Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230382e302f32312d3231203d3e203533303539.roa
File:                     3138362e3230382e3230382e302f32312d3231203d3e203533303539.roa (raw, json)
Hash identifier:          kDO2juxe/5Sd0qfmQ+hyyDQOAM23PnJB+4YSBdCYybU=
Subject key identifier:   15:06:70:65:A2:D7:EC:B4:BE:9A:20:96:0B:BE:7E:48:4B:1A:52:31
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       3BDCCCE0075E4F525722715DABF4A8D1BA4ABC31
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230382e302f32312d3231203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:24 +0000
ROA not before:           Fri 03 Mar 2023 12:13:24 +0000
ROA not after:            Fri 01 Mar 2024 12:18:24 +0000
asID:                     53059
IP address blocks:        186.208.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:dc:cc:e0:07:5e:4f:52:57:22:71:5d:ab:f4:a8:d1:ba:4a:bc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:24 2023 GMT
            Not After : Mar  1 12:18:24 2024 GMT
        Subject: CN=15067065A2D7ECB4BE9A20960BBE7E484B1A5231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:fb:5a:30:ff:05:5d:2a:36:1c:6f:93:8f:
                    42:f7:ba:5f:33:cf:ce:15:ca:09:06:69:01:59:0b:
                    20:d0:1d:83:c1:23:ca:04:20:e0:fe:c9:aa:b1:32:
                    2c:2d:dc:35:39:c4:fb:2a:26:b0:23:4b:e7:58:f2:
                    01:ce:16:4f:6a:e7:69:4e:33:81:5c:92:05:3c:8d:
                    c1:b1:01:18:35:31:02:2c:6a:01:5d:1c:da:e7:da:
                    15:09:71:8e:71:73:7f:7e:a0:1e:f8:7c:4a:97:82:
                    27:34:5c:0e:05:a3:bd:eb:9e:9f:f0:16:e4:a7:ca:
                    ad:1a:59:67:63:31:0a:28:bb:14:d2:a2:81:e2:fd:
                    07:49:43:64:ea:25:67:ed:3a:ed:3b:87:7f:0e:a2:
                    58:d3:8b:4d:51:9e:76:6a:ee:39:a3:48:80:50:1c:
                    67:5e:25:d3:1a:88:3f:4a:16:f7:6d:d2:6e:ee:79:
                    15:5f:e6:22:08:0f:b4:98:19:82:bd:a3:34:a3:b7:
                    71:32:45:d1:41:da:da:47:4e:ad:bf:24:d0:52:bb:
                    a2:fa:42:94:62:81:d9:86:a4:43:5b:3d:89:cb:df:
                    24:4b:17:63:d7:0d:b9:cb:68:76:a1:6b:40:ee:45:
                    be:63:e5:cd:ca:ae:19:3e:a9:98:12:fc:af:83:d5:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:06:70:65:A2:D7:EC:B4:BE:9A:20:96:0B:BE:7E:48:4B:1A:52:31
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230382e302f32312d3231203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:5d:d0:2d:4f:d5:69:60:fa:4c:a9:3f:51:36:83:af:2a:98:
         b8:75:a5:f1:74:9e:e2:0e:59:c7:f8:3b:07:14:7d:81:59:56:
         b8:18:14:a8:7e:59:2e:55:8c:7a:37:49:41:92:34:1d:20:99:
         60:d9:59:c1:7c:80:e8:40:d4:c0:93:97:12:3b:09:51:e4:44:
         ac:39:38:8a:82:92:1e:a9:42:4d:a3:ab:3f:77:3e:e4:b1:6e:
         eb:45:64:a1:8d:9a:13:bd:21:a2:6e:fb:c6:4b:c1:6f:ff:ca:
         a9:54:2c:a0:74:29:6f:6b:1d:3f:3e:18:1d:bc:e6:7a:3c:68:
         c6:4d:07:85:3a:55:5f:a6:60:65:b6:f6:ab:c1:b7:f0:49:9b:
         f9:e2:60:d1:6a:6f:96:29:a5:c3:44:10:ab:86:9a:11:bd:c3:
         20:cb:87:4f:fb:db:31:a6:cb:a0:35:91:f8:9d:8b:44:0b:fc:
         49:8c:4e:f0:1c:67:82:b8:4a:0e:18:74:70:8f:98:f9:d6:bf:
         dd:77:f1:d5:84:81:81:41:12:93:cd:5c:d8:f9:1c:70:32:a1:
         71:c4:78:9c:d9:76:6d:af:1d:94:16:04:73:61:8d:e0:11:2b:
         58:51:52:f6:41:31:77:a1:d8:04:fb:47:e1:18:cf:eb:89:4c:
         a7:54:83:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org