Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32342d3234203d3e203533313732.roa
File:                     3138362e3232352e36342e302f32342d3234203d3e203533313732.roa (raw, json)
Hash identifier:          fBi7Lo1U3pC0aTZP/bzGa3z2v04cauPywmWhAdkwyiw=
Subject key identifier:   B4:D1:58:48:72:B0:D8:66:23:D9:EE:4D:D1:DE:2A:B7:A7:A7:59:8F
Certificate issuer:       /CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
Certificate serial:       52D3CBBD0CFED42F57900072EAE10BF9B00E281A
Authority key identifier: C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32342d3234203d3e203533313732.roa
Signing time:             Thu 11 May 2023 11:12:04 +0000
ROA not before:           Thu 11 May 2023 11:07:04 +0000
ROA not after:            Thu 09 May 2024 11:12:04 +0000
asID:                     53172
IP address blocks:        186.225.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d3:cb:bd:0c:fe:d4:2f:57:90:00:72:ea:e1:0b:f9:b0:0e:28:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
        Validity
            Not Before: May 11 11:07:04 2023 GMT
            Not After : May  9 11:12:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:b3:5d:e8:b8:55:0c:03:e9:50:13:d2:61:
                    12:09:89:d4:7d:ba:11:1d:48:3b:e8:83:5b:eb:04:
                    ea:90:75:1f:2d:04:f6:ce:11:db:fb:6a:6a:60:c9:
                    d6:81:52:7c:62:98:02:11:e8:a7:77:6c:7c:c0:00:
                    37:8d:7f:c1:a4:e7:ac:78:da:f4:48:fa:de:a0:3d:
                    7e:c8:b1:c0:f8:25:3f:30:55:c1:1b:38:e1:85:d6:
                    0d:fa:65:a9:8b:e6:3f:4f:32:69:cf:51:8d:e3:ec:
                    39:a2:0d:44:0d:da:1b:43:d8:67:23:d7:77:27:0f:
                    b2:71:9b:5a:e7:06:20:8e:4a:96:c7:54:03:4c:17:
                    5f:03:72:ed:7f:ff:fd:e4:78:e1:b7:88:70:90:5c:
                    06:3c:44:7c:1d:a8:c2:59:de:02:b9:68:c7:d0:90:
                    e2:a1:96:b4:3c:92:3b:87:f2:a0:12:63:f4:4b:29:
                    36:1c:05:d1:65:cc:66:4b:a8:18:18:fe:77:d2:80:
                    2c:b5:3a:d8:4e:15:80:cf:e8:13:0e:6e:92:cc:04:
                    1c:47:9f:4b:8e:71:c2:52:3f:dd:76:8a:e9:f4:ab:
                    e7:f3:f0:be:68:4d:dc:c7:32:34:cd:e0:82:15:30:
                    d0:69:3f:5c:58:6f:e5:08:b5:f9:40:bf:f3:f7:57:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D1:58:48:72:B0:D8:66:23:D9:EE:4D:D1:DE:2A:B7:A7:A7:59:8F
            X509v3 Authority Key Identifier:
                keyid:C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36342e302f32342d3234203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ea:3a:92:37:c8:f7:fb:cf:46:a0:1e:44:d8:c4:48:86:90:
         79:ed:f5:8f:0b:6c:e6:f2:e5:b0:7c:c5:61:f1:d9:74:bb:3e:
         cf:78:65:05:5f:d3:7f:ef:d1:99:66:53:e7:a9:91:b5:be:dd:
         3b:11:c1:3a:49:9f:95:49:30:2c:fb:c6:9b:be:da:65:c9:f4:
         2a:93:55:92:8b:d1:69:1e:c4:35:eb:cc:e8:e2:80:61:c2:3d:
         df:7a:8e:1a:af:51:51:0d:51:3f:4d:09:12:37:be:7f:cc:2b:
         bf:a9:47:21:8e:45:81:2f:59:51:17:88:3f:a4:37:92:a2:6e:
         98:94:27:5c:c7:0e:99:0b:b4:3d:3e:fd:7f:43:1e:e8:16:eb:
         49:b1:1f:74:03:37:af:71:ed:b9:91:3a:ce:a9:ef:47:1f:b1:
         18:79:f9:e9:af:be:05:a5:be:af:8f:f9:1f:0c:ef:d5:57:4c:
         87:6c:2f:eb:51:7b:09:97:e8:63:72:0e:af:61:00:c6:75:be:
         9d:0c:fb:d2:ec:bd:47:48:e1:16:cb:e7:c9:8e:78:86:fc:53:
         f0:dc:cc:40:e2:3b:fd:84:c0:24:fd:d6:d0:b0:2c:e3:59:fc:
         26:94:27:aa:69:50:8c:e9:01:9d:da:65:93:42:a6:12:a3:28:
         f9:78:8b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org