Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32302d3230203d3e203533313732.roa
File:                     3138362e3232352e36342e302f32302d3230203d3e203533313732.roa (raw, json)
Hash identifier:          dmenOkaaFGtf1rITMHFisPOR7KArIdb+t3WRyz2IXlU=
Subject key identifier:   99:57:05:F4:DA:07:2D:AC:AD:7D:FC:5B:08:19:E8:69:9F:53:B6:7C
Certificate issuer:       /CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
Certificate serial:       44676343093F13DCCC1F150B822E4F1749001E87
Authority key identifier: C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32302d3230203d3e203533313732.roa
Signing time:             Thu 11 May 2023 11:12:05 +0000
ROA not before:           Thu 11 May 2023 11:07:05 +0000
ROA not after:            Thu 09 May 2024 11:12:05 +0000
asID:                     53172
IP address blocks:        186.225.64.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:67:63:43:09:3f:13:dc:cc:1f:15:0b:82:2e:4f:17:49:00:1e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
        Validity
            Not Before: May 11 11:07:05 2023 GMT
            Not After : May  9 11:12:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:d1:0f:5d:39:a2:b9:26:0f:99:b3:b6:e9:
                    8f:8e:61:e9:7d:d7:94:ca:40:68:ba:c5:ce:18:ac:
                    b2:96:b3:f5:f0:a1:33:e4:a2:fa:5e:c6:94:16:b5:
                    c0:6d:dd:7f:f2:43:05:ee:04:c2:17:44:6e:81:1a:
                    79:4b:7f:32:d9:03:29:04:db:4b:01:ad:68:87:1a:
                    04:69:cf:79:f6:36:27:dc:e8:e7:5c:f1:64:8e:9c:
                    fd:65:df:ea:2f:35:85:97:f3:ee:9e:4f:22:41:e4:
                    d3:51:66:48:a3:f7:92:c0:ed:20:d8:39:de:47:57:
                    8a:b7:6f:8b:39:4c:bd:5c:07:72:ef:89:b3:a7:d9:
                    35:39:38:3c:03:e8:8d:5d:1f:ab:ed:35:b2:c6:91:
                    ea:ac:b0:96:db:bd:ac:6b:c7:4e:99:df:2b:60:8f:
                    d2:a3:dd:8a:eb:18:9e:68:5f:bf:da:48:50:8b:5c:
                    cb:aa:b2:0e:a8:45:76:18:26:1b:23:b6:55:d7:1d:
                    42:a0:85:93:db:1f:ad:f3:38:c5:ee:d8:c3:13:86:
                    d7:ee:0d:b3:85:18:69:f9:fb:d7:e5:cb:26:93:b2:
                    fa:5c:d2:e6:49:6d:72:a2:99:bf:d4:d5:a8:75:44:
                    96:b9:07:46:0d:a2:ee:8b:1c:b5:9b:a6:55:71:ae:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:57:05:F4:DA:07:2D:AC:AD:7D:FC:5B:08:19:E8:69:9F:53:B6:7C
            X509v3 Authority Key Identifier:
                keyid:C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32302d3230203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bd:b5:0f:b0:50:29:07:34:c5:2f:ff:c5:e7:30:2e:5c:11:b0:
         e6:44:34:65:41:bc:20:ec:37:5b:ed:f9:c2:c4:39:51:2a:61:
         52:4f:1e:4f:1c:f3:21:9d:66:78:54:4e:9c:73:43:f9:6c:0b:
         16:c1:3e:93:af:da:c3:f9:76:82:6d:c0:f9:44:f1:4c:35:09:
         0d:e9:84:41:ff:75:26:97:63:1c:1f:52:4e:66:4b:e6:29:12:
         9b:56:bf:a2:ea:87:04:50:10:1d:99:08:90:d1:c0:6c:15:cc:
         c3:98:84:4e:71:84:3b:aa:95:f0:63:e7:7e:2e:87:64:4f:34:
         19:bc:9f:5e:7c:26:be:7e:56:2f:1f:3b:ee:bb:7d:22:e9:e1:
         63:52:26:c1:b3:0a:75:b5:d7:13:83:59:f9:a6:75:7b:2e:19:
         72:f9:5e:2b:9f:b0:88:f0:9d:1c:be:73:36:06:29:b1:ec:aa:
         24:35:c3:ae:5a:6e:c8:50:c0:fc:d0:c8:9b:36:66:a1:b4:1f:
         3a:22:15:29:bb:99:27:dc:f5:22:18:f4:af:a5:ed:3a:0a:85:
         1a:bb:fd:cc:c8:84:32:42:a1:a1:6a:94:ef:ba:ff:6c:12:d2:
         42:28:60:8c:35:eb:34:46:ee:00:d0:8e:27:66:c0:54:74:eb:
         72:43:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org