Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231312e302f32342d3234203d3e203533303539.roa
File:                     3138362e3230382e3231312e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          Wia1qHHOOUmEAVFCe4eCJhZN/m/yuiB9dhvxCOYRSvA=
Subject key identifier:   0C:1F:05:ED:90:19:08:2A:64:A5:A9:83:5C:45:4F:D1:8C:57:95:8F
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       4777CC6B5A7F0E2C542DAE0650C7F3124A171212
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231312e302f32342d3234203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:38 +0000
ROA not before:           Fri 03 Mar 2023 12:13:38 +0000
ROA not after:            Fri 01 Mar 2024 12:18:38 +0000
asID:                     53059
IP address blocks:        186.208.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:77:cc:6b:5a:7f:0e:2c:54:2d:ae:06:50:c7:f3:12:4a:17:12:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:38 2023 GMT
            Not After : Mar  1 12:18:38 2024 GMT
        Subject: CN=0C1F05ED9019082A64A5A9835C454FD18C57958F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:93:cb:d1:40:46:f9:c1:1e:c6:1e:e1:f1:6c:
                    8f:79:c4:59:d7:9e:57:97:3b:25:66:04:70:62:65:
                    a4:f2:66:3a:37:c8:b6:64:ab:61:26:fe:76:6e:b6:
                    50:de:18:87:ce:1b:a4:1c:26:9a:85:5e:68:bc:be:
                    50:0d:dc:cf:f1:00:a8:ca:58:cf:58:b2:5b:ea:95:
                    0b:52:89:21:02:ef:31:82:47:b0:7d:64:ec:c3:54:
                    20:18:2c:6d:49:f6:84:05:80:06:db:8d:dc:d9:32:
                    89:23:6a:48:57:63:32:5a:47:5a:6e:fa:4b:96:ca:
                    f6:19:77:87:26:76:07:73:bb:74:d6:18:eb:34:15:
                    39:0e:89:e7:22:91:44:5c:1e:4f:7d:4f:e7:81:32:
                    5b:db:59:7a:94:3d:5e:86:a4:aa:60:3d:b7:a9:d2:
                    db:32:e0:56:55:ce:d2:2d:83:7f:80:48:ad:5e:0d:
                    19:1b:22:69:87:0d:0d:10:75:fa:43:74:c0:41:b3:
                    f6:68:6f:1f:9d:1b:44:20:72:87:0d:ad:e6:9c:d4:
                    67:af:34:46:8d:54:9f:4d:9f:f3:05:f4:2e:25:a9:
                    b4:5d:cd:7d:90:cd:b5:e7:1c:91:68:68:47:3d:a8:
                    9f:82:ca:55:0c:bf:fd:72:04:43:f9:53:b5:fa:ba:
                    5d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1F:05:ED:90:19:08:2A:64:A5:A9:83:5C:45:4F:D1:8C:57:95:8F
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231312e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:4e:7a:21:77:e3:0a:43:a4:de:7b:24:a6:48:5b:15:bf:bf:
         87:61:e9:2a:4e:4c:d5:9e:9c:ec:ff:6f:78:31:1d:54:cb:cf:
         fb:66:57:38:ea:a8:b3:33:f4:70:aa:83:4e:fc:ca:d8:ad:38:
         4e:24:69:73:7a:97:e8:a2:5f:94:a4:90:13:82:fd:f3:5a:6f:
         f5:9e:85:14:56:53:6c:33:fb:35:85:12:33:ce:0b:3b:37:7e:
         bc:ed:db:7f:4c:23:2d:df:a4:ed:1c:f0:f9:6e:18:36:18:72:
         83:d9:ae:74:75:7f:63:36:2f:0a:e9:c5:36:ac:d3:63:26:c0:
         f3:56:d5:61:9f:7d:4d:ef:fe:c4:80:4d:ec:04:05:2c:2a:43:
         23:ce:2b:d4:5c:0f:4d:d3:50:3a:21:cb:ab:54:c0:06:66:09:
         6c:77:52:98:f1:91:1a:7d:81:df:ef:10:93:99:72:e5:00:97:
         03:02:87:c0:76:4f:62:d2:ff:1f:35:fd:8a:aa:f5:11:4f:5b:
         eb:4a:c5:7e:38:8b:33:94:2a:d8:a4:be:cf:fd:17:64:60:5c:
         9e:17:2e:8a:00:eb:4f:a4:68:df:f6:02:67:89:e3:c3:90:99:
         ad:4a:b6:d4:32:08:10:d1:a2:ca:62:86:07:38:26:69:89:47:
         6f:57:e5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org