlZmtq7vBrqvKJXrCPBiCCbwAj9IdKsihQPs34OPyF
g2uTf2vnvZzXtmO9O33i4btAVZl19JuwaKRLcoCG2pBelif8xDjLIHbEUgbqmiUn
+9ur5qj6F7lqIkXv+CbVpjULDDF0j5s8ExTzKiTLRH1CElmJ1tnoZLbRFSFQRlZH
mkdhP4d/Ac+7H/BonbzH4mR+xzsbesJfYb8120+wa4whzVfBK04+i6SEYYHo4GzD
d37GgL6oAxTCjyOnb3XyxvKJFwiKZl4LwxB/wirc0TcmsUT8dG1g5+/wdR2tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIUmMrKdZLmU057wvjdMCnlBKK3swHwYDVR0j
BBgwFoAU9wNJWUBZzsqz2XM6bM2OscC2L8cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3ZXalVyMVN5Z1VDbXFacllFWkwyS0p6aWdvRVJ5UWc0ZEFxbWFmTGFB
VXQvMC9GNzAzNDk1OTQwNTlDRUNBQjNEOTczM0E2Q0NEOEVCMUMwQjYyRkM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y3MDM0OTU5NDA1OUNFQ0FC
M0Q5NzMzQTZDQ0Q4RUIxQzBCNjJGQzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N2V2pVcjFTeWdVQ21xWnJZRVpMMktKemlnb0VSeVFnNGRBcW1hZkxhQVV0LzAv
MzEzODM3MmUzNjMyMmUzMTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz6dMA0GCSqGSIb3DQEBCwUAA4IBAQB3fdDywlNe
/ZHpzGnOVIJ5r7XsWLUrcKxWrMXK2qEc6DyocZenBxTXKZunhTgJt/gqZbxZWRKr
Ck6e9f2LbGPdgAPjHb0Pp7lUWbfDTouqRDk3nxGArmVH/NACD5YqmWhUjrufOSaS
tuWUpn4YdUPcxcrXhnNX6BIcnUC0Y3AtalpOae8LiutNLbO/IZyQiByd77FUOjHh
nj6CtsGNUASRUDbSrA2QWDFtdXwugU+lMav0CAtyd9mVqulCLzTcoCi9Qam/qF10
zCXHAZZJVensvBA1IW0lq8MmgekfT7fltK01KAtvJPyi1q1tJDmMDQLlyMhyj1+t
8AVisQ61Dig7
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org