Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230382e302f32312d3234203d3e203533323234.roa
File:                     3138362e3230382e3230382e302f32312d3234203d3e203533323234.roa (raw, json)
Hash identifier:          yh4ozx5XCT0w/lCs5vjA8jIq/bnaPyOlOw/HJDAa6aw=
Subject key identifier:   A1:76:90:9A:F1:2B:F2:E1:E7:FA:C8:4D:FD:96:DD:06:BE:DA:20:7B
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       033993C641479DDD71F4E84DEB59E5B76ED5BEAA
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230382e302f32312d3234203d3e203533323234.roa
Signing time:             Mon 13 Mar 2023 17:06:53 +0000
ROA not before:           Mon 13 Mar 2023 17:01:53 +0000
ROA not after:            Mon 11 Mar 2024 17:06:53 +0000
asID:                     53224
IP address blocks:        186.208.208.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:39:93:c6:41:47:9d:dd:71:f4:e8:4d:eb:59:e5:b7:6e:d5:be:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar 13 17:01:53 2023 GMT
            Not After : Mar 11 17:06:53 2024 GMT
        Subject: CN=A176909AF12BF2E1E7FAC84DFD96DD06BEDA207B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:95:a8:52:bc:5f:a1:65:5f:5c:81:11:ca:d4:
                    e3:3d:29:1d:1e:42:c4:de:d9:2d:f6:89:7d:71:c1:
                    c3:ee:e1:86:ea:f7:f1:d1:94:1b:fb:b0:ad:e5:17:
                    d5:7e:10:c2:25:ea:ad:eb:bf:f2:ea:b2:ac:3b:9f:
                    a5:75:d5:24:34:7f:f3:e1:87:f8:2e:61:26:4a:b7:
                    71:5e:23:dc:a3:87:27:b7:14:e4:7c:d1:8d:e5:fc:
                    20:70:58:c0:33:c0:6b:ba:40:50:2e:19:f6:67:89:
                    35:1d:d4:07:62:ea:d6:9d:4b:2f:51:af:fd:ad:31:
                    4f:ce:4e:0c:61:10:2d:3e:05:42:0f:ca:76:8f:eb:
                    4b:cd:aa:a9:69:85:3a:15:7e:f7:6e:0f:9f:7a:6e:
                    74:37:a1:d0:ba:c1:3c:62:e6:df:8f:2f:a7:c2:46:
                    45:62:b3:16:85:16:83:d2:6c:a8:aa:9d:ea:07:64:
                    4f:df:ef:50:29:2d:ac:b4:7d:95:d6:53:e7:5f:8d:
                    d1:f2:a7:f5:ad:b6:7f:b4:61:8e:c3:a0:9a:35:04:
                    f3:80:26:d7:d6:0e:6d:27:d6:20:ea:12:e7:63:92:
                    29:e3:f3:5d:c0:60:0a:8e:04:0d:96:4a:ab:70:87:
                    e3:31:95:cd:47:1e:f5:9f:f2:87:33:fd:b7:61:96:
                    d1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:76:90:9A:F1:2B:F2:E1:E7:FA:C8:4D:FD:96:DD:06:BE:DA:20:7B
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230382e302f32312d3234203d3e203533323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bc:6e:19:26:a7:bb:a3:86:5e:ec:67:4b:5e:20:36:e7:c6:21:
         ac:27:8a:67:20:16:23:b7:8c:6c:48:92:7d:2c:f8:4f:04:43:
         01:04:04:b8:53:53:47:21:f9:32:1d:06:a6:c1:f5:15:af:e9:
         5e:44:c0:94:62:7a:ab:c6:f0:f8:15:e6:0f:c4:a1:13:31:09:
         c9:e8:be:39:4d:f1:e4:17:56:f4:9d:3c:97:f6:a4:c5:fd:d2:
         e5:79:92:2f:e4:f8:8e:77:30:11:bd:4e:84:ff:b1:87:ed:a6:
         ec:cf:8e:c2:55:d0:f7:a1:8a:ae:5b:07:38:ca:08:9d:38:33:
         e0:91:d7:87:61:bb:d0:23:2c:2a:f2:77:b7:18:71:2f:94:ba:
         9c:b3:d1:31:47:97:6b:f1:9b:55:3e:f8:c5:51:31:c6:60:5b:
         38:05:14:3f:59:31:15:69:c4:b3:31:46:15:2c:0b:61:8d:cd:
         24:b0:1d:fb:97:a2:fc:75:6e:90:2b:42:fa:f8:e3:99:bd:19:
         63:9e:b8:d4:e5:5c:e6:43:de:be:a4:80:4f:17:80:ab:b5:4e:
         b9:40:e9:66:0e:88:0a:00:67:b8:f7:f9:57:06:f9:1f:6f:bb:
         17:a3:4f:2b:47:52:49:45:16:83:e6:2c:a5:e3:07:ab:fe:ca:
         b0:a7:5a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org