Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135392e302f32342d3234203d3e203238313630.roa
File:                     3138372e36322e3135392e302f32342d3234203d3e203238313630.roa (raw, json)
Hash identifier:          gz6Jwk97gmvBznIhcryWlWWlT4zRkxio9/o24cXZfo4=
Subject key identifier:   CF:64:31:22:98:6A:D5:07:31:83:8F:46:D5:26:37:2C:B0:F3:10:8C
Certificate issuer:       /CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
Certificate serial:       39113A503199798F76FA641C647C856A5A744D4B
Authority key identifier: F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135392e302f32342d3234203d3e203238313630.roa
Signing time:             Fri 08 Mar 2024 18:50:53 +0000
ROA not before:           Fri 08 Mar 2024 18:45:53 +0000
ROA not after:            Fri 07 Mar 2025 18:50:53 +0000
asID:                     28160
IP address blocks:        187.62.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:11:3a:50:31:99:79:8f:76:fa:64:1c:64:7c:85:6a:5a:74:4d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Validity
            Not Before: Mar  8 18:45:53 2024 GMT
            Not After : Mar  7 18:50:53 2025 GMT
        Subject: CN=CF643122986AD50731838F46D526372CB0F3108C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:16:81:6a:a6:cd:46:11:b2:1f:c5:34:78:
                    61:e0:01:a8:69:a7:65:34:ad:dc:ba:35:32:9e:83:
                    e2:21:fc:1a:ca:55:8f:e3:24:d1:25:cf:bd:19:c7:
                    74:b3:c9:7d:a4:52:0a:e8:5e:78:e9:40:b7:2a:39:
                    8a:a5:d8:35:f5:e8:b4:93:be:db:86:0f:3b:ba:1a:
                    f4:8a:4a:92:99:a8:c5:a9:a1:bc:32:78:8d:04:9a:
                    92:ab:38:13:6d:93:e5:7c:1e:03:ae:1d:af:9a:61:
                    e3:67:04:34:14:15:56:a6:c3:89:62:37:68:d2:be:
                    6d:5d:7d:ad:24:05:ab:31:d5:19:b9:69:10:67:1e:
                    51:b2:07:04:15:46:1d:5b:ef:9f:b2:62:d6:8f:73:
                    a5:37:e1:32:98:cd:a1:d8:b5:3c:4c:80:57:70:4a:
                    cb:01:7d:3d:bc:fc:bb:19:20:dc:1f:da:5b:af:7c:
                    82:22:9e:70:75:cc:c0:1e:a1:a5:fa:a4:08:3f:8f:
                    40:1a:0a:2e:e4:4d:ad:33:c1:02:b2:96:a7:38:95:
                    98:00:9d:79:ff:9c:aa:27:be:16:e2:cf:7c:bd:a3:
                    c4:a0:e3:ee:2a:35:f5:03:3e:10:d5:9e:72:10:1c:
                    e1:4a:1b:c7:6a:ac:d7:e7:af:5b:30:6b:e9:8a:ed:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:64:31:22:98:6A:D5:07:31:83:8F:46:D5:26:37:2C:B0:F3:10:8C
            X509v3 Authority Key Identifier:
                keyid:F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135392e302f32342d3234203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:78:a3:9a:a9:06:f3:bf:b8:83:2a:02:45:35:59:e8:b0:d1:
         f2:23:4e:6d:6a:8e:16:94:bc:26:a0:f5:42:91:04:55:30:c8:
         54:a0:be:36:6a:46:80:f1:3a:5f:3c:d8:c3:22:9e:0b:b9:84:
         b3:a6:f9:39:6c:36:c6:38:10:02:3a:2b:e5:a2:83:90:81:ed:
         e9:73:18:75:42:b9:00:f5:9e:eb:23:88:10:5e:f8:3c:64:ce:
         06:6a:45:af:60:0c:27:4d:05:e6:9c:2b:63:a4:99:f4:ff:50:
         20:47:d1:c9:38:60:bf:bb:67:17:52:0e:6e:1c:5b:80:f1:81:
         0a:73:6c:6d:fc:dd:f2:65:54:77:91:bd:51:ab:f0:cd:0c:8f:
         79:22:ab:be:4d:71:db:7d:eb:65:66:95:ce:25:45:63:69:3f:
         be:6b:29:c0:d3:a6:e7:b8:1f:c3:8a:4a:db:2e:1a:77:c6:ca:
         ac:91:c3:3b:80:35:9e:2e:ba:81:1b:c8:37:2c:f6:f3:a5:bb:
         a8:b7:0a:95:f4:fb:a1:f9:6d:a4:be:3a:7b:a2:7e:48:e9:23:
         1f:17:af:72:22:e8:8c:09:00:44:4c:ca:96:a0:d7:24:83:73:
         13:16:6c:31:5b:a5:d4:95:98:3d:7a:60:c4:98:f7:6e:88:32:
         ab:a3:b2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org