Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32302d3332203d3e203533313732.roa
File:                     3138362e3232352e36342e302f32302d3332203d3e203533313732.roa (raw, json)
Hash identifier:          9C+G/7y4QwDngyZAkfrpKkVcHWZzM+14SYqNo0nxAOk=
Subject key identifier:   2C:B2:68:8A:C0:DD:20:C1:41:AD:3E:93:66:5C:6A:CD:EE:BB:DD:DD
Certificate issuer:       /CN=65EAAE564E4409FEE94B16BABD0C211A8B235616
Certificate serial:       2DE63CBB0DBC0E1440B399C28C531E8DAA8B1D8C
Authority key identifier: 65:EA:AE:56:4E:44:09:FE:E9:4B:16:BA:BD:0C:21:1A:8B:23:56:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65EAAE564E4409FEE94B16BABD0C211A8B235616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32302d3332203d3e203533313732.roa
Signing time:             Wed 26 Jul 2023 14:41:39 +0000
ROA not before:           Wed 26 Jul 2023 14:36:39 +0000
ROA not after:            Wed 24 Jul 2024 14:41:39 +0000
asID:                     53172
IP address blocks:        186.225.64.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e6:3c:bb:0d:bc:0e:14:40:b3:99:c2:8c:53:1e:8d:aa:8b:1d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65EAAE564E4409FEE94B16BABD0C211A8B235616
        Validity
            Not Before: Jul 26 14:36:39 2023 GMT
            Not After : Jul 24 14:41:39 2024 GMT
        Subject: CN=2CB2688AC0DD20C141AD3E93665C6ACDEEBBDDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:71:13:9b:9a:55:3d:38:dd:75:34:f2:02:96:
                    aa:84:a0:45:92:f3:ca:a9:0b:6c:35:12:ea:ec:59:
                    bf:b2:1f:b1:ed:e2:13:a3:07:23:e6:5a:55:af:9b:
                    62:39:84:88:b2:2e:13:57:a1:51:77:56:49:92:8b:
                    4f:86:7f:da:4e:1c:79:d2:d8:d6:63:0b:8b:b9:e8:
                    eb:8f:81:b7:df:b0:31:a4:c9:bc:2b:35:92:03:ba:
                    14:19:bf:75:de:29:3e:b1:e4:f2:72:9a:ac:fc:64:
                    53:d4:40:8b:e6:b2:55:64:13:ae:0b:ad:5a:25:3b:
                    49:50:9d:40:98:02:a9:98:96:e7:c0:06:3d:56:9c:
                    35:e0:e4:f1:37:69:1e:87:27:f2:fa:35:ff:8f:fd:
                    4d:35:f1:da:d5:19:79:31:e4:ae:18:9d:76:95:95:
                    8e:15:4d:d2:40:31:03:68:c2:5d:f6:ee:1a:3a:77:
                    5b:c1:21:dd:45:fc:72:45:0c:20:0e:67:e8:83:5d:
                    6f:76:f2:ae:29:b1:8d:bd:02:0c:20:11:54:9c:ee:
                    04:d6:46:03:bc:89:e7:c0:31:53:18:08:19:51:f8:
                    9f:ab:f2:e8:ae:27:14:c4:2b:f9:c9:68:9c:8a:0c:
                    48:7b:e6:c0:96:69:33:b2:95:55:f9:9f:fe:8c:e6:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B2:68:8A:C0:DD:20:C1:41:AD:3E:93:66:5C:6A:CD:EE:BB:DD:DD
            X509v3 Authority Key Identifier:
                keyid:65:EA:AE:56:4E:44:09:FE:E9:4B:16:BA:BD:0C:21:1A:8B:23:56:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/65EAAE564E4409FEE94B16BABD0C211A8B235616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65EAAE564E4409FEE94B16BABD0C211A8B235616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32302d3332203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:c1:0c:90:da:69:40:20:e2:c0:10:08:65:c8:8f:bf:41:cf:
         85:a0:22:9c:0b:3f:51:74:97:47:c6:09:d2:cf:9c:da:67:d3:
         a1:93:aa:1d:99:56:b2:e6:11:f9:1e:6b:4a:ab:38:4d:7d:16:
         60:d8:24:e1:4b:11:43:bc:e8:8d:f6:e7:3d:5b:54:61:ab:b7:
         16:50:86:d2:79:f2:db:1d:c7:c5:35:58:68:78:08:80:78:b6:
         cc:cb:ab:39:30:17:1e:05:64:1b:50:cf:3e:93:44:d3:5f:ce:
         2b:fa:dd:90:27:fc:4c:e5:34:0d:d7:3a:36:7c:30:54:c2:30:
         ed:95:c3:b2:61:b9:af:fd:98:68:8d:c0:c4:9e:cc:c4:4a:26:
         f1:51:56:bf:ea:45:4b:4f:58:41:c1:99:76:a0:e2:d7:bb:13:
         bd:9c:08:47:94:99:eb:42:ea:b8:e5:a1:b5:71:c5:ef:04:0e:
         f7:97:4f:cc:45:f3:2a:aa:4b:a9:70:c5:5d:c3:44:51:94:94:
         0e:4b:c3:3c:91:9c:a8:49:09:af:dc:c3:eb:24:67:55:b2:f0:
         08:d9:d1:cb:aa:ce:6e:ec:cd:89:d2:70:b1:7f:e7:43:fd:cd:
         4a:fd:2a:49:2c:80:64:e5:21:7f:fa:41:dc:19:49:ca:91:ce:
         50:33:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org