Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234372e302f32342d3234203d3e20323632363633.roa
File:                     3138372e36322e3234372e302f32342d3234203d3e20323632363633.roa (raw, json)
Hash identifier:          285Px1WqDEZsrZI61VhuwM+UQD/hvkJ1O9xpFYIoQzk=
Subject key identifier:   87:4E:F0:0A:AC:41:A0:B3:F8:B0:96:B1:71:E8:BD:F1:99:AF:AD:84
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       70E6B440D8AD25558A3522543ACDCF4C58D26512
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234372e302f32342d3234203d3e20323632363633.roa
Signing time:             Thu 04 Apr 2024 02:18:59 +0000
ROA not before:           Thu 04 Apr 2024 02:13:59 +0000
ROA not after:            Thu 03 Apr 2025 02:18:59 +0000
asID:                     262663
IP address blocks:        187.62.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e6:b4:40:d8:ad:25:55:8a:35:22:54:3a:cd:cf:4c:58:d2:65:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Apr  4 02:13:59 2024 GMT
            Not After : Apr  3 02:18:59 2025 GMT
        Subject: CN=874EF00AAC41A0B3F8B096B171E8BDF199AFAD84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bc:5a:17:eb:09:1a:ec:02:42:28:b7:f7:99:
                    fa:b0:21:95:2c:b6:72:82:40:b0:e3:d1:1e:2d:36:
                    4b:48:18:68:a6:74:ca:3c:b6:fe:e7:16:ee:27:d1:
                    b6:d5:55:a0:ce:de:12:a7:e6:55:1f:1a:38:77:fb:
                    96:cc:aa:e1:ce:78:b4:1a:d3:7d:5b:8a:b0:fa:38:
                    10:94:05:87:c1:d2:f0:c6:66:4a:47:65:b9:bc:24:
                    15:5e:8b:0a:92:1d:0f:cd:a5:80:4a:e6:03:f2:f9:
                    78:4c:96:c0:dd:d7:a8:aa:40:25:77:b4:b0:f8:7c:
                    b9:8a:cb:24:38:0e:68:bc:d7:1e:90:32:75:19:c4:
                    9c:20:f3:0f:6d:bb:bd:17:57:d2:35:88:f5:fe:74:
                    b0:e2:4f:52:30:fc:91:7e:63:a3:f6:a3:89:76:30:
                    96:7f:d2:6a:f1:7f:5a:f3:6b:2b:8f:d4:b4:fd:7c:
                    f2:14:7b:0b:73:df:1a:89:b1:b1:6e:04:20:2b:83:
                    91:f3:03:2d:f8:af:0c:3a:76:57:a6:74:f8:57:0e:
                    26:aa:e1:e5:5b:77:43:44:98:8e:09:4f:17:df:20:
                    5b:23:a0:c5:eb:cf:9c:a1:73:43:17:01:93:da:50:
                    cf:67:cf:c6:65:12:a2:63:7c:98:44:4c:f5:d2:8a:
                    1a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4E:F0:0A:AC:41:A0:B3:F8:B0:96:B1:71:E8:BD:F1:99:AF:AD:84
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/3138372e36322e3234372e302f32342d3234203d3e20323632363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:71:8c:d8:31:63:1a:1c:7f:c6:d7:36:e9:52:d3:2d:20:06:
         0e:3e:2f:3e:3c:a5:20:75:1c:88:b3:43:74:e6:81:d7:54:44:
         b8:0e:b3:c4:3a:c7:8f:3e:c4:f4:b4:2b:f0:0b:df:76:d8:06:
         fb:8a:b9:67:a2:db:f4:b0:2b:55:03:c6:96:c1:ac:e5:76:d8:
         35:eb:5b:36:be:ed:3e:fc:f6:8e:30:17:5a:aa:dd:c9:cf:87:
         35:d2:98:aa:0d:f5:3e:26:b6:b2:01:95:dd:3e:67:36:9b:2a:
         a6:6f:08:f6:82:ba:5d:e6:54:a7:d0:a8:ee:30:22:40:16:cc:
         02:64:7a:53:2c:14:c8:4e:84:ea:1b:1d:d9:c2:aa:13:53:00:
         3d:55:a2:b1:08:32:6e:61:f6:6b:dc:b2:3b:b7:6f:b3:42:0a:
         90:fd:5b:80:2e:84:f3:c8:ae:f1:43:5b:66:b0:44:64:53:8b:
         c1:95:c8:ba:05:ff:31:e2:00:a4:73:c3:52:a5:00:08:3d:5a:
         64:53:68:52:2f:f1:98:57:93:a0:68:33:c9:a2:c2:c9:96:db:
         6c:e7:e8:49:2d:1f:70:9a:80:d3:3b:83:38:ff:e7:22:18:56:
         93:66:6f:9f:25:cf:1a:bd:73:e8:7a:0f:45:8e:c4:0b:96:00:
         53:88:91:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:43:02 2025 by rpki-client