Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32302d3234203d3e203533313732.roa
File:                     3138362e3232352e36342e302f32302d3234203d3e203533313732.roa (raw, json)
Hash identifier:          m+uQNwg+gcMwh1zVdMCFggchKgIid5PtjTerQjW2vsw=
Subject key identifier:   EE:57:46:30:1A:FB:51:4B:DE:55:2F:94:35:6B:5A:31:09:74:ED:D6
Certificate issuer:       /CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
Certificate serial:       26AA7113B5D520F28E20059ED30A332AA20FE8F7
Authority key identifier: C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32302d3234203d3e203533313732.roa
Signing time:             Thu 11 May 2023 18:22:02 +0000
ROA not before:           Thu 11 May 2023 18:17:02 +0000
ROA not after:            Thu 09 May 2024 18:22:02 +0000
asID:                     53172
IP address blocks:        186.225.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:aa:71:13:b5:d5:20:f2:8e:20:05:9e:d3:0a:33:2a:a2:0f:e8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
        Validity
            Not Before: May 11 18:17:02 2023 GMT
            Not After : May  9 18:22:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:8c:90:89:90:88:11:1c:21:13:2b:2d:d7:
                    15:ab:69:00:9b:87:30:5b:22:0f:bc:f1:b3:e5:05:
                    a6:6d:f7:d0:d6:dd:95:08:fe:21:2a:10:f9:66:72:
                    ea:9f:94:c0:7d:01:79:ed:9d:69:d5:68:c2:df:2e:
                    1b:ba:a7:fc:69:c2:72:62:6c:ac:aa:3a:92:61:40:
                    20:44:d9:03:70:40:b0:1a:41:c4:eb:67:3e:ee:17:
                    ce:8e:d6:b7:86:45:10:df:49:17:81:f1:ee:41:1d:
                    8a:a5:32:66:a5:b9:12:97:67:f7:20:7e:2b:03:79:
                    88:21:80:55:21:b6:0e:5a:3b:3d:a1:ae:0f:80:96:
                    e8:21:80:90:77:47:11:18:b5:50:ac:7e:9b:c3:1f:
                    7d:c7:c3:22:b1:b5:39:31:d2:1b:f5:d4:c5:c9:7e:
                    62:ad:a1:8b:16:33:a6:4d:92:16:7d:62:a6:53:3b:
                    3a:60:80:a0:d2:37:6e:35:0f:44:5e:04:4a:71:ec:
                    72:c9:b8:63:06:e9:65:87:16:2a:4c:1a:ef:44:44:
                    30:40:1f:09:51:3b:43:d6:70:d4:eb:70:89:09:7f:
                    1b:06:85:7b:30:09:af:a0:6c:37:e2:3c:86:67:a9:
                    2f:55:7a:65:d7:df:6b:4e:88:7b:9e:4a:ca:69:92:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:57:46:30:1A:FB:51:4B:DE:55:2F:94:35:6B:5A:31:09:74:ED:D6
            X509v3 Authority Key Identifier:
                keyid:C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32302d3234203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:20:b1:fe:e5:aa:ee:7e:b2:5c:94:0d:16:79:79:af:3b:a8:
         c6:70:b1:ba:33:6d:20:34:ea:24:14:f5:b0:e4:7b:dc:30:fa:
         18:19:68:5d:97:cc:c7:f7:b7:7a:37:a7:54:1f:7e:a8:11:1b:
         fc:3e:e6:61:8f:78:c0:a5:e0:08:b0:6a:39:6f:27:ca:91:2f:
         53:5d:af:23:15:c3:22:65:dd:a8:db:12:16:d1:85:13:0c:71:
         c5:5d:d8:2d:63:36:ca:64:d6:8f:97:65:70:80:3c:54:48:77:
         4c:bb:35:77:16:be:a2:9b:da:84:f4:3d:04:8d:86:8d:f3:b6:
         c3:f0:2c:fd:f8:ac:eb:ec:a1:e3:f0:1f:44:a5:07:0b:96:04:
         30:72:50:8c:fd:ee:ca:30:60:45:02:40:2e:4c:f7:5f:a1:e0:
         e2:16:38:1b:a1:d8:28:3e:70:24:15:7d:d4:ab:83:c7:e4:3b:
         00:d6:85:df:5a:55:90:2c:ba:a5:00:04:92:f7:fb:ed:df:4c:
         f7:c9:90:31:64:f4:cd:75:c7:1c:ca:81:58:64:22:5b:85:1e:
         6a:db:e4:9b:6b:b2:53:da:32:32:82:bc:a8:34:4e:f1:03:b7:
         14:12:ff:33:26:c9:6d:e7:50:4b:a8:69:24:a8:41:cd:84:c6:
         73:70:8a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org