Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131352e302f32342d3234203d3e203533303539.roa
File:                     3138362e3235312e3131352e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          8zFfCOTK5KV9wLd2XOwrAHnP6sd1jc49dwk1Orhk/mk=
Subject key identifier:   D8:EC:7F:94:D9:68:F7:13:5D:95:26:9B:C7:40:60:5D:5B:FD:CB:79
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       20AA3B9FDDCA547B3ACB296C9B373DA66E20F660
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131352e302f32342d3234203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:52 +0000
ROA not before:           Fri 03 Mar 2023 12:13:52 +0000
ROA not after:            Fri 01 Mar 2024 12:18:52 +0000
asID:                     53059
IP address blocks:        186.251.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:aa:3b:9f:dd:ca:54:7b:3a:cb:29:6c:9b:37:3d:a6:6e:20:f6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:52 2023 GMT
            Not After : Mar  1 12:18:52 2024 GMT
        Subject: CN=D8EC7F94D968F7135D95269BC740605D5BFDCB79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:05:a5:ce:c5:fa:86:d4:90:e3:a1:19:b9:
                    9f:6f:76:4c:6b:6d:0b:fe:32:fc:9d:65:5c:1d:64:
                    d3:49:6e:35:e6:eb:71:db:9e:85:97:97:cb:93:85:
                    4c:a9:6d:2f:18:2b:25:48:11:ef:55:d4:f2:d2:99:
                    9d:13:22:b1:3e:59:40:cf:d9:1a:7c:71:0e:a9:3e:
                    d8:7c:2e:4f:7c:c1:52:32:58:0a:cf:a9:48:c2:88:
                    da:ef:e5:bc:b9:d9:99:2e:6f:67:e8:b3:5b:67:2d:
                    62:b7:c0:bb:3a:a7:ff:26:47:f4:4f:2a:ea:8e:d7:
                    57:6d:58:56:d9:e4:7f:10:a3:c8:5a:f0:8e:61:6f:
                    9a:96:9c:60:ea:f5:89:fd:4d:e3:4b:2e:7f:51:2c:
                    13:15:98:67:0a:8e:26:df:e7:da:f8:0b:a6:ab:3c:
                    02:66:b7:9f:fc:de:c7:f5:4d:37:cf:55:79:05:a4:
                    1f:63:57:f0:85:f4:97:dd:27:bc:74:03:89:a2:ae:
                    43:8a:2c:8a:10:37:a5:85:74:87:1e:52:8d:73:8c:
                    71:59:70:f6:7a:18:83:0e:21:d4:23:a3:dd:84:5b:
                    72:b4:ec:e8:9d:de:16:6c:7c:8b:93:db:c9:b0:02:
                    08:80:2c:28:35:c2:c6:02:c4:76:88:eb:a5:65:9f:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EC:7F:94:D9:68:F7:13:5D:95:26:9B:C7:40:60:5D:5B:FD:CB:79
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131352e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:fe:56:03:16:97:a0:ff:f8:5f:9e:11:3c:f8:8f:24:37:52:
         a4:5c:d3:08:bb:c1:51:d6:79:55:b4:35:59:9c:46:44:d0:25:
         bf:29:b0:35:c9:8c:c5:02:b1:0e:84:39:15:88:ca:b2:db:ab:
         28:7c:22:ec:01:ae:e9:99:28:6c:39:2c:5b:1c:9c:ab:ed:93:
         1b:86:70:f5:24:15:0d:1a:f6:c9:2d:bf:50:1e:df:6f:4a:ab:
         74:74:4a:d0:e2:16:1e:c8:c2:e1:3e:f0:9d:15:fa:f3:77:9a:
         94:3a:86:ca:ab:35:35:c7:db:56:4c:75:c7:4e:63:6d:25:d6:
         68:46:0f:20:79:01:55:82:5c:76:8b:5e:dd:c8:ce:c2:5d:7d:
         56:cb:57:60:0f:f3:e9:cf:b0:a6:f3:48:e3:dd:24:e9:df:0d:
         1c:4c:8e:3f:b3:03:b3:64:9e:ce:e9:40:bf:2b:74:c3:c8:93:
         5b:81:11:fb:21:7b:bc:f7:e7:6f:4d:76:a9:7c:97:1e:ce:20:
         f0:f2:e8:c9:a0:d9:0a:bf:91:11:3f:ae:db:26:a9:3f:30:5f:
         cd:62:13:d9:69:40:13:09:29:05:da:7e:78:0d:dd:9c:7e:52:
         3d:1b:49:39:62:eb:e2:d3:b0:37:7a:9d:38:74:8b:8f:3b:00:
         cc:bc:09:34
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIKo7n93KVHs6yylsmzc9pm4g9mAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYyMjM1NDA5OERBOUU4NDQ1QkFEMjQ0NDVGNTZDNTdF
RTYzOEUwRTAeFw0yMzAzMDMxMjEzNTJaFw0yNDAzMDExMjE4NTJaMDMxMTAvBgNV
BAMTKEQ4RUM3Rjk0RDk2OEY3MTM1RDk1MjY5QkM3NDA2MDVENUJGRENCNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DAWlzsX6htSQ46EZuZ9vdkxr
bQv+MvydZVwdZNNJbjXm63HbnoWXl8uThUypbS8YKyVIEe9V1PLSmZ0TIrE+WUDP
2Rp8cQ6pPth8Lk98wVIyWArPqUjCiNrv5by52Zkub2fos1tnLWK3wLs6p/8mR/RP
KuqO11dtWFbZ5H8Qo8ha8I5hb5qWnGDq9Yn9TeNLLn9RLBMVmGcKjibf59r4C6ar
PAJmt5/83sf1TTfPVXkFpB9jV/CF9JfdJ7x0A4mirkOKLIoQN6WFdIceUo1zjHFZ
cPZ6GIMOIdQjo92EW3K07Oid3hZsfIuT28mwAgiALCg1wsYCxHaI66Vln/65AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2Ox/lNlo9xNdlSabx0BgXVv9y3kwHwYDVR0j
BBgwFoAUNiI1QJjanoRFutJERfVsV+5jjg4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zNjIyMzU0MDk4REE5RTg0NDVCQUQyNDQ0NUY1NkM1N0VFNjM4RTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2MjIzNTQwOThEQTlFODQ0
NUJBRDI0NDQ1RjU2QzU3RUU2MzhFMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzODM2MmUzMjM1MzEyZTMxMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+3MwDQYJKoZIhvcNAQELBQADggEBAHf+VgMW
l6D/+F+eETz4jyQ3UqRc0wi7wVHWeVW0NVmcRkTQJb8psDXJjMUCsQ6EORWIyrLb
qyh8IuwBrumZKGw5LFscnKvtkxuGcPUkFQ0a9sktv1Ae329Kq3R0StDiFh7IwuE+
8J0V+vN3mpQ6hsqrNTXH21ZMdcdOY20l1mhGDyB5AVWCXHaLXt3IzsJdfVbLV2AP
8+nPsKbzSOPdJOnfDRxMjj+zA7Nkns7pQL8rdMPIk1uBEfshe7z3529Ndql8lx7O
IPDy6Mmg2Qq/kRE/rtsmqT8wX81iE9lpQBMJKQXafngN3Zx+Uj0bSTli6+LTsDd6
nTh0i487AMy8CTQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org