Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230392e302f32342d3234203d3e203533303539.roa
File:                     3138362e3230382e3230392e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          APLF9SkIAHxqcNHP47nczO8Vu9vhy/53Km0ADOkrMvQ=
Subject key identifier:   AA:C3:46:88:27:1B:3C:35:B3:CB:7E:14:38:11:4D:6D:91:38:D5:94
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       3ECE21566D3AD8DEE6372FBB4C7EFDEDEEC24C87
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230392e302f32342d3234203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:31 +0000
ROA not before:           Fri 03 Mar 2023 12:13:31 +0000
ROA not after:            Fri 01 Mar 2024 12:18:31 +0000
asID:                     53059
IP address blocks:        186.208.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ce:21:56:6d:3a:d8:de:e6:37:2f:bb:4c:7e:fd:ed:ee:c2:4c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:31 2023 GMT
            Not After : Mar  1 12:18:31 2024 GMT
        Subject: CN=AAC34688271B3C35B3CB7E1438114D6D9138D594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:28:84:97:57:0c:46:dc:26:bc:e6:d1:9f:51:
                    54:74:8a:f2:bb:09:8d:bd:06:fd:f0:8f:5d:98:46:
                    c8:44:de:cd:02:9a:23:62:2f:3e:63:a5:ed:f4:df:
                    d6:ef:1d:bf:01:bc:ba:e9:f9:84:d6:d1:bf:69:b6:
                    a8:6b:d0:22:bd:4e:ad:f8:33:95:3d:60:52:d0:07:
                    22:c9:82:bd:d5:ff:e2:b8:fb:0e:65:ea:dd:24:8a:
                    8b:3f:e9:5b:fb:86:2c:75:fb:67:bc:1a:09:b9:e4:
                    59:09:7a:92:aa:aa:2f:73:e8:95:c5:79:cc:01:1e:
                    e3:e8:9c:42:89:5b:e2:d9:32:6e:55:9c:34:d1:b4:
                    96:25:27:12:d4:8e:50:5d:0c:2a:7f:52:60:a9:b6:
                    40:0f:29:6a:52:a8:73:f9:3c:18:d7:e6:cc:a7:17:
                    04:a8:b4:2b:b6:79:2d:90:08:75:e8:eb:64:6d:dd:
                    53:29:2b:fc:d2:de:f6:a9:1f:ec:85:db:df:5f:16:
                    70:0c:fb:15:59:62:03:dd:5b:0f:4e:cf:57:75:15:
                    31:f3:4c:29:9b:b5:ae:47:5b:e2:2a:57:3d:ab:af:
                    d4:2b:cb:58:a9:a7:61:a7:db:01:b6:79:02:cc:c4:
                    80:de:ce:61:d6:32:db:a6:60:e2:76:18:99:4c:e5:
                    ab:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C3:46:88:27:1B:3C:35:B3:CB:7E:14:38:11:4D:6D:91:38:D5:94
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230392e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:9c:ee:f8:7c:7a:1a:67:6f:a6:fc:1c:3a:70:c9:19:0b:25:
         54:ff:a4:21:f6:65:dc:19:03:90:b1:92:0e:a9:3b:17:5d:5a:
         2f:52:a4:94:6c:81:59:64:37:83:35:3d:12:76:e5:63:e6:e0:
         f6:4d:08:7a:ab:ee:70:5b:8d:3a:1c:90:ce:7e:92:f3:f6:bb:
         33:38:e5:4c:4c:75:d0:4d:de:36:dd:07:97:43:0f:37:b6:49:
         23:cb:34:0a:64:48:45:9e:2b:b7:e0:ea:7f:e9:7e:6d:c5:b1:
         5c:82:7e:26:4d:b9:4c:7f:07:9f:57:da:2c:bb:46:4b:f3:71:
         75:7f:91:0f:3c:67:a3:9b:a5:25:ce:76:91:96:22:05:a0:7c:
         86:89:0f:f6:9a:f0:8c:39:c7:94:5b:28:51:06:ec:e1:e0:4f:
         57:fb:6a:03:dd:23:b7:dc:ea:10:9e:a2:76:97:d0:50:5b:d3:
         9f:f5:89:a4:78:8c:30:90:05:22:3a:15:98:a9:21:4d:92:c2:
         73:32:93:81:f9:7a:e2:aa:1f:44:98:df:d9:ce:63:aa:8b:85:
         53:04:ac:fd:15:00:b2:35:de:64:81:bd:8d:2e:50:a7:96:eb:
         5c:96:5b:20:55:1e:c4:a9:69:4d:6e:19:d8:30:ac:11:95:d4:
         c7:18:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org