Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34372e302f32342d3234203d3e203238323436.roa
File:                     3138372e312e34372e302f32342d3234203d3e203238323436.roa (raw, json)
Hash identifier:          yxYC8ZikC2n3slVQ3wLyKygCDx6sGe/qz04KtAZElOM=
Subject key identifier:   74:F2:8B:62:87:1F:EB:80:12:6F:1D:D5:C4:14:7B:A3:DC:C6:F2:73
Certificate issuer:       /CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Certificate serial:       7FE1B4C3F38EA3B4792F049DCBEAF159E7DC781C
Authority key identifier: 42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34372e302f32342d3234203d3e203238323436.roa
Signing time:             Thu 14 Dec 2023 14:57:24 +0000
ROA not before:           Thu 14 Dec 2023 14:52:24 +0000
ROA not after:            Thu 12 Dec 2024 14:57:24 +0000
asID:                     28246
IP address blocks:        187.1.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e1:b4:c3:f3:8e:a3:b4:79:2f:04:9d:cb:ea:f1:59:e7:dc:78:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
        Validity
            Not Before: Dec 14 14:52:24 2023 GMT
            Not After : Dec 12 14:57:24 2024 GMT
        Subject: CN=74F28B62871FEB80126F1DD5C4147BA3DCC6F273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:71:3c:d1:b2:69:90:9d:58:cf:c5:43:3a:
                    56:ad:e3:17:b6:66:d2:15:09:4f:93:08:d4:8d:63:
                    df:25:2e:c0:5b:2d:c9:ce:d3:b8:49:0b:ab:b1:78:
                    1b:97:e6:3e:ce:c3:a1:9e:29:65:b0:aa:42:3d:c6:
                    75:7e:88:99:84:5b:25:92:2a:45:e0:78:01:7b:88:
                    a3:d6:27:06:23:e5:f5:9d:2b:03:fc:9d:3c:e1:1a:
                    eb:f3:d6:31:24:5f:27:16:6b:32:ca:b4:af:77:c5:
                    42:4a:5e:b9:14:1b:28:86:62:85:da:08:ff:4a:5d:
                    30:e2:05:62:30:b8:45:5e:64:c6:c8:4b:a8:c6:b3:
                    87:4a:38:bd:94:7b:78:54:b6:99:4c:97:52:30:d5:
                    2c:03:ed:2a:43:75:34:0e:8e:19:f4:60:67:f6:b1:
                    4f:52:5a:c7:b4:f1:09:41:9e:a5:ac:bc:cd:f4:dd:
                    aa:1d:c1:ed:6b:fb:0f:54:50:f5:97:e7:33:e9:75:
                    9c:c3:16:b1:8e:61:a0:da:b2:4f:dc:9f:4b:7d:c1:
                    9c:fe:84:21:c0:bb:0f:9a:e5:c2:6e:27:c3:07:f2:
                    dd:66:a5:e9:d2:a9:fa:25:1a:ff:a0:4b:88:76:2b:
                    62:b9:e7:d2:86:79:ca:27:28:25:20:68:1c:a4:d1:
                    db:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F2:8B:62:87:1F:EB:80:12:6F:1D:D5:C4:14:7B:A3:DC:C6:F2:73
            X509v3 Authority Key Identifier:
                keyid:42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34372e302f32342d3234203d3e203238323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:8e:5c:81:33:f6:51:cd:5e:68:57:68:d9:d7:04:e5:34:b0:
         fd:4f:66:a9:f5:04:b8:77:33:96:90:c9:a1:93:ba:69:b0:24:
         da:39:b5:63:35:be:41:f4:bd:7e:96:da:40:0e:0f:04:0d:8b:
         bd:48:d2:3d:aa:45:be:79:4d:06:5d:eb:e8:82:5e:60:5f:68:
         a3:7e:86:d7:85:17:99:60:de:11:68:32:29:61:ca:2c:da:44:
         0f:0d:79:03:05:fb:06:6a:2f:67:46:ab:77:fb:6e:88:fd:11:
         5a:6b:f9:d0:b0:81:88:93:16:90:8e:86:68:57:63:cc:e2:f2:
         d0:6d:25:0a:4e:c3:a8:97:c5:4f:7d:99:94:94:2a:3a:49:e9:
         05:51:68:3d:f3:2e:cd:85:fd:21:bc:30:63:01:61:de:4f:49:
         1c:44:10:a9:c6:4e:14:d5:ae:29:b4:b0:51:ac:83:95:6b:77:
         9e:ca:8f:a4:45:c6:5e:54:8a:df:49:61:a2:cc:c8:8a:60:85:
         d0:d3:61:0e:d5:c5:22:04:6a:6c:dc:3a:77:d7:70:ef:43:c7:
         75:a5:34:f2:18:58:d9:ff:7d:4e:20:76:08:64:44:30:42:85:
         15:e4:0b:b2:97:c6:4f:2c:ef:ad:d3:cb:17:84:f0:7b:6e:62:
         77:3a:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org