Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e39362e302f32312d3231203d3e203533303539.roa
File:                     3138362e3139332e39362e302f32312d3231203d3e203533303539.roa (raw, json)
Hash identifier:          ubDVbh/kYAzm7mmjs/1Xq49p7H1sJUbHdGcJR0Zj7Qc=
Subject key identifier:   08:CF:2D:FE:9F:84:34:CB:90:9E:1A:29:A9:AB:3E:7E:91:7F:25:CF
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       4F314A2DB3451379C2BB3CEE3AEC78EBFC18ACAE
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e39362e302f32312d3231203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:20 +0000
ROA not before:           Fri 03 Mar 2023 12:13:20 +0000
ROA not after:            Fri 01 Mar 2024 12:18:20 +0000
asID:                     53059
IP address blocks:        186.193.96.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:31:4a:2d:b3:45:13:79:c2:bb:3c:ee:3a:ec:78:eb:fc:18:ac:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:20 2023 GMT
            Not After : Mar  1 12:18:20 2024 GMT
        Subject: CN=08CF2DFE9F8434CB909E1A29A9AB3E7E917F25CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:70:4e:d1:74:13:42:8a:cd:b1:15:01:00:c4:
                    87:a7:ba:b6:55:3b:77:e2:70:92:0a:ae:11:8a:75:
                    1c:4b:3c:af:ca:fe:53:82:8b:4d:b7:71:81:79:90:
                    a2:73:01:bf:c1:a3:02:cd:76:77:c7:70:91:f3:3e:
                    c2:08:c8:b0:cf:b2:8c:ac:01:73:48:a5:e6:7a:94:
                    64:01:f4:1a:3b:5e:00:89:90:b4:e8:2d:ed:e4:38:
                    13:83:2d:8f:b2:e2:cb:9a:a0:de:2e:e8:a7:82:81:
                    d1:16:fe:68:6f:cd:32:05:fc:e0:7b:35:40:49:4f:
                    9c:0a:c3:a4:9a:1c:a1:1f:7d:ab:7b:68:b2:66:9c:
                    62:0e:a4:1c:ae:ce:58:e8:9c:4a:59:08:78:cd:f2:
                    4f:7b:b8:1d:cf:b9:0f:11:6d:04:78:40:6b:3c:48:
                    22:96:c0:3a:27:a0:e6:49:27:b3:b1:56:a4:0e:e8:
                    92:88:25:06:7f:fa:1a:8e:03:bc:94:0f:24:a4:78:
                    b8:16:a1:47:b9:b2:cb:51:3c:98:39:4e:00:ff:6b:
                    4d:5b:72:34:5c:f1:38:0e:86:66:44:54:bb:19:c4:
                    c7:86:42:8f:1c:8e:35:ea:11:4f:ff:0c:ed:1e:06:
                    dc:b6:04:67:cc:fe:40:24:5c:cf:25:48:08:4c:50:
                    af:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CF:2D:FE:9F:84:34:CB:90:9E:1A:29:A9:AB:3E:7E:91:7F:25:CF
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e39362e302f32312d3231203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bc:01:ba:f6:d6:dd:c5:0d:d5:60:78:07:0d:77:bb:74:54:3f:
         0d:b0:c1:23:e4:18:de:3b:af:3d:91:8c:d8:17:da:fe:6d:a0:
         87:b0:a4:00:00:cd:f1:f2:8f:a1:0e:fd:5c:11:98:1c:be:c3:
         a2:b0:e6:47:bb:a1:da:9b:02:9c:70:72:8b:39:02:bd:98:58:
         91:2d:77:1c:30:56:6d:7a:6e:52:b0:bc:b7:b2:80:6d:6e:d3:
         32:63:cb:97:08:49:d8:59:1e:a5:e4:fb:d4:a8:fd:a0:67:b3:
         67:16:a2:0b:8b:9a:98:a2:0e:ca:6c:9b:8a:4c:ce:c0:0c:e6:
         32:5b:1d:43:9b:9e:87:5e:a9:1e:8b:03:fc:dd:35:c1:61:99:
         ca:86:ac:95:33:9e:cd:ae:e0:4a:8c:24:c3:c7:35:13:44:f4:
         7c:39:ee:dd:1f:a7:d6:db:3a:aa:3c:44:94:f9:51:a4:08:57:
         f2:1e:78:0a:69:dd:8b:d9:a8:7a:f3:88:73:ab:d4:0e:74:13:
         2c:9a:e6:0e:d5:5d:86:17:58:0c:dd:9e:77:09:3f:d5:96:80:
         b1:7f:0a:36:a2:23:d3:23:01:69:d8:8c:94:57:f7:5d:6e:9c:
         dc:e8:9a:0d:ba:3b:37:c5:a3:6a:6b:89:ab:58:fb:94:69:03:
         00:0e:6a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org