Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/0/3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa
File:                     3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa (raw, json)
Hash identifier:          vv6r5vmDXnK+kPP+2DuMaaost1JH4rHcCFeK0dEGaSg=
Subject key identifier:   F5:33:10:0D:2C:43:89:A3:BB:3E:17:A9:A2:8C:68:C8:F7:14:D6:03
Certificate issuer:       /CN=283286E3CE36E5F73327A1AE15CA2FCB177BD3DC
Certificate serial:       0BE8DF8C13CA0235926B5DC5B0448EB1AC9AED0E
Authority key identifier: 28:32:86:E3:CE:36:E5:F7:33:27:A1:AE:15:CA:2F:CB:17:7B:D3:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/283286E3CE36E5F73327A1AE15CA2FCB177BD3DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/0/3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa
Signing time:             Thu 13 Jul 2023 20:17:26 +0000
ROA not before:           Thu 13 Jul 2023 20:12:26 +0000
ROA not after:            Thu 11 Jul 2024 20:17:26 +0000
asID:                     270991
IP address blocks:        187.103.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e8:df:8c:13:ca:02:35:92:6b:5d:c5:b0:44:8e:b1:ac:9a:ed:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283286E3CE36E5F73327A1AE15CA2FCB177BD3DC
        Validity
            Not Before: Jul 13 20:12:26 2023 GMT
            Not After : Jul 11 20:17:26 2024 GMT
        Subject: CN=F533100D2C4389A3BB3E17A9A28C68C8F714D603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:4b:94:40:dc:54:ac:eb:d5:1b:69:cd:b3:
                    45:58:56:6e:87:bb:3e:ca:ac:be:00:05:55:39:1c:
                    28:0e:cc:8c:e1:e2:7a:af:fb:df:06:2b:61:ba:bd:
                    2d:1a:3a:f5:9e:74:98:2f:3b:52:04:9a:cf:9c:e8:
                    31:08:f6:b7:f1:88:3c:25:39:18:5b:07:b1:73:c7:
                    77:8c:c4:88:46:b5:56:0f:a0:3e:25:e3:b7:83:d0:
                    86:06:c9:2c:64:3f:18:a5:91:e4:3c:26:f4:0d:4c:
                    32:9d:a5:44:f2:94:a2:12:61:db:69:a1:1a:ae:cb:
                    e6:67:8a:43:a4:e1:9d:a1:a6:67:1b:e8:ac:d7:0a:
                    4a:4b:5c:7f:95:e8:2f:1d:cc:dd:2e:aa:ad:ab:34:
                    45:4f:f1:c0:09:00:92:37:c3:c0:bd:a4:3c:de:10:
                    17:2b:23:51:5f:f6:b5:26:55:b6:01:cb:49:58:76:
                    c0:06:cb:96:b5:d4:f3:02:9f:b1:98:a2:da:94:e4:
                    a3:c7:d4:42:74:2e:53:02:59:80:b0:94:60:9d:21:
                    c8:c6:72:9d:98:4d:04:25:2f:13:2c:7a:30:ab:f6:
                    f0:3b:ec:1e:d9:7f:2d:38:58:7c:8b:98:e3:82:3e:
                    a1:82:5b:24:ee:14:d4:85:59:28:56:b3:24:b8:b9:
                    0f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:33:10:0D:2C:43:89:A3:BB:3E:17:A9:A2:8C:68:C8:F7:14:D6:03
            X509v3 Authority Key Identifier:
                keyid:28:32:86:E3:CE:36:E5:F7:33:27:A1:AE:15:CA:2F:CB:17:7B:D3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/0/283286E3CE36E5F73327A1AE15CA2FCB177BD3DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/283286E3CE36E5F73327A1AE15CA2FCB177BD3DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/0/3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:4f:78:21:e9:76:f2:7b:7b:04:73:1f:11:d2:3a:df:af:50:
         27:00:fe:68:46:72:8d:24:6a:99:4c:81:a9:75:0e:72:21:4d:
         c6:71:54:6e:96:01:7e:ae:f2:a1:94:f3:5e:78:c6:8e:9c:6e:
         5d:7e:70:72:6c:85:71:69:4f:2f:6a:7d:e6:8e:cb:85:34:61:
         24:f8:2e:ee:db:25:87:00:9b:e9:ed:d3:1c:b3:08:37:79:78:
         c4:ef:3e:35:0b:19:35:5b:b8:d4:69:8a:ac:2a:1f:78:31:49:
         62:f4:d3:45:e5:0f:a6:38:7c:da:ef:68:7b:d0:ed:32:30:86:
         cf:d1:8a:47:ce:ae:72:62:b7:91:c8:7c:ad:d9:0b:1e:eb:87:
         53:a3:b0:18:6f:0f:df:46:6e:7e:a8:1f:a7:dc:41:25:74:d1:
         cd:97:44:f0:7b:60:2f:b9:27:78:95:47:ec:6d:68:c8:81:4a:
         c9:0e:1e:89:b3:d4:10:25:b9:32:b3:db:d4:24:75:44:52:37:
         1f:81:6a:89:a4:06:90:4a:d4:58:73:a7:ee:db:1c:59:92:53:
         c9:63:6d:7a:de:1e:34:5b:1c:56:a7:12:52:23:fc:c9:6b:7e:
         3a:d1:47:7d:49:5d:77:39:ea:2d:a5:4b:7b:aa:c4:cc:96:c0:
         69:9a:13:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org