Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32312d3231203d3e203533313732.roa
File:                     3138362e3232352e36342e302f32312d3231203d3e203533313732.roa (raw, json)
Hash identifier:          +OpjmoVBaTSykKhZPmSOBw5Y/a2gWJY8O95hDBdnNsw=
Subject key identifier:   14:F1:DB:EB:00:D1:3C:F7:1F:43:F8:7D:87:44:92:CE:9A:EB:46:35
Certificate issuer:       /CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
Certificate serial:       4DFE51CFDFE3A6E57EC85698C18098EA53BDF1B2
Authority key identifier: C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32312d3231203d3e203533313732.roa
Signing time:             Thu 11 May 2023 11:12:04 +0000
ROA not before:           Thu 11 May 2023 11:07:04 +0000
ROA not after:            Thu 09 May 2024 11:12:04 +0000
asID:                     53172
IP address blocks:        186.225.64.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fe:51:cf:df:e3:a6:e5:7e:c8:56:98:c1:80:98:ea:53:bd:f1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
        Validity
            Not Before: May 11 11:07:04 2023 GMT
            Not After : May  9 11:12:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:fd:d2:e2:66:63:f4:79:97:7b:48:50:cf:
                    1c:dc:dd:42:eb:47:2f:6e:e4:b7:b5:b6:f0:32:76:
                    2e:c3:c4:f1:84:a3:c5:f4:b8:9a:8f:cb:26:42:8a:
                    67:b0:12:51:42:7b:19:c1:01:18:e9:ab:0b:33:53:
                    57:29:b0:10:80:de:7e:c3:40:94:58:5c:c4:29:25:
                    d5:3c:95:09:bb:8e:cc:cb:4a:26:f7:72:42:64:18:
                    c7:51:e9:27:1b:ab:56:ac:99:f4:c6:0d:5b:b5:c4:
                    e4:9c:c9:e1:97:07:8a:59:ad:ad:46:6f:cf:ca:44:
                    2b:ad:64:2a:44:da:42:79:f2:ad:7c:2d:99:9d:33:
                    5f:78:55:20:2c:9b:54:b0:cf:25:92:3b:f5:31:c4:
                    f4:1b:e5:6a:0a:a2:54:f9:ce:af:c0:f7:08:56:64:
                    c4:01:bc:2a:d2:5a:e1:98:8c:8d:34:cb:ff:b9:da:
                    be:d6:f8:84:f9:be:cd:85:50:05:04:5f:36:d2:78:
                    e0:91:a7:2a:86:07:ac:2d:46:b3:d5:dc:be:2a:c5:
                    9e:b0:8f:bf:cf:e5:81:f5:33:69:16:91:c3:0a:31:
                    a4:77:e8:65:32:a0:62:ad:d0:a9:01:0f:f8:c1:ca:
                    9c:4b:38:f2:36:d3:8e:f0:9e:1e:0f:e2:de:23:94:
                    bf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F1:DB:EB:00:D1:3C:F7:1F:43:F8:7D:87:44:92:CE:9A:EB:46:35
            X509v3 Authority Key Identifier:
                keyid:C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32312d3231203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:6e:30:2d:92:ba:02:12:df:c0:71:19:17:1f:f2:24:56:44:
         4f:6f:c9:b8:40:e0:bc:36:d9:be:d0:40:17:55:1a:32:23:5b:
         38:79:e3:3b:96:ca:e5:43:78:8d:5c:96:27:c8:63:c3:e2:98:
         16:28:b6:ef:f4:65:20:e2:98:1e:71:4b:e0:e0:b7:66:ec:7c:
         0d:27:e0:b4:e4:59:51:8f:3e:e0:14:b9:b7:3b:08:de:9a:6f:
         40:cc:c1:76:1b:87:f3:4e:24:3a:66:db:4f:a8:81:5a:2a:72:
         25:3b:30:55:47:a7:6f:18:30:37:f3:07:10:f1:4c:6f:9e:7c:
         8e:4f:fb:90:80:ed:75:3c:18:42:09:9f:4d:95:0c:2c:15:3b:
         6d:70:43:2c:3f:1c:02:ba:ab:b7:4f:10:41:05:bb:16:c7:f6:
         35:d1:90:e5:71:25:db:9b:f0:53:23:b9:3c:ba:ad:c3:a2:f3:
         70:61:d7:f6:df:c4:5f:94:dc:3a:a3:27:b3:ad:35:15:ac:66:
         09:d3:df:b1:ad:46:78:cb:e6:70:20:9b:b8:2b:21:be:66:7b:
         5c:35:7c:43:5c:09:d2:eb:1a:b2:5d:35:0c:4b:de:0e:95:26:
         ee:47:bf:b6:ab:d3:3c:1a:be:93:f8:55:80:e4:a9:07:03:27:
         43:7f:7c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org