Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38302e302f32322d3232203d3e20323632393938.roa
File:                     3138362e3232342e38302e302f32322d3232203d3e20323632393938.roa (raw, json)
Hash identifier:          iJuYwqJu9+4QEyV6Ev/li5rOU7U/k/9AleUUhXh3k8c=
Subject key identifier:   BF:4B:14:18:95:59:DF:0F:03:F0:49:A5:BD:78:1A:6E:F1:23:CB:BB
Certificate issuer:       /CN=25B80D450923FBAF7E31D41324FA2A66D766846C
Certificate serial:       17760E698B4DAA48431A173AD8E99BDBF0BAF1A5
Authority key identifier: 25:B8:0D:45:09:23:FB:AF:7E:31:D4:13:24:FA:2A:66:D7:66:84:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B80D450923FBAF7E31D41324FA2A66D766846C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38302e302f32322d3232203d3e20323632393938.roa
Signing time:             Tue 24 Oct 2023 16:16:48 +0000
ROA not before:           Tue 24 Oct 2023 16:11:48 +0000
ROA not after:            Tue 22 Oct 2024 16:16:48 +0000
asID:                     262998
IP address blocks:        186.224.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:76:0e:69:8b:4d:aa:48:43:1a:17:3a:d8:e9:9b:db:f0:ba:f1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25B80D450923FBAF7E31D41324FA2A66D766846C
        Validity
            Not Before: Oct 24 16:11:48 2023 GMT
            Not After : Oct 22 16:16:48 2024 GMT
        Subject: CN=BF4B14189559DF0F03F049A5BD781A6EF123CBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:99:32:9a:35:ae:33:4e:f6:40:38:5c:81:
                    38:28:e9:63:30:4b:b0:9c:b8:3d:e7:ce:7c:b3:76:
                    06:a5:48:6b:c9:60:c3:f4:97:c1:5f:e3:59:d1:d1:
                    07:35:9a:09:d6:c0:f6:a1:94:03:fb:65:36:50:b4:
                    19:3f:91:0e:2f:da:77:69:c1:31:1b:f3:ed:e6:b0:
                    57:86:66:6c:da:0d:cc:10:06:17:14:44:fc:5b:54:
                    ea:fe:af:2a:43:b9:7c:4a:a3:f9:d4:7b:c2:f6:d4:
                    aa:1a:cd:2e:04:c4:52:da:2a:d5:06:6b:57:b2:42:
                    a8:56:85:f7:83:d6:70:62:e2:f1:bc:30:6a:ab:ae:
                    15:29:18:0e:cc:49:4a:83:99:c9:f1:79:26:88:7c:
                    d2:c2:2e:b2:a5:27:db:f5:79:db:10:b2:fe:ac:e7:
                    d6:10:61:df:d9:1e:f6:a1:17:b1:0a:32:21:72:89:
                    6c:20:00:5f:53:b0:4e:da:42:b9:bd:99:64:27:dd:
                    20:29:5c:5a:a3:46:65:29:6c:ac:75:5a:64:3e:c0:
                    31:40:41:a7:24:48:ee:c1:2d:03:62:2a:1f:a1:06:
                    83:2d:4c:b7:ca:32:68:7f:97:1e:2d:09:c2:6a:24:
                    09:98:99:e0:09:f4:99:94:b1:d0:b7:53:53:31:64:
                    25:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4B:14:18:95:59:DF:0F:03:F0:49:A5:BD:78:1A:6E:F1:23:CB:BB
            X509v3 Authority Key Identifier:
                keyid:25:B8:0D:45:09:23:FB:AF:7E:31:D4:13:24:FA:2A:66:D7:66:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/25B80D450923FBAF7E31D41324FA2A66D766846C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/25B80D450923FBAF7E31D41324FA2A66D766846C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxgHbXqvvSr8CAJecDt6a7G7tSjW4JbUfxFCix5jkpRU/0/3138362e3232342e38302e302f32322d3232203d3e20323632393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:83:78:e3:14:31:b5:98:83:b2:6a:6f:fe:bd:a9:27:98:4c:
         d2:0a:57:de:f5:e3:65:5b:02:cf:50:12:29:f7:29:2d:ab:ad:
         57:fb:c4:ff:fc:5e:89:e9:25:a8:c6:d0:f7:1a:9f:a3:b0:0f:
         ab:8b:9c:24:1c:95:09:31:73:07:5d:42:95:c5:0a:74:28:02:
         0b:ae:f4:fc:95:c1:c6:f4:d9:60:61:a1:d5:c8:19:5a:c6:5a:
         e2:7d:bd:b3:0c:98:46:9b:90:b5:02:6c:75:73:b2:94:b0:31:
         80:8c:c1:87:2b:70:8e:a8:66:d9:32:7b:c7:55:d9:b5:40:29:
         17:56:c8:bf:55:55:74:a6:dd:34:b7:b9:79:47:27:ba:9d:9e:
         dc:e0:c2:4a:9b:52:6e:c9:3d:fa:f8:35:fb:0f:9b:0b:92:5e:
         92:ee:f5:3b:be:da:86:fc:f5:89:c9:22:b9:d7:2b:a1:cc:9a:
         cc:8f:6d:d1:bc:4b:e7:aa:b6:6f:af:ee:09:72:6b:3d:4d:b3:
         11:ea:29:a2:46:e4:bf:04:11:56:67:2e:22:fd:59:a8:8a:c7:
         71:97:3e:d7:d0:c2:7e:34:4b:db:d2:e6:a3:ca:46:0d:19:c2:
         29:f3:b3:48:a6:1c:5e:dd:3e:06:01:99:3e:3d:b9:39:ce:7b:
         31:88:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org