Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3233352e302e302f32302d3230203d3e203533303539.roa
File:                     3138362e3233352e302e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier:          RmMeYqRRf1XdvOjHiQ4ywvnEoyHdO52Qv7fqbif7+2s=
Subject key identifier:   68:4C:B6:13:AF:CA:63:2F:92:83:F4:5C:D2:37:A6:93:55:E1:51:76
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       0D1354A34A3AC491ABDEFB13549B18B16498FC1D
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3233352e302e302f32302d3230203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:42 +0000
ROA not before:           Fri 03 Mar 2023 12:13:42 +0000
ROA not after:            Fri 01 Mar 2024 12:18:42 +0000
asID:                     53059
IP address blocks:        186.235.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:13:54:a3:4a:3a:c4:91:ab:de:fb:13:54:9b:18:b1:64:98:fc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:42 2023 GMT
            Not After : Mar  1 12:18:42 2024 GMT
        Subject: CN=684CB613AFCA632F9283F45CD237A69355E15176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:40:b9:f0:aa:66:dd:9b:be:32:6f:90:19:
                    1c:f4:62:e2:f2:10:9e:96:11:fb:5e:15:58:fd:e2:
                    ea:f6:e1:db:52:45:76:db:51:8a:ce:95:92:7a:00:
                    30:ba:e9:29:12:51:49:ba:f3:b4:11:cf:14:db:38:
                    65:59:bd:c9:0f:52:ed:1c:f9:0e:f3:63:50:fd:58:
                    fd:15:62:87:10:24:2a:6a:c7:28:83:98:a0:30:8f:
                    08:82:71:23:52:d2:d5:b1:d6:4f:14:42:5f:ff:da:
                    3d:53:10:42:91:d0:4f:3d:ef:eb:83:c2:2a:8e:70:
                    19:bc:5a:cd:06:40:d0:b8:3e:08:7f:cd:f7:f1:f1:
                    f2:ce:42:ec:ec:30:b0:0e:27:4a:a0:08:8a:13:59:
                    4d:00:d7:3d:cf:09:52:51:f2:27:35:b1:17:db:17:
                    11:bc:73:d9:1a:56:93:6c:fc:85:c9:83:47:aa:c7:
                    36:fe:48:80:23:92:66:6b:4c:98:57:fb:41:f7:5b:
                    d0:96:6c:0d:ca:22:fb:49:60:e3:ef:08:c2:34:08:
                    02:8f:d2:e5:bc:e9:4b:eb:31:ff:60:79:54:1e:ca:
                    eb:93:10:ac:8b:da:fd:c1:c7:c4:85:89:83:1c:e6:
                    ce:73:fe:2f:67:7b:50:68:77:f5:1e:4e:f4:82:14:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4C:B6:13:AF:CA:63:2F:92:83:F4:5C:D2:37:A6:93:55:E1:51:76
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3233352e302e302f32302d3230203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:1c:8f:b2:82:25:87:16:60:14:16:06:cc:db:94:6e:02:87:
         dd:1e:80:f3:32:ec:11:27:23:52:6b:30:f3:ad:1e:da:c8:4d:
         71:bc:71:b3:ad:81:f3:8e:a7:69:e2:4c:9a:00:ad:26:6a:82:
         fb:9e:2b:a6:f5:5f:c6:e7:a6:9e:47:b7:f1:d7:ff:dd:26:f5:
         84:9e:12:4b:f8:cc:6f:6c:56:f0:83:37:d8:9a:9e:01:f2:06:
         7a:a5:ee:6b:13:7d:9c:50:0a:c9:89:52:67:cf:f7:cc:9a:b4:
         43:47:82:0c:4c:26:d8:1f:46:f8:b6:c3:8f:3a:3c:21:a1:c4:
         ef:86:e1:fa:45:30:42:e5:bb:c4:90:d1:8e:64:79:bb:cf:ab:
         e6:0f:46:18:ea:ac:8b:0f:56:95:b2:35:ef:d1:11:ca:41:c7:
         7b:00:90:13:fe:0d:cb:38:0a:22:59:bb:89:91:5e:2b:d6:b0:
         00:c1:26:d0:e4:71:c1:f7:c2:c2:53:c4:83:29:92:7b:32:3f:
         83:83:91:1c:a2:9c:dd:64:dc:02:c2:a5:fa:6a:55:ed:a1:03:
         5c:c1:d3:9f:fd:f6:bb:3a:63:72:4d:cb:c0:05:7f:ff:8e:a4:
         4a:eb:c0:b1:23:01:e6:e4:ee:46:74:0c:39:86:1f:66:fa:43:
         d4:99:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org