Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3138362e3232352e3231362e302f32312d3234203d3e203532353331.roa
File:                     3138362e3232352e3231362e302f32312d3234203d3e203532353331.roa (raw, json)
Hash identifier:          VI5PUO3uv6ZuzHhbjDenkUrdhuydbm0HslnGkwsO1ZA=
Subject key identifier:   EE:10:C6:FE:B8:92:1D:5E:25:DE:D7:36:48:58:5B:7E:45:45:02:2F
Certificate issuer:       /CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
Certificate serial:       58F652065E3A15B1ED42E46CEEC5749B6F7EF224
Authority key identifier: 1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3138362e3232352e3231362e302f32312d3234203d3e203532353331.roa
Signing time:             Fri 07 Jul 2023 18:40:05 +0000
ROA not before:           Fri 07 Jul 2023 18:35:05 +0000
ROA not after:            Fri 05 Jul 2024 18:40:05 +0000
asID:                     52531
IP address blocks:        186.225.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f6:52:06:5e:3a:15:b1:ed:42:e4:6c:ee:c5:74:9b:6f:7e:f2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6
        Validity
            Not Before: Jul  7 18:35:05 2023 GMT
            Not After : Jul  5 18:40:05 2024 GMT
        Subject: CN=EE10C6FEB8921D5E25DED73648585B7E4545022F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:65:75:6b:b9:05:04:95:78:88:51:ed:87:7a:
                    b4:b0:89:3f:36:f4:93:26:cf:85:9d:97:5b:91:31:
                    ac:e7:47:51:16:94:5f:60:16:f2:b6:01:8c:3a:ac:
                    3c:3f:5c:ea:6b:c8:bf:2a:c3:25:03:fd:66:22:1a:
                    1f:85:7c:d5:c1:9a:26:b0:bf:6e:aa:58:e1:c6:af:
                    56:4b:7b:ec:02:b9:82:e1:f6:3c:02:04:87:7a:cb:
                    80:1b:51:fa:34:d3:f4:e7:dd:c3:23:8b:60:b9:dd:
                    29:23:0c:be:25:4e:ee:ab:4d:32:06:c1:9c:99:45:
                    59:b8:8f:4a:18:da:a4:01:77:81:b2:c6:3d:8b:70:
                    2d:dd:e1:87:92:23:09:8f:f4:a6:b7:ca:8f:fa:e4:
                    a1:05:6a:0a:71:be:5d:22:c4:7f:e5:05:7c:a5:d1:
                    6f:36:e9:fd:02:0e:fa:f1:5e:5e:a9:96:f1:b1:6a:
                    c0:02:8e:42:db:29:94:c2:63:85:a5:60:69:be:f9:
                    fe:be:c1:5f:49:f8:0e:1a:26:a7:ac:98:f6:e0:45:
                    d6:8f:89:ef:7d:57:ad:6b:85:59:e3:58:c3:7b:ef:
                    a0:3e:78:6f:ad:a0:5f:68:9c:34:58:89:9d:c1:b4:
                    9a:d6:a4:c0:ae:0e:d7:bd:3d:06:3b:49:33:05:3c:
                    ad:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:10:C6:FE:B8:92:1D:5E:25:DE:D7:36:48:58:5B:7E:45:45:02:2F
            X509v3 Authority Key Identifier:
                keyid:1F:70:DC:41:83:49:AC:E5:BE:FB:F0:07:29:BD:28:DD:4A:C2:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F70DC418349ACE5BEFBF00729BD28DD4AC25CD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/0/3138362e3232352e3231362e302f32312d3234203d3e203532353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d3:26:1b:f4:0d:48:78:e3:bd:87:e0:81:8d:de:17:57:7d:44:
         a4:9b:16:74:29:2d:eb:7f:21:28:bb:17:5e:7c:13:ff:45:53:
         e0:9d:89:a8:10:f6:c1:02:e8:bb:2b:1f:bf:da:90:00:a2:f9:
         b0:5e:9e:79:69:fe:1f:a5:74:0c:0f:a9:6b:7b:92:c2:ec:23:
         e1:e1:52:8e:0c:2f:c6:dd:cf:0a:75:ec:af:66:9c:5d:12:40:
         ed:7e:9a:fd:85:ce:d1:dd:c8:36:76:c3:1a:52:73:5c:78:4b:
         91:71:3a:c4:28:e1:9e:4a:e4:18:48:e3:99:d8:e6:5e:95:37:
         03:1e:87:b9:35:70:a8:26:12:61:a3:81:b4:fa:e8:00:6a:d6:
         4a:d9:57:04:60:97:09:04:e2:0a:8d:2b:1c:b0:c4:ad:4f:5e:
         ff:55:c3:ba:e2:62:9a:68:e2:98:3e:25:a9:70:29:d5:52:7f:
         75:b7:c5:11:c9:9a:a1:56:ac:34:d8:22:f8:50:1e:64:82:45:
         f1:cf:7d:82:b1:9b:85:7a:05:07:c1:53:1d:b1:5d:a1:b9:44:
         e3:f1:83:8e:fc:61:21:19:8d:0f:df:ad:aa:da:8d:b1:df:f0:
         2a:65:c5:6a:f1:3b:07:9d:ab:1b:a0:40:39:2a:5d:13:57:65:
         a3:70:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:23 2024 by rpki-client on console-fra.rpki-client.org