Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e37322e302f32312d3231203d3e203533313732.roa
File:                     3138362e3232352e37322e302f32312d3231203d3e203533313732.roa (raw, json)
Hash identifier:          n910OCMPKp0kxZpd2BS9mtWUpu1QlxxgAqVP6sNlZDU=
Subject key identifier:   3F:87:9A:78:23:D8:84:82:AC:21:B2:A4:48:C2:CF:34:74:04:45:F6
Certificate issuer:       /CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
Certificate serial:       0AD613CF26A80DA47E978C3363A03DE4FE7EFAEC
Authority key identifier: C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e37322e302f32312d3231203d3e203533313732.roa
Signing time:             Thu 11 May 2023 11:12:04 +0000
ROA not before:           Thu 11 May 2023 11:07:04 +0000
ROA not after:            Thu 09 May 2024 11:12:04 +0000
asID:                     53172
IP address blocks:        186.225.72.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d6:13:cf:26:a8:0d:a4:7e:97:8c:33:63:a0:3d:e4:fe:7e:fa:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
        Validity
            Not Before: May 11 11:07:04 2023 GMT
            Not After : May  9 11:12:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ee:36:a7:4f:64:94:fb:2b:66:e7:0e:1a:e2:
                    9e:e7:81:64:02:44:ba:a8:03:27:b2:9b:00:82:9e:
                    21:74:6f:35:5e:59:b4:df:dd:c9:a1:61:11:5b:4f:
                    fb:ec:c5:c0:e8:45:38:67:b1:74:f8:07:d5:9c:db:
                    68:bb:8f:e0:01:9f:a0:d8:22:e6:92:a5:3e:69:40:
                    43:ab:35:ea:1c:12:47:86:4f:8a:ec:75:93:ee:70:
                    5a:17:0d:fa:de:67:78:51:dd:6d:b5:98:7e:cb:07:
                    da:a3:67:bb:2f:ac:40:cb:83:fb:44:00:b4:04:89:
                    22:61:0b:84:14:49:e7:be:7e:c9:18:71:2f:72:a8:
                    c7:bc:28:11:b6:d3:9f:52:03:df:28:2e:8b:a7:5b:
                    88:02:34:33:4d:8e:1d:fd:de:e4:d6:6b:4d:6e:94:
                    1e:6b:0c:ae:e4:95:ef:38:35:99:16:85:4d:ae:b6:
                    15:ab:a0:ef:bb:c6:9e:85:fa:ea:9c:2b:28:f1:7d:
                    9a:f2:bf:a7:cc:49:6c:09:60:d9:78:0d:46:98:af:
                    6a:f9:11:e8:d6:53:55:2a:35:78:32:dc:02:3e:ad:
                    f5:a4:bf:fa:41:73:ef:2d:50:c5:cf:39:90:f7:e2:
                    64:4b:4d:aa:df:80:36:90:a2:ee:38:ca:97:a7:08:
                    66:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:87:9A:78:23:D8:84:82:AC:21:B2:A4:48:C2:CF:34:74:04:45:F6
            X509v3 Authority Key Identifier:
                keyid:C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e37322e302f32312d3231203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:d8:e5:4b:22:4a:b0:4e:32:5c:03:ba:87:0a:b3:a3:b1:0e:
         6b:77:9b:d4:8c:fc:30:3d:5b:64:fa:2c:0f:ea:6c:e6:26:ac:
         06:38:8a:9f:92:e1:99:3e:17:32:21:2d:ea:d1:51:5e:f7:57:
         33:5a:82:6c:bc:f9:f8:c1:f0:6f:9c:42:ce:fe:72:5e:d1:34:
         04:f4:3f:b0:57:58:00:a7:2f:f2:39:36:2e:7b:92:61:39:71:
         ad:fa:20:fa:30:90:e8:3c:c5:a3:2d:a6:43:57:eb:ef:9f:f4:
         47:f6:bc:0f:4c:54:b3:5f:0d:bf:f3:d3:4f:0f:fc:86:59:61:
         5c:27:b1:ee:57:c5:1b:80:e4:12:c7:f5:4b:62:cb:1a:a1:94:
         de:57:d2:e9:d8:9c:2c:e3:6e:b4:6b:4d:50:e9:dc:ab:d3:ef:
         97:03:11:9c:a3:d1:da:09:23:68:16:40:04:34:e9:e6:34:fc:
         b4:5b:8b:0e:47:76:81:54:6f:aa:56:4b:3f:4e:9e:cf:ad:19:
         c7:52:2f:9c:5e:50:31:45:3c:c1:f9:7c:22:36:fc:95:da:67:
         d8:68:31:ad:cf:47:c6:d6:f0:94:8b:fc:31:32:d8:58:7e:39:
         e9:28:dd:1e:c0:ae:df:d6:ca:d1:97:2b:56:08:30:ed:26:0d:
         c2:af:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org