Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36382e302f32322d3232203d3e203533313732.roa
File:                     3138362e3232352e36382e302f32322d3232203d3e203533313732.roa (raw, json)
Hash identifier:          wfIcmSw9MWU6z7m9F3M93HdtDeyHBBzQxj/QPFUSFBk=
Subject key identifier:   48:26:1F:C4:90:C5:6E:F9:B9:04:FD:AF:92:6A:88:11:AC:4A:E0:40
Certificate issuer:       /CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
Certificate serial:       21EA8485E411A46C4106B4C5CEB3BAC3F5A51C33
Authority key identifier: C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36382e302f32322d3232203d3e203533313732.roa
Signing time:             Thu 11 May 2023 11:12:04 +0000
ROA not before:           Thu 11 May 2023 11:07:04 +0000
ROA not after:            Thu 09 May 2024 11:12:04 +0000
asID:                     53172
IP address blocks:        186.225.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ea:84:85:e4:11:a4:6c:41:06:b4:c5:ce:b3:ba:c3:f5:a5:1c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
        Validity
            Not Before: May 11 11:07:04 2023 GMT
            Not After : May  9 11:12:04 2024 GMT
        Subject: CN=3082010A0282010100D6915065ED654FAEC140EA4CDE26AA644A73484BD3E87931285B14C79EF6FCA62B9CBD58A8637985F319EC839A5B9097E489C3ECB104D10840697941CBCAF5CF4BC706A27A0B16E23DE9658EB13A4B3CF9932CEE46ED0CF0632C0BDD72D6F21EC64453643F84942BFDB730A65CAB69BF8BAC76E53673FAC125B51B3BCF51C8CA499D45924FFD7D6909D27729FB4C932DA987F16251B42F51C4916A614C1E877744C82E3C864084545CED94782073745592FB16DDCF1346E6888F58286199D038A5C17CA370F7B7778CD171352FA65AC2ABCC06D153BAB1FCAA67B0B67B3EED56933AE1BE2E3231A92EAA5DFBD0DBE735E4613CE6BB727FBF92736967752DA6A90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:91:50:65:ed:65:4f:ae:c1:40:ea:4c:de:26:
                    aa:64:4a:73:48:4b:d3:e8:79:31:28:5b:14:c7:9e:
                    f6:fc:a6:2b:9c:bd:58:a8:63:79:85:f3:19:ec:83:
                    9a:5b:90:97:e4:89:c3:ec:b1:04:d1:08:40:69:79:
                    41:cb:ca:f5:cf:4b:c7:06:a2:7a:0b:16:e2:3d:e9:
                    65:8e:b1:3a:4b:3c:f9:93:2c:ee:46:ed:0c:f0:63:
                    2c:0b:dd:72:d6:f2:1e:c6:44:53:64:3f:84:94:2b:
                    fd:b7:30:a6:5c:ab:69:bf:8b:ac:76:e5:36:73:fa:
                    c1:25:b5:1b:3b:cf:51:c8:ca:49:9d:45:92:4f:fd:
                    7d:69:09:d2:77:29:fb:4c:93:2d:a9:87:f1:62:51:
                    b4:2f:51:c4:91:6a:61:4c:1e:87:77:44:c8:2e:3c:
                    86:40:84:54:5c:ed:94:78:20:73:74:55:92:fb:16:
                    dd:cf:13:46:e6:88:8f:58:28:61:99:d0:38:a5:c1:
                    7c:a3:70:f7:b7:77:8c:d1:71:35:2f:a6:5a:c2:ab:
                    cc:06:d1:53:ba:b1:fc:aa:67:b0:b6:7b:3e:ed:56:
                    93:3a:e1:be:2e:32:31:a9:2e:aa:5d:fb:d0:db:e7:
                    35:e4:61:3c:e6:bb:72:7f:bf:92:73:69:67:75:2d:
                    a6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:26:1F:C4:90:C5:6E:F9:B9:04:FD:AF:92:6A:88:11:AC:4A:E0:40
            X509v3 Authority Key Identifier:
                keyid:C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36382e302f32322d3232203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:9c:e0:ba:dc:14:8e:29:98:b8:12:5f:62:e1:1d:0c:c8:73:
         17:49:e8:b0:28:5d:f0:d5:89:48:8f:0b:ce:2d:82:ae:36:32:
         4f:a2:22:92:c6:d7:8d:9a:cd:c1:30:92:2e:93:eb:1f:9e:42:
         32:d9:2e:e0:5a:03:15:d6:a4:bd:58:0c:cd:ea:54:59:db:06:
         b7:d5:1b:8d:6f:1a:3e:43:02:2d:42:3d:bf:cf:b2:73:d1:ef:
         be:2d:1c:65:9c:67:2a:32:4e:4a:0f:b8:84:bb:d7:7c:21:b4:
         e2:bf:37:e1:6e:96:42:27:af:4d:91:88:03:02:8a:89:4f:c4:
         e6:bc:71:7d:a5:fb:15:13:9f:8c:29:d7:ef:2a:1a:c3:4c:af:
         f4:b5:4a:07:f5:ce:66:a8:05:56:f7:dd:38:c5:c1:b3:41:db:
         27:0d:18:fb:42:1c:ff:1e:3a:0a:cf:fa:12:e5:ab:90:39:dc:
         dc:31:92:13:e7:4f:51:a7:89:8b:cc:84:62:a2:bc:d9:47:d6:
         59:6b:3f:e4:8e:d5:0e:90:ed:f3:74:23:46:5a:6b:dc:ae:8f:
         38:cc:75:72:5d:4f:b6:c2:dd:9f:56:92:5a:09:9e:1c:00:79:
         57:60:a3:33:d0:b7:4d:b9:43:cd:ca:ac:4e:b5:82:dc:6a:7d:
         25:62:52:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org