Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231302e302f32332d3233203d3e203533303539.roa
File:                     3138362e3230382e3231302e302f32332d3233203d3e203533303539.roa (raw, json)
Hash identifier:          tHBq2RmJqxkT0HFlMvILawW2gaZ7dHz6eKNVy2JSmGo=
Subject key identifier:   2B:88:C3:DD:E1:BB:CA:2D:D0:67:B8:8E:56:55:81:F8:9E:CD:AB:3B
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       7DDA7944207D25F866B02308CDF213682EB8ACBE
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231302e302f32332d3233203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:33 +0000
ROA not before:           Fri 03 Mar 2023 12:13:33 +0000
ROA not after:            Fri 01 Mar 2024 12:18:33 +0000
asID:                     53059
IP address blocks:        186.208.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:da:79:44:20:7d:25:f8:66:b0:23:08:cd:f2:13:68:2e:b8:ac:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:33 2023 GMT
            Not After : Mar  1 12:18:33 2024 GMT
        Subject: CN=2B88C3DDE1BBCA2DD067B88E565581F89ECDAB3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:23:1d:a3:68:13:8b:ea:89:c7:02:75:59:
                    91:e1:d3:55:aa:a0:26:26:be:b9:dd:32:97:3d:28:
                    eb:6b:20:6c:20:c7:15:9d:2c:40:bc:63:c8:8c:99:
                    15:76:d7:18:39:d7:11:ad:96:f0:05:98:9e:bc:e2:
                    38:c1:01:48:a0:f1:0e:26:24:83:7b:10:6c:88:54:
                    07:d5:c3:0b:f1:75:dd:1d:59:9a:ef:87:8c:0c:4f:
                    93:47:39:28:62:81:e1:d9:f0:d0:d8:97:cc:b3:21:
                    5b:fa:75:07:94:ba:c2:00:d7:60:01:ea:b5:ed:c4:
                    a1:8b:fa:15:ba:12:c8:72:b0:11:89:24:32:c2:ff:
                    84:1f:2c:75:a4:b5:85:fd:f5:84:0f:45:fb:4f:cf:
                    04:65:47:f2:2d:b9:e3:87:44:7f:96:78:d9:3a:fb:
                    d6:5d:d0:e3:c7:b7:c1:c3:e1:af:32:68:d9:b6:6c:
                    70:97:5b:32:5d:14:0d:2d:87:2f:2d:74:29:b3:c9:
                    f4:14:b1:b0:81:11:81:df:13:4e:7b:ba:1f:e7:8e:
                    2c:fa:b0:e4:c4:e5:c9:b9:0a:83:32:57:8b:01:79:
                    d8:32:29:ca:24:cf:39:a4:3e:4b:69:b3:b6:fc:98:
                    bc:8f:0e:5a:0c:e8:d5:8b:6d:96:71:70:83:d9:2d:
                    b5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:88:C3:DD:E1:BB:CA:2D:D0:67:B8:8E:56:55:81:F8:9E:CD:AB:3B
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231302e302f32332d3233203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:f1:3d:a5:5a:cd:28:83:1c:40:c2:2d:bc:d9:fa:19:b1:1c:
         68:63:1c:7c:40:d0:e5:8f:7e:dd:46:01:f4:b3:a9:5a:cd:b8:
         5b:b1:03:1b:09:39:05:e4:07:36:d1:90:c8:fa:c5:56:2a:80:
         67:87:f8:af:9b:7f:45:fc:8a:1e:e5:1d:77:38:69:e8:0d:36:
         d7:68:9a:fc:f2:55:1f:e1:e1:e1:30:fa:f0:15:55:45:b0:32:
         dd:32:89:e9:da:d2:78:97:26:6c:31:ce:36:93:a0:d4:ba:ce:
         5d:d0:3c:16:bd:f8:ed:84:14:a3:8d:0c:12:e0:0c:a1:55:9c:
         6f:17:c2:73:08:ce:ad:03:14:03:fd:de:59:b5:59:fd:b2:f5:
         9d:83:9e:ed:26:09:ce:ae:76:08:b5:e3:d7:8d:37:77:bb:38:
         0b:d1:c7:b4:ca:0c:bf:e1:86:8c:d8:b7:49:db:aa:fc:84:cf:
         0d:64:c3:23:c9:fb:cf:1b:47:84:69:ee:76:d4:82:98:19:14:
         a1:b7:68:a9:a4:8b:9f:fa:17:3f:f4:5c:dd:66:b5:5b:9f:c2:
         ad:19:c3:6e:03:ff:42:c9:65:d1:77:5a:f0:40:38:be:45:3b:
         d5:4b:8e:32:5a:de:69:5b:34:e1:3e:8a:1f:39:02:8c:fe:74:
         54:c6:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org