Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3132382e302f32302d3234203d3e20323632373239.roa
File:                     3138362e3139332e3132382e302f32302d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          ZSj2NKQ4GedBm37gb0eAxMSrQVw/VS7OYNJs70fwQnU=
Subject key identifier:   3E:E8:E8:96:3E:B3:78:0C:23:30:21:E5:C4:76:83:C6:E1:7E:70:C1
Certificate issuer:       /CN=588EE00910FA303185B2D60E297C4C76D993A8E1
Certificate serial:       5CCABCE0CA5AD3F9D57AB284B4649123BCD1C926
Authority key identifier: 58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3132382e302f32302d3234203d3e20323632373239.roa
Signing time:             Tue 25 Jul 2023 14:00:00 +0000
ROA not before:           Tue 25 Jul 2023 13:55:00 +0000
ROA not after:            Tue 23 Jul 2024 14:00:00 +0000
asID:                     262729
IP address blocks:        186.193.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ca:bc:e0:ca:5a:d3:f9:d5:7a:b2:84:b4:64:91:23:bc:d1:c9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588EE00910FA303185B2D60E297C4C76D993A8E1
        Validity
            Not Before: Jul 25 13:55:00 2023 GMT
            Not After : Jul 23 14:00:00 2024 GMT
        Subject: CN=3082010A0282010100C3B772146AAC580A50B6290814379D06D78423F52CAE481870E46D13D43BC661F8743061EFA003243364C131C4C23A3A64250C00E2314DE78209AD287FCF7CA3325E0D526DBD60326AD7C382776B4B2EC6540A1FD03993C743167BFC94E15E0DBC445B91DA3F4CAB89118E1861EBA6A0AA911FD119DD1F8D2941497C8E1A1F6551F04DBAC7C134323832E78B47599055ADA1705A8F80B6C84C046283411A3B6C89391B694026D240F55BE435810A69D4021CC6324066B56512821F8CB6F3C25D6CCC2537308DF852408B83EADF4A45281F95EE588BBCB87A331F8F2A99E779E7328EFE84374A49DCBEF367D5A6C063E2A0BD69AC874ABA5D85200ED7144A30850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:72:14:6a:ac:58:0a:50:b6:29:08:14:37:
                    9d:06:d7:84:23:f5:2c:ae:48:18:70:e4:6d:13:d4:
                    3b:c6:61:f8:74:30:61:ef:a0:03:24:33:64:c1:31:
                    c4:c2:3a:3a:64:25:0c:00:e2:31:4d:e7:82:09:ad:
                    28:7f:cf:7c:a3:32:5e:0d:52:6d:bd:60:32:6a:d7:
                    c3:82:77:6b:4b:2e:c6:54:0a:1f:d0:39:93:c7:43:
                    16:7b:fc:94:e1:5e:0d:bc:44:5b:91:da:3f:4c:ab:
                    89:11:8e:18:61:eb:a6:a0:aa:91:1f:d1:19:dd:1f:
                    8d:29:41:49:7c:8e:1a:1f:65:51:f0:4d:ba:c7:c1:
                    34:32:38:32:e7:8b:47:59:90:55:ad:a1:70:5a:8f:
                    80:b6:c8:4c:04:62:83:41:1a:3b:6c:89:39:1b:69:
                    40:26:d2:40:f5:5b:e4:35:81:0a:69:d4:02:1c:c6:
                    32:40:66:b5:65:12:82:1f:8c:b6:f3:c2:5d:6c:cc:
                    25:37:30:8d:f8:52:40:8b:83:ea:df:4a:45:28:1f:
                    95:ee:58:8b:bc:b8:7a:33:1f:8f:2a:99:e7:79:e7:
                    32:8e:fe:84:37:4a:49:dc:be:f3:67:d5:a6:c0:63:
                    e2:a0:bd:69:ac:87:4a:ba:5d:85:20:0e:d7:14:4a:
                    30:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E8:E8:96:3E:B3:78:0C:23:30:21:E5:C4:76:83:C6:E1:7E:70:C1
            X509v3 Authority Key Identifier:
                keyid:58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/588EE00910FA303185B2D60E297C4C76D993A8E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3132382e302f32302d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:64:2c:1d:d9:79:2d:b2:6a:eb:98:9d:c3:ca:3d:c1:1b:15:
         f6:c8:ec:f7:31:7b:45:bd:c2:fe:77:01:13:bb:1b:5d:95:c7:
         10:a0:80:88:99:7c:26:45:81:4c:ec:3b:26:aa:da:52:d2:31:
         8c:c0:0a:89:3a:31:3e:43:96:03:45:51:24:97:ff:a1:c7:17:
         dd:d8:8d:ab:e9:42:8d:76:42:b1:92:c2:f1:d4:6a:23:ad:38:
         cb:d5:07:9b:ec:79:63:57:64:3e:b1:85:aa:b2:ac:3f:de:bd:
         aa:c4:f4:bb:7e:2e:3a:37:64:26:36:8e:f6:8b:7c:c9:9c:e5:
         75:68:a8:74:9f:2a:6b:04:a2:6f:40:b9:c4:bc:8c:ca:db:72:
         22:89:ff:5d:0c:22:cd:04:4f:e3:9f:1f:0e:0d:f8:fa:91:f1:
         32:f9:ac:09:56:fe:66:19:a3:9b:c3:08:08:ba:0e:29:5e:23:
         00:9e:ef:0a:5e:dd:6c:1c:0a:48:a1:e1:76:29:05:7a:57:7e:
         47:d6:d3:a9:39:09:03:ea:53:bd:a0:47:f5:68:19:cc:61:fc:
         2c:b9:f3:d9:ae:c6:7d:90:cf:67:34:f3:ca:7b:ba:f9:d0:13:
         48:8b:c3:5b:89:6a:77:79:d4:30:ef:0c:6e:e1:de:ad:88:e4:
         d7:f7:ac:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org