Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135322e302f32332d3233203d3e203238313630.roa
File:                     3138372e36322e3135322e302f32332d3233203d3e203238313630.roa (raw, json)
Hash identifier:          X136wyd8VMtLir+vR8znOv3m0U4R5xAC2FLS/kW0riA=
Subject key identifier:   E5:CB:40:6D:C9:16:0E:E4:FA:0D:7F:D2:E1:73:A0:B3:15:58:5D:42
Certificate issuer:       /CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
Certificate serial:       4F55B8573C8796EE2F43BEA68FCE28083EB7C996
Authority key identifier: F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135322e302f32332d3233203d3e203238313630.roa
Signing time:             Fri 08 Mar 2024 18:50:52 +0000
ROA not before:           Fri 08 Mar 2024 18:45:52 +0000
ROA not after:            Fri 07 Mar 2025 18:50:52 +0000
asID:                     28160
IP address blocks:        187.62.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:55:b8:57:3c:87:96:ee:2f:43:be:a6:8f:ce:28:08:3e:b7:c9:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F70349594059CECAB3D9733A6CCD8EB1C0B62FC7
        Validity
            Not Before: Mar  8 18:45:52 2024 GMT
            Not After : Mar  7 18:50:52 2025 GMT
        Subject: CN=E5CB406DC9160EE4FA0D7FD2E173A0B315585D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:f6:5d:e4:b5:5d:c8:38:c9:8f:fc:98:ed:
                    5d:ad:54:cf:64:22:68:26:b7:84:b3:69:f2:ff:35:
                    75:51:07:20:36:8e:82:a5:2e:b5:e7:ee:c0:d2:9b:
                    0e:77:07:7d:ba:88:2d:ab:b7:24:4d:78:ac:f0:30:
                    11:4d:a4:12:7d:36:6d:42:e4:08:43:8b:71:7f:9f:
                    42:34:0e:0f:13:5f:6e:29:10:62:52:95:c0:b2:74:
                    29:23:c7:e2:1c:1b:27:a8:c4:99:25:62:01:f3:82:
                    53:9b:2f:67:ef:ce:1c:83:87:cb:5a:68:a5:ce:26:
                    81:f4:0b:68:6d:87:6e:ff:00:96:78:f1:06:3d:31:
                    f1:5d:81:d3:e3:53:db:e5:cc:16:5a:7c:3a:b1:91:
                    12:42:ef:16:e1:a2:20:84:d4:ef:51:5f:a5:3f:08:
                    b3:45:d6:3f:db:3a:b3:9e:fc:ee:d2:69:ab:f2:cc:
                    f9:ad:24:50:1d:3e:e5:df:fc:e3:d4:9c:d8:e9:69:
                    17:72:62:9e:85:ce:e4:39:aa:f5:e5:ae:c5:f9:c1:
                    ac:2f:59:d4:60:a2:01:e1:ad:a6:5f:17:93:21:15:
                    bd:b6:7d:9f:a6:89:fa:af:1b:57:98:bc:1c:81:ee:
                    e8:27:8b:6b:21:32:12:de:3a:38:3b:9d:95:7e:7f:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CB:40:6D:C9:16:0E:E4:FA:0D:7F:D2:E1:73:A0:B3:15:58:5D:42
            X509v3 Authority Key Identifier:
                keyid:F7:03:49:59:40:59:CE:CA:B3:D9:73:3A:6C:CD:8E:B1:C0:B6:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F70349594059CECAB3D9733A6CCD8EB1C0B62FC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/0/3138372e36322e3135322e302f32332d3233203d3e203238313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:fd:3c:13:e4:86:16:c3:da:1f:ee:ba:2d:cf:23:46:59:e0:
         af:d8:4d:4d:ff:cd:64:38:96:db:e4:3c:57:4a:ce:46:78:9c:
         09:7f:dc:ba:69:9c:54:98:6a:19:9a:f8:ec:ef:b8:28:40:cd:
         c4:32:6f:71:39:c8:33:4a:8a:cc:d5:95:d8:81:b1:c6:ff:fe:
         2e:d6:d9:92:87:e9:b2:e2:2d:ae:af:e0:19:a9:5a:1b:19:7c:
         2c:73:69:6b:7c:d0:e4:ee:f8:0e:61:ed:f2:71:ec:c0:5e:bd:
         7f:0a:4f:4a:8b:1a:0e:b1:0f:36:c8:86:15:bf:98:8a:81:b9:
         80:33:30:59:63:28:71:3f:ea:d3:be:10:d2:8d:d9:e7:2a:0a:
         67:25:01:40:08:64:16:e0:75:7d:c7:32:49:1c:9a:88:de:4e:
         d6:5f:de:3b:be:b0:ab:3a:6c:9f:af:b1:26:17:47:e1:8e:d4:
         16:2c:e4:bb:55:7f:36:61:ee:a6:4b:f0:f6:15:a5:e8:ad:5a:
         c8:67:4e:ad:13:aa:f9:64:2a:d1:a5:2b:41:15:d9:09:01:61:
         f1:62:69:8c:10:36:6b:30:48:78:f0:d6:30:ca:9b:dc:2a:23:
         9b:c6:64:e3:ee:3d:7f:45:98:53:68:c5:d0:bd:0c:02:8e:18:
         f6:23:d8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:16 2024 by rpki-client on console.sobornost.net