Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135382e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3135382e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          qk4JlMDnJAPZkiJFHd0Vhr0m2bv0BrnsQHGRPgxC6yM=
Subject key identifier:   47:9B:91:05:78:2D:4C:0F:A3:B5:97:16:6D:FA:15:0C:14:6F:DD:56
Certificate issuer:       /CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
Certificate serial:       126283A3782D8A60621E9810DD66B319C7772850
Authority key identifier: F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135382e302f32342d3234203d3e203238313630.roa
Signing time:             Fri 08 Mar 2024 18:50:52 +0000
ROA not before:           Fri 08 Mar 2024 18:45:52 +0000
ROA not after:            Fri 07 Mar 2025 18:50:52 +0000
asID:                     28160
IP address blocks:        187.62.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:62:83:a3:78:2d:8a:60:62:1e:98:10:dd:66:b3:19:c7:77:28:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Validity
            Not Before: Mar  8 18:45:52 2024 GMT
            Not After : Mar  7 18:50:52 2025 GMT
        Subject: CN=479B9105782D4C0FA3B597166DFA150C146FDD56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bc:09:5b:e4:00:35:67:00:24:7f:1b:59:c0:
                    5d:d5:b1:66:a0:5e:c7:8b:71:9f:7b:32:8b:17:e2:
                    89:2b:1f:db:5c:0a:15:ae:8c:a9:a9:6a:f3:3c:d7:
                    f3:f9:5d:21:02:94:31:f7:5b:c5:fd:a7:f2:bc:8a:
                    69:d0:6e:e5:1e:80:23:b1:27:31:e7:e7:15:ee:0b:
                    07:85:da:8c:68:29:b1:63:4e:0f:19:6c:57:90:fd:
                    50:1a:2f:21:19:f8:b4:25:67:fe:31:ea:a0:30:e9:
                    c1:97:b8:b4:35:74:43:4a:f4:87:37:6b:e2:3a:18:
                    b1:5a:16:a3:f6:d5:e5:a6:49:1c:ce:a3:91:49:ea:
                    d5:db:c4:2e:f8:b1:0b:e6:99:65:fe:e3:e3:83:32:
                    1d:f3:60:7c:cb:fc:03:db:8a:10:db:e6:95:20:d5:
                    78:9d:1f:b8:d2:62:09:70:03:1b:bb:4e:25:6b:79:
                    31:be:48:ae:f1:56:5b:b3:40:78:47:2a:7a:13:99:
                    9d:2a:11:ed:a3:d8:dd:5e:8e:d7:d6:c0:b6:54:83:
                    a9:f0:1a:fb:66:bb:8e:c7:07:5e:ab:18:43:21:cd:
                    4e:79:6d:4a:73:d0:66:ff:cb:03:65:ac:6f:cc:b8:
                    33:f3:92:71:90:f7:e5:03:ab:52:2f:65:3e:80:85:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9B:91:05:78:2D:4C:0F:A3:B5:97:16:6D:FA:15:0C:14:6F:DD:56
            X509v3 Authority Key Identifier:
                keyid:F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135382e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8c:fe:1d:37:76:2e:52:1e:3c:86:4d:1f:8b:9e:12:77:45:
         37:1c:a9:f8:6f:ae:4d:0c:6c:28:67:4f:90:b9:e0:df:cf:61:
         1b:27:ee:ff:50:7a:a4:47:44:69:33:5b:df:02:d3:4f:87:1f:
         b9:6b:80:92:3e:fd:eb:09:a3:02:17:9f:2f:b3:43:84:35:c5:
         e2:60:25:08:fe:00:6a:72:c2:71:c5:ee:09:e1:52:0c:b9:4c:
         3b:a9:11:c0:24:05:4b:9c:f7:a0:8a:c3:34:3c:53:5b:0b:b6:
         14:47:22:e6:cf:89:31:29:37:45:15:37:47:73:c3:69:5d:31:
         5b:e1:a7:04:d5:63:76:f0:0b:66:2d:8f:0a:6c:d4:54:38:d4:
         99:d8:00:cd:6b:3b:76:e2:b0:b5:13:af:37:1c:c7:23:f7:f2:
         67:6c:49:32:ba:46:39:15:1a:ae:c3:07:da:dc:69:66:da:77:
         bd:cf:cc:cb:fd:78:c6:84:0a:c0:be:70:d4:65:00:65:7c:06:
         b2:89:dd:6a:45:30:60:31:1e:89:9f:fc:3f:11:5a:f4:60:c2:
         ab:2e:21:f2:0b:0f:a7:56:65:af:b8:d8:b8:67:60:76:24:de:
         37:8b:85:8f:c6:8f:dd:cc:1d:84:ed:e7:93:c8:8f:74:fe:5b:
         9a:fe:1f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org