Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130302e302f32322d3234203d3e203238323736.roa
File:                     3138372e3130322e3130302e302f32322d3234203d3e203238323736.roa (raw, json)
Hash identifier:          FdCpDY55bOyDLsU+cFYfLgpr8yiFZ8ZqaWBbt3SALRE=
Subject key identifier:   0C:A7:DE:22:9D:EF:EA:CC:D0:24:24:BF:E3:1E:BE:74:D7:22:6C:62
Certificate issuer:       /CN=C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB
Certificate serial:       7D1E079E870215CCF148474EB42FFF88BC0C1C61
Authority key identifier: C6:2A:7A:DA:0E:B2:CE:E0:51:EC:52:1D:7A:D0:98:5B:89:3E:BF:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130302e302f32322d3234203d3e203238323736.roa
Signing time:             Fri 10 Feb 2023 14:16:00 +0000
ROA not before:           Fri 10 Feb 2023 14:11:00 +0000
ROA not after:            Fri 09 Feb 2024 14:16:00 +0000
asID:                     28276
IP address blocks:        187.102.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1e:07:9e:87:02:15:cc:f1:48:47:4e:b4:2f:ff:88:bc:0c:1c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB
        Validity
            Not Before: Feb 10 14:11:00 2023 GMT
            Not After : Feb  9 14:16:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6c:74:48:01:83:ca:6e:01:bc:57:e1:e8:a9:
                    6c:b1:73:d3:9b:ff:f7:20:7a:51:5f:ea:61:47:bd:
                    61:cf:bd:99:0a:2b:77:3f:53:c4:aa:81:0f:cb:ca:
                    64:ce:19:38:8b:dd:a3:69:74:47:8b:42:0f:b7:17:
                    e0:8e:6e:68:0c:b4:b1:ef:43:0d:a1:0f:79:7d:ba:
                    2a:bb:82:00:fd:82:2a:45:3d:dc:48:2c:05:e4:35:
                    33:29:5e:bb:2d:e6:75:ef:47:60:f6:88:99:e9:ef:
                    54:cd:38:a9:08:fb:34:cf:b7:db:a8:40:ca:3b:4d:
                    64:9b:2a:a3:47:56:1b:be:a8:3c:99:4b:4e:a9:0e:
                    a8:14:2d:f8:2a:66:58:ab:19:22:7e:07:f2:c3:6e:
                    94:ed:fa:91:a2:81:50:39:6d:5d:66:7a:c8:ca:94:
                    14:63:f4:77:6b:88:87:7b:3f:8b:8f:01:25:86:5a:
                    b6:fc:ea:ce:19:9b:35:69:e0:b0:1b:67:90:53:c5:
                    b8:3a:7f:03:2d:08:a0:e8:58:d6:9a:8d:57:dc:1b:
                    7f:d3:7d:ad:7a:f6:51:de:ad:0d:75:ea:05:28:7e:
                    17:eb:6b:4c:01:33:86:92:9b:32:fe:d1:99:30:92:
                    5b:89:6f:d6:b5:44:d1:18:af:77:3e:49:7f:f3:d7:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A7:DE:22:9D:EF:EA:CC:D0:24:24:BF:E3:1E:BE:74:D7:22:6C:62
            X509v3 Authority Key Identifier:
                keyid:C6:2A:7A:DA:0E:B2:CE:E0:51:EC:52:1D:7A:D0:98:5B:89:3E:BF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C62A7ADA0EB2CEE051EC521D7AD0985B893EBFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3130302e302f32322d3234203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:4e:b9:bb:ac:14:21:e0:ec:a8:1e:41:f1:40:2f:7f:10:7c:
         89:b9:69:e0:e7:f0:1f:3c:e5:bc:c2:c5:1b:82:66:86:e6:e0:
         57:7a:fc:a1:28:ad:18:f5:cd:38:c7:29:c4:3c:61:8f:44:ba:
         29:ab:b6:d9:fc:7f:87:b8:3b:80:0e:84:40:1f:0d:23:e6:97:
         59:06:4d:e1:f4:f1:05:d2:40:7a:79:35:83:37:19:35:72:b7:
         98:d7:bc:1f:29:32:4a:57:ae:c3:ce:d6:98:88:af:7b:1f:99:
         da:d2:2b:3f:b1:21:53:f1:10:a5:52:e7:fe:92:e5:1d:01:48:
         16:09:3a:d0:90:76:ce:e2:08:b8:3c:d7:15:4c:35:86:9d:54:
         08:40:ab:b2:be:01:cd:f9:90:b1:49:87:57:13:f1:02:e3:3f:
         ef:23:d8:4d:39:4e:89:b2:3f:ed:85:83:f8:a0:e9:5c:91:5e:
         79:8b:a6:09:10:58:16:0d:05:53:34:87:5c:d2:30:94:5e:aa:
         9a:eb:91:cd:19:23:13:79:e7:1c:2e:54:18:9d:00:e7:92:3c:
         19:dc:a9:d2:38:fe:9e:cb:6d:8b:f2:7b:23:e2:a1:90:34:1c:
         4e:12:b4:cc:7b:a9:5b:4e:c4:8e:e1:e6:a0:1c:98:62:06:30:
         94:9a:de:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:56:59 2024 by rpki-client on console.sobornost.net