Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36352e302f32342d3234203d3e203533313732.roa
File:                     3138362e3232352e36352e302f32342d3234203d3e203533313732.roa (raw, json)
Hash identifier:          d3U/H9E4jucpaCeKUEay5Vo0SeBfx4uFuv3M0p7pKx4=
Subject key identifier:   29:0B:76:18:D5:AF:E0:27:84:2D:62:A7:10:24:49:A1:A3:B2:6F:A1
Certificate issuer:       /CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
Certificate serial:       1253119BF384D0C4E075F5407730081474D530B7
Authority key identifier: C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36352e302f32342d3234203d3e203533313732.roa
Signing time:             Thu 11 May 2023 11:12:04 +0000
ROA not before:           Thu 11 May 2023 11:07:04 +0000
ROA not after:            Thu 09 May 2024 11:12:04 +0000
asID:                     53172
IP address blocks:        186.225.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:53:11:9b:f3:84:d0:c4:e0:75:f5:40:77:30:08:14:74:d5:30:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
        Validity
            Not Before: May 11 11:07:04 2023 GMT
            Not After : May  9 11:12:04 2024 GMT
        Subject: CN=3082010A02820101009998FF797AC5B4295D5A25F32C79029B7827D24F57F8E971C285A3DB6842055C28983ECD38039F426C4A3B4212193FEDD22E54D7B6656527992619E8D9590E90DE181A1073483DDDF1AFC524780768305C7444F877BF6E7C17E3CFEE759EAD07B19B2A92D54EF546C746BE51ACDC982A36D0C9357E1DA7C232CC06506EC3D5F339CD2BA82C2DA13B02D296BB02B4535903EC16C18F388F037A5239816A84B76A8925ACB42C56B073E01DF0EF130DF540BB8F53C5E578A4687F34EEC6F5558C3612CC04E2F1743DCA9BC7921405034BC9C939A9555AB338EE2A83797AA34A5C3EE11E09E3D988205F7DBC700411DFD944B4E7F0694A02C2AE19F7BB8AA57C09470203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:ff:79:7a:c5:b4:29:5d:5a:25:f3:2c:79:
                    02:9b:78:27:d2:4f:57:f8:e9:71:c2:85:a3:db:68:
                    42:05:5c:28:98:3e:cd:38:03:9f:42:6c:4a:3b:42:
                    12:19:3f:ed:d2:2e:54:d7:b6:65:65:27:99:26:19:
                    e8:d9:59:0e:90:de:18:1a:10:73:48:3d:dd:f1:af:
                    c5:24:78:07:68:30:5c:74:44:f8:77:bf:6e:7c:17:
                    e3:cf:ee:75:9e:ad:07:b1:9b:2a:92:d5:4e:f5:46:
                    c7:46:be:51:ac:dc:98:2a:36:d0:c9:35:7e:1d:a7:
                    c2:32:cc:06:50:6e:c3:d5:f3:39:cd:2b:a8:2c:2d:
                    a1:3b:02:d2:96:bb:02:b4:53:59:03:ec:16:c1:8f:
                    38:8f:03:7a:52:39:81:6a:84:b7:6a:89:25:ac:b4:
                    2c:56:b0:73:e0:1d:f0:ef:13:0d:f5:40:bb:8f:53:
                    c5:e5:78:a4:68:7f:34:ee:c6:f5:55:8c:36:12:cc:
                    04:e2:f1:74:3d:ca:9b:c7:92:14:05:03:4b:c9:c9:
                    39:a9:55:5a:b3:38:ee:2a:83:79:7a:a3:4a:5c:3e:
                    e1:1e:09:e3:d9:88:20:5f:7d:bc:70:04:11:df:d9:
                    44:b4:e7:f0:69:4a:02:c2:ae:19:f7:bb:8a:a5:7c:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0B:76:18:D5:AF:E0:27:84:2D:62:A7:10:24:49:A1:A3:B2:6F:A1
            X509v3 Authority Key Identifier:
                keyid:C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36352e302f32342d3234203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f8:9a:de:20:b2:32:22:fe:71:ea:10:8e:0e:d4:a7:57:93:
         4d:3f:9e:88:5a:d5:e6:be:11:e8:ac:25:91:33:31:44:3e:f5:
         0c:e2:76:79:16:f2:c8:70:1f:8f:fd:50:ea:73:35:7a:d3:bc:
         2a:fb:15:8e:33:62:90:0c:5b:ab:59:01:41:e7:e4:df:37:45:
         fd:e9:1d:22:c6:24:e6:fc:0e:8c:7b:98:2a:31:40:2d:65:a2:
         00:fe:c7:ab:db:3e:58:1f:8d:7a:01:d8:ca:ad:a2:3b:07:7d:
         e1:46:ab:06:1e:48:2f:2a:4c:6c:bb:58:4d:3c:2f:05:f4:62:
         cc:30:8e:ec:6a:50:cf:3b:d0:2d:19:02:07:19:a0:86:18:6d:
         9a:23:d0:6d:12:fa:4e:95:e5:c1:0a:83:c5:38:4c:19:57:3a:
         00:37:fc:01:17:26:4f:c5:6b:86:e7:8e:af:72:08:20:f8:78:
         6f:b6:bc:02:b1:5f:2c:42:fa:14:18:1f:42:9d:a9:61:bf:40:
         b2:60:1f:ab:23:7d:8a:1c:54:ec:ac:a5:15:e5:bd:63:93:3f:
         fb:15:f4:90:3e:5a:cc:24:09:9d:4c:2f:5e:dd:e9:96:66:d5:
         71:3c:64:96:75:8c:87:4d:e4:a4:0b:8d:6c:99:bc:6a:08:95:
         92:ca:5a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org