Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e3130342e302f32312d3234203d3e203533323234.roa
File:                     3138362e3139332e3130342e302f32312d3234203d3e203533323234.roa (raw, json)
Hash identifier:          QRVXugwDskC7ofRdNG15ykCQywnWsQSZ9+1j3htYACw=
Subject key identifier:   70:5C:A7:AE:8A:8C:4C:C5:A2:68:25:EF:F2:88:3A:14:A9:39:85:57
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       73286155194E2E4D23F751552C269A5B865D57F6
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e3130342e302f32312d3234203d3e203533323234.roa
Signing time:             Mon 13 Mar 2023 17:05:26 +0000
ROA not before:           Mon 13 Mar 2023 17:00:26 +0000
ROA not after:            Mon 11 Mar 2024 17:05:26 +0000
asID:                     53224
IP address blocks:        186.193.104.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:28:61:55:19:4e:2e:4d:23:f7:51:55:2c:26:9a:5b:86:5d:57:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar 13 17:00:26 2023 GMT
            Not After : Mar 11 17:05:26 2024 GMT
        Subject: CN=705CA7AE8A8C4CC5A26825EFF2883A14A9398557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:e4:30:47:e1:b2:2e:50:6f:a7:2f:2e:8a:
                    25:a1:21:f0:df:44:24:64:8c:18:ab:5e:a2:f6:20:
                    5b:12:d5:f9:7e:86:f3:1c:be:4e:29:67:0e:06:30:
                    bc:2b:46:b4:35:9a:96:49:fc:81:31:c3:35:7f:d4:
                    ab:86:96:5e:17:c6:f6:65:5f:b1:d8:70:ed:be:63:
                    86:3c:7d:02:0b:0d:9c:91:63:9e:fb:9e:6e:1a:0e:
                    b0:b0:60:36:29:86:bc:07:a5:ca:6a:ef:6f:1b:f1:
                    40:64:3e:77:55:0c:43:ff:8b:aa:b5:2c:1d:a2:0f:
                    85:c9:bf:6f:97:fa:d6:c4:0b:f3:8a:6a:04:45:83:
                    3b:25:cc:1a:2f:52:d4:4f:d1:9e:83:3d:11:f3:fe:
                    78:7c:2a:35:6d:34:d8:cc:1a:f4:05:b3:9e:59:9a:
                    d4:17:38:62:ee:d1:62:2e:a6:05:73:08:16:6c:41:
                    d0:63:68:ff:3a:ac:93:e2:ee:cd:1c:e4:7b:52:39:
                    36:05:c3:af:43:aa:bf:d2:1e:a6:4b:d8:79:ac:5b:
                    29:92:bc:97:dc:c9:12:de:ef:08:27:89:03:0d:4e:
                    f2:63:fe:61:4b:b2:e0:70:eb:2e:98:f4:3c:56:d3:
                    19:c2:10:8b:45:b2:ac:d3:36:9a:73:ed:bd:4f:d9:
                    a2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5C:A7:AE:8A:8C:4C:C5:A2:68:25:EF:F2:88:3A:14:A9:39:85:57
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e3130342e302f32312d3234203d3e203533323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:94:92:e0:c8:8d:8f:96:ef:4c:65:28:81:b5:56:4f:f5:44:
         1d:b5:93:54:a8:03:c3:5d:cc:ec:33:d8:07:e0:4d:25:9d:c6:
         50:60:01:6d:09:01:fc:4c:15:25:a7:66:fc:2d:c3:23:63:2b:
         22:b9:b0:df:ed:94:3a:88:d7:c5:7b:98:70:68:66:fa:68:72:
         48:76:8d:23:30:69:d5:50:b0:10:6c:40:88:f4:f2:45:75:5f:
         7d:29:0e:ac:99:fd:89:a7:6a:44:cf:6a:0d:7d:de:ad:6b:93:
         74:30:f1:bf:83:c8:70:e5:24:be:56:68:3c:23:86:27:56:f7:
         25:c1:70:70:4e:30:f8:13:02:15:d9:b9:5d:89:ba:0a:69:d3:
         0a:53:01:65:d0:17:6e:78:8e:91:b5:d8:30:7c:62:c4:84:a8:
         54:a6:22:6e:14:07:e7:6f:c8:c9:83:97:7e:13:f8:a6:50:b4:
         d9:94:83:92:8c:ce:91:9f:ad:56:a5:92:01:be:28:de:df:0d:
         be:bd:1a:44:e0:2d:97:24:8b:d7:10:96:d6:35:95:87:8c:4a:
         e1:5c:30:d1:b5:1b:9d:74:e0:0a:29:8f:f4:23:92:91:32:91:
         d1:b0:5e:54:92:1f:11:0f:b0:86:79:8a:88:1c:c6:aa:fc:48:
         6b:75:26:3f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcyhhVRlOLk0j91FVLCaaW4ZdV/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyMjM1NDA5OERBOUU4NDQ1QkFEMjQ0NDVGNTZDNTdF
RTYzOEUwRTAeFw0yMzAzMTMxNzAwMjZaFw0yNDAzMTExNzA1MjZaMDMxMTAvBgNV
BAMTKDcwNUNBN0FFOEE4QzRDQzVBMjY4MjVFRkYyODgzQTE0QTkzOTg1NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjp+QwR+GyLlBvpy8uiiWhIfDf
RCRkjBirXqL2IFsS1fl+hvMcvk4pZw4GMLwrRrQ1mpZJ/IExwzV/1KuGll4XxvZl
X7HYcO2+Y4Y8fQILDZyRY577nm4aDrCwYDYphrwHpcpq728b8UBkPndVDEP/i6q1
LB2iD4XJv2+X+tbEC/OKagRFgzslzBovUtRP0Z6DPRHz/nh8KjVtNNjMGvQFs55Z
mtQXOGLu0WIupgVzCBZsQdBjaP86rJPi7s0c5HtSOTYFw69Dqr/SHqZL2HmsWymS
vJfcyRLe7wgniQMNTvJj/mFLsuBw6y6Y9DxW0xnCEItFsqzTNppz7b1P2aLHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcFynroqMTMWiaCXv8og6FKk5hVcwHwYDVR0j
BBgwFoAUNiI1QJjanoRFutJERfVsV+5jjg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zNjIyMzU0MDk4REE5RTg0NDVCQUQyNDQ0NUY1NkM1N0VFNjM4RTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2MjIzNTQwOThEQTlFODQ0
NUJBRDI0NDQ1RjU2QzU3RUU2MzhFMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzODM2MmUzMTM5MzMyZTMxMzAzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1
MzMzMjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO6wWgwDQYJKoZIhvcNAQELBQADggEBAFOUkuDI
jY+W70xlKIG1Vk/1RB21k1SoA8NdzOwz2AfgTSWdxlBgAW0JAfxMFSWnZvwtwyNj
KyK5sN/tlDqI18V7mHBoZvpockh2jSMwadVQsBBsQIj08kV1X30pDqyZ/YmnakTP
ag193q1rk3Qw8b+DyHDlJL5WaDwjhidW9yXBcHBOMPgTAhXZuV2Jugpp0wpTAWXQ
F254jpG12DB8YsSEqFSmIm4UB+dvyMmDl34T+KZQtNmUg5KMzpGfrValkgG+KN7f
Db69GkTgLZcki9cQltY1lYeMSuFcMNG1G5104Aopj/QjkpEykdGwXlSSHxEPsIZ5
iogcxqr8SGt1Jj8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org