Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131362e302f32322d3232203d3e203533303539.roa
File:                     3138362e3235312e3131362e302f32322d3232203d3e203533303539.roa (raw, json)
Hash identifier:          9pYfYuUgvVFysXiGXniAzHNgHFmvm2DH37AmoK5dIDc=
Subject key identifier:   B3:C8:9B:C1:C9:BD:CD:2A:FC:0F:EF:F3:35:9C:1C:E4:33:6D:B4:D3
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       431E0F4F49D09B6895862B02CACF60F11751011C
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131362e302f32322d3232203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:18:55 +0000
ROA not before:           Fri 03 Mar 2023 12:13:55 +0000
ROA not after:            Fri 01 Mar 2024 12:18:55 +0000
asID:                     53059
IP address blocks:        186.251.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1e:0f:4f:49:d0:9b:68:95:86:2b:02:ca:cf:60:f1:17:51:01:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:13:55 2023 GMT
            Not After : Mar  1 12:18:55 2024 GMT
        Subject: CN=B3C89BC1C9BDCD2AFC0FEFF3359C1CE4336DB4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:90:56:f0:36:18:12:8c:9d:36:06:55:83:
                    3a:26:97:54:a8:c3:34:76:75:30:f7:02:09:a1:47:
                    de:4b:bb:76:4d:61:71:a8:56:ac:3f:03:d6:9f:14:
                    43:01:3b:c1:57:20:00:13:0c:21:52:ce:2d:c0:34:
                    b9:bd:92:9c:d9:00:58:e3:6a:08:2d:e7:7b:0d:b7:
                    21:15:4c:18:80:33:d4:93:25:41:80:47:8c:6d:81:
                    9c:6b:12:7c:fb:3b:88:c4:f7:21:0c:39:be:81:94:
                    9e:8d:68:18:ea:b5:8e:ac:2e:aa:95:7a:3c:c8:04:
                    8a:6a:e5:62:dd:00:6f:bf:a2:44:3c:b8:d9:ec:d7:
                    7c:8b:ee:b2:3d:6b:93:7a:1a:cb:ee:6b:e7:10:12:
                    e5:f8:51:62:be:8a:85:77:15:d9:c2:2e:e9:c6:03:
                    5a:f8:14:ed:c2:c6:84:59:f1:8c:bc:16:3b:6e:25:
                    5d:38:c6:87:71:fa:c3:df:b4:fa:df:38:cd:cf:29:
                    d4:e7:a6:60:c4:cf:40:38:a3:32:43:23:c2:b3:a0:
                    5e:22:ea:c6:73:76:a8:80:3e:c5:ae:b1:c8:d3:79:
                    3e:87:82:bc:1c:d5:b5:96:40:a1:55:e0:02:77:b9:
                    44:0f:25:a8:30:71:f4:aa:09:1d:d4:d4:8f:fa:82:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C8:9B:C1:C9:BD:CD:2A:FC:0F:EF:F3:35:9C:1C:E4:33:6D:B4:D3
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131362e302f32322d3232203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:a3:37:74:1c:62:c4:04:d2:ba:cc:c6:3c:0c:54:51:2c:9a:
         22:62:e0:91:d2:7b:fd:6c:46:21:27:23:46:2c:c1:4b:2d:0d:
         ee:28:95:ea:49:0f:9f:40:45:9c:80:c9:a9:b0:0d:f9:f4:0c:
         cf:42:36:a5:85:37:1b:a2:d9:ec:f2:a0:e4:10:a7:25:67:eb:
         25:60:94:e9:25:51:46:ef:5c:8d:f9:68:04:2f:c4:3c:1b:7d:
         75:fc:3b:2d:52:84:c2:c2:6e:c4:25:88:9c:e4:89:9b:e8:66:
         89:6e:2f:c7:5b:b1:50:59:f9:d3:3a:f1:0d:f5:92:9f:67:95:
         21:3b:4d:2e:9a:8e:dc:e1:ba:dd:18:9c:52:50:8c:5f:a0:53:
         cb:5e:30:28:ec:e3:8d:66:bd:2d:1c:d6:16:25:ba:f9:6a:15:
         7d:9c:f5:bf:e3:b5:3e:62:c2:65:48:31:43:c2:12:67:de:7f:
         33:fa:69:b4:82:b2:f1:0e:22:cc:d6:cb:2a:84:4b:6a:b8:61:
         7e:14:d1:50:69:87:24:ea:01:79:63:2c:a2:2a:72:35:bd:3b:
         7f:75:da:3d:52:d9:b1:46:29:dc:e7:22:3f:c5:9f:78:7e:59:
         bf:6d:b1:3b:80:c8:ee:df:e3:2a:a9:ff:c2:ee:2a:f5:ea:34:
         96:2f:68:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org