Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e39362e302f32312d3234203d3e203533323234.roa
File:                     3138362e3139332e39362e302f32312d3234203d3e203533323234.roa (raw, json)
Hash identifier:          PBxglI5Z0lXg+q5Q1WD7OrA/UeItaqtlGizcAFCwl6E=
Subject key identifier:   28:A7:31:7E:8E:1C:83:AA:10:B6:92:C2:84:97:0C:8C:BB:DE:50:5B
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       740E3F1DD16A554F341C2E6C329298C42FB47959
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e39362e302f32312d3234203d3e203533323234.roa
Signing time:             Mon 13 Mar 2023 17:04:32 +0000
ROA not before:           Mon 13 Mar 2023 16:59:32 +0000
ROA not after:            Mon 11 Mar 2024 17:04:32 +0000
asID:                     53224
IP address blocks:        186.193.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0e:3f:1d:d1:6a:55:4f:34:1c:2e:6c:32:92:98:c4:2f:b4:79:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar 13 16:59:32 2023 GMT
            Not After : Mar 11 17:04:32 2024 GMT
        Subject: CN=28A7317E8E1C83AA10B692C284970C8CBBDE505B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:8b:2d:41:5a:b4:c8:c7:5a:31:ae:c5:87:
                    14:cd:bf:d8:0e:f7:4b:a0:d6:a0:b6:79:d7:0a:c1:
                    71:d9:7a:14:1e:e0:d2:b1:3c:df:a8:a0:e4:c5:83:
                    f8:02:df:86:9c:20:3a:76:3b:64:09:dd:ae:70:90:
                    cb:40:3f:71:ac:ed:ed:05:f1:d7:d5:84:5a:1d:a5:
                    e5:b3:eb:75:5a:38:9b:91:91:c1:8f:f0:1a:23:02:
                    8d:4d:1d:4b:50:ea:71:b8:4e:f8:c4:c0:86:36:d9:
                    3d:db:36:62:7a:c9:45:f9:65:15:b8:aa:3e:1d:22:
                    45:b0:06:47:ce:84:fc:81:2a:ef:b0:6f:41:58:5a:
                    0b:6c:61:a0:dd:09:d8:bd:6b:ef:40:ab:f6:4e:59:
                    34:37:d8:19:de:6a:4e:13:2e:7e:1a:0a:f1:4c:a3:
                    ba:38:2c:3f:7b:85:57:cc:72:ce:00:5d:70:e6:89:
                    73:b4:eb:cb:10:0b:40:01:b3:a4:a5:f9:0a:62:01:
                    d6:53:84:e7:22:81:89:02:b0:1e:04:45:a6:58:18:
                    ce:49:e0:1c:36:39:a7:16:c7:18:26:96:a9:b8:a2:
                    3a:e5:f4:41:4a:59:93:53:f7:9f:f6:13:c3:0c:c9:
                    a8:37:7e:4a:b6:29:36:14:a7:db:d8:ca:81:bb:e9:
                    09:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A7:31:7E:8E:1C:83:AA:10:B6:92:C2:84:97:0C:8C:BB:DE:50:5B
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e39362e302f32312d3234203d3e203533323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:73:78:1b:fa:e8:62:b0:85:82:cb:f1:a2:5b:b8:b7:f8:32:
         81:13:57:57:38:b1:a6:bb:a0:2b:a4:0c:8e:a5:d1:97:a5:9c:
         ed:d1:8c:40:1a:a5:77:05:d9:c9:01:35:bd:30:c3:47:ee:0c:
         92:b4:bf:9f:f3:bb:c4:f9:c1:c1:8f:48:e9:30:36:75:69:0c:
         32:ab:ff:29:d3:36:26:40:ae:a0:a8:44:47:ca:5a:51:02:f2:
         11:7e:bd:b1:b1:92:0b:6c:98:2b:f1:a9:a4:63:06:5a:b6:6d:
         f7:a3:8a:f1:51:37:3d:76:d6:af:76:3a:21:c6:5a:8a:de:7a:
         8e:54:2e:43:78:b4:4b:c2:e8:1f:0c:54:10:8d:b0:f7:b1:c8:
         29:9e:2f:89:c1:c9:9d:c5:40:76:1d:b4:a4:9d:6b:42:62:a1:
         4d:3b:8d:ec:e3:4b:88:71:dd:8d:06:cb:6d:83:9b:dc:01:8e:
         49:32:8a:1c:f3:53:ce:a5:70:3b:31:50:de:94:d6:0f:e3:27:
         a4:a2:15:24:d2:23:fe:38:32:3a:88:7d:16:bf:6d:c7:02:1b:
         f7:9c:15:cd:e8:0b:53:c4:1b:b5:fa:04:da:7a:a7:5a:18:5d:
         ed:de:2a:d0:3f:bf:d4:58:63:0b:54:f2:86:6a:99:b1:6a:26:
         bf:04:cc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org