Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230382e302f32342d3234203d3e203533303539.roa
File:                     3138362e3230382e3230382e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          nqfVrFKOgh9Q0SrTxz4bADhT+w9T5ACJ+hkZUkX3uPI=
Subject key identifier:   0E:A8:B6:2B:41:29:38:AE:1C:44:BB:00:0D:B2:C0:54:BF:03:5B:D8
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       4C9157738250EE2088E8A00254A1F59F94A695E4
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230382e302f32342d3234203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:29 +0000
ROA not before:           Fri 03 Mar 2023 12:13:29 +0000
ROA not after:            Fri 01 Mar 2024 12:18:29 +0000
asID:                     53059
IP address blocks:        186.208.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:91:57:73:82:50:ee:20:88:e8:a0:02:54:a1:f5:9f:94:a6:95:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:29 2023 GMT
            Not After : Mar  1 12:18:29 2024 GMT
        Subject: CN=0EA8B62B412938AE1C44BB000DB2C054BF035BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:53:e8:fb:f3:62:2f:9a:7a:42:d3:d3:2a:
                    5d:95:f2:48:76:2b:3b:ca:e1:ab:a0:80:0b:31:26:
                    ef:6a:4b:9a:85:fc:a0:21:af:af:3f:84:be:40:80:
                    a8:68:39:6b:b3:59:29:37:5d:92:7f:2c:14:74:b8:
                    8f:4f:80:0c:99:fc:6d:0b:3d:68:aa:8e:cb:20:ff:
                    bf:b0:dc:ac:72:cf:97:9f:a2:28:06:4f:fb:78:ad:
                    3b:af:8a:1c:a1:f5:f1:67:74:5a:cd:4e:dd:5e:1e:
                    8e:b4:0d:1a:52:c2:e8:fb:02:79:66:e4:56:2e:8d:
                    f3:0c:75:a2:e0:a9:cd:39:d7:74:31:77:19:30:13:
                    68:5d:f0:ea:72:22:c6:80:73:e2:0a:37:d5:71:af:
                    04:2b:48:2d:40:56:1c:52:07:4a:63:76:8d:72:60:
                    20:21:fd:bd:8b:d0:e1:a4:a0:13:b4:35:81:0d:58:
                    e4:2a:db:04:aa:99:6c:e4:b7:c8:32:dd:c3:4f:8b:
                    70:b9:35:88:6e:76:da:bf:66:6a:5e:fa:84:b3:1a:
                    1b:72:49:b5:49:20:aa:b5:22:93:16:ba:a9:1e:af:
                    f3:4b:0a:b5:4e:95:e7:f7:71:2b:2a:f5:60:9b:a2:
                    07:b7:3c:78:12:fe:b3:f6:24:45:3a:19:d6:5e:f3:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A8:B6:2B:41:29:38:AE:1C:44:BB:00:0D:B2:C0:54:BF:03:5B:D8
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230382e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:c9:f3:a7:52:3a:25:8b:bb:4b:25:78:92:df:78:17:55:
         f6:37:0d:03:9a:29:7f:49:df:79:f8:be:78:2d:e7:3d:7f:07:
         24:db:92:c0:78:1e:8f:6f:84:ec:a1:7b:5a:8b:ff:62:44:58:
         9a:84:b7:37:43:3d:33:fd:27:44:07:4c:b4:fa:58:71:c7:b7:
         fc:5a:dc:57:78:28:a3:4c:83:f6:57:f8:31:2b:7d:5e:0a:14:
         00:3f:d5:5f:66:99:87:b8:a3:14:2f:bf:d6:99:9d:6a:5c:ac:
         0f:94:e1:a3:33:d4:e2:9d:69:4a:95:20:a6:99:1c:b2:f8:54:
         01:d8:aa:19:cf:2f:ee:4f:f7:1f:9f:7a:4c:5f:2b:d6:50:e5:
         ce:93:24:90:74:0a:88:69:39:70:d2:ae:fc:77:8a:ce:56:82:
         6e:50:cd:70:fe:f8:b9:8a:e1:81:14:88:cc:17:1c:0f:38:f2:
         f4:e2:0a:c4:8f:bb:a2:2d:b8:13:68:20:6a:55:c2:dc:33:b8:
         56:dd:33:fc:6c:be:b7:ac:21:9e:71:4d:1e:f2:1a:11:82:a0:
         6a:c4:d5:32:fd:ab:16:01:12:6d:06:dd:02:96:8b:26:48:90:
         19:b1:fc:3d:d4:d8:e8:52:4a:04:4a:a8:9b:7f:de:45:06:25:
         98:f6:53:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org