Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/3138372e31372e3137362e302f32302d3234203d3e203238323634.roa
File:                     3138372e31372e3137362e302f32302d3234203d3e203238323634.roa (raw, json)
Hash identifier:          cWnJyFl06VjV+ndDBkcoEVW51spGvXvNDbNgO2LFHAY=
Subject key identifier:   69:7B:14:BD:E2:A3:45:19:74:B9:06:D6:9F:1D:70:9C:7D:1F:28:4A
Certificate issuer:       /CN=28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C
Certificate serial:       55173EFE5BBECC66F57E1BB7D25429F1972B2E5B
Authority key identifier: 28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/3138372e31372e3137362e302f32302d3234203d3e203238323634.roa
Signing time:             Mon 02 Oct 2023 12:21:43 +0000
ROA not before:           Mon 02 Oct 2023 12:16:43 +0000
ROA not after:            Mon 30 Sep 2024 12:21:43 +0000
asID:                     28264
IP address blocks:        187.17.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:17:3e:fe:5b:be:cc:66:f5:7e:1b:b7:d2:54:29:f1:97:2b:2e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C
        Validity
            Not Before: Oct  2 12:16:43 2023 GMT
            Not After : Sep 30 12:21:43 2024 GMT
        Subject: CN=697B14BDE2A3451974B906D69F1D709C7D1F284A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:c9:aa:77:91:43:fe:c9:ef:04:fb:8d:78:
                    3d:a3:24:8a:06:a1:35:a6:0c:ca:88:f8:e1:89:f6:
                    f4:bb:45:be:7e:09:ad:4a:ca:a2:41:30:a1:cd:df:
                    53:8f:ff:7d:57:66:f8:a1:fe:c6:a8:73:16:26:e8:
                    f5:d0:c9:91:04:29:51:5b:23:4d:11:a0:96:58:d6:
                    6b:c9:e1:bb:15:1f:c5:44:0a:58:96:6f:2f:72:29:
                    bf:73:1e:40:01:33:ef:43:27:76:07:92:77:a3:83:
                    97:35:79:52:69:5c:0f:3b:00:5c:33:cc:12:95:83:
                    99:19:0f:5b:a7:69:9e:2e:a7:03:15:20:1b:d3:e1:
                    54:db:89:c9:71:69:b6:a8:64:be:d7:77:db:04:8d:
                    57:e3:88:91:8f:11:90:31:fe:61:d0:00:cd:a7:f7:
                    b4:50:0a:1a:6f:e8:31:83:bc:f0:47:fb:80:7e:30:
                    da:38:d2:f4:52:79:01:35:08:cb:cd:3d:40:74:54:
                    fd:ed:8b:b3:d3:19:c5:68:af:32:f5:4b:8e:87:a5:
                    12:46:ee:20:82:1a:7b:ba:29:4f:e9:96:77:01:66:
                    ee:06:60:15:10:6e:ec:20:29:ce:92:c4:1e:bd:59:
                    3c:6a:f9:9e:de:13:dc:dd:8a:28:46:41:b3:69:a0:
                    62:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7B:14:BD:E2:A3:45:19:74:B9:06:D6:9F:1D:70:9C:7D:1F:28:4A
            X509v3 Authority Key Identifier:
                keyid:28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/3138372e31372e3137362e302f32302d3234203d3e203238323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:15:72:d7:34:3f:22:b9:12:2c:a0:cd:e7:63:17:eb:54:d5:
         eb:cf:1b:a7:52:aa:b5:92:cc:e8:1e:f5:70:49:e0:43:40:64:
         d6:6e:0d:76:76:cc:b0:19:7c:dd:c4:a7:c3:a2:03:af:5d:b9:
         13:ab:95:cf:8d:21:56:d3:fc:aa:6f:54:96:15:80:76:5c:50:
         24:c7:8f:83:d0:24:20:10:4d:c4:97:40:a9:0b:b6:30:8d:87:
         7e:ec:b9:01:fd:b6:ab:fd:aa:e5:23:03:71:e5:a7:28:78:e5:
         21:36:9c:ab:1c:c9:f3:af:74:c4:f5:e1:c2:95:66:d3:c2:c4:
         72:e7:86:70:cf:a9:df:69:81:49:a6:c6:ac:4c:bc:95:8e:c5:
         4d:bb:5f:24:7b:69:f4:97:f4:9e:11:7a:41:23:0b:af:01:d7:
         d1:1a:38:7c:37:bb:cc:1f:a0:c3:d7:27:62:29:06:7c:66:fa:
         89:71:64:22:11:b7:3d:14:d3:50:ed:fa:e8:bb:59:7f:0c:3c:
         4c:07:d1:18:c9:57:a6:37:d4:70:6c:3f:8d:8a:b4:87:4f:17:
         45:f0:c9:bf:bd:61:48:56:5a:db:7a:94:98:1a:c0:92:75:ed:
         1e:69:19:3e:66:d3:80:a5:b0:67:05:34:67:c5:59:37:bf:d3:
         fc:5c:7f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org