Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131372e302f32342d3234203d3e203533303539.roa
File:                     3138362e3235312e3131372e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          xN0Z5/pPjwZqdX5jcBnoxj6noKOaqrRtX5/k/PukXtc=
Subject key identifier:   01:DD:BB:BC:DD:51:DD:3D:09:9B:FF:96:59:66:F1:F1:79:F4:4A:83
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       4B3890655CE52FD5759CAAF5B6469315BF7AC327
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131372e302f32342d3234203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:19:00 +0000
ROA not before:           Fri 03 Mar 2023 12:14:00 +0000
ROA not after:            Fri 01 Mar 2024 12:19:00 +0000
asID:                     53059
IP address blocks:        186.251.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:38:90:65:5c:e5:2f:d5:75:9c:aa:f5:b6:46:93:15:bf:7a:c3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:14:00 2023 GMT
            Not After : Mar  1 12:19:00 2024 GMT
        Subject: CN=01DDBBBCDD51DD3D099BFF965966F1F179F44A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:26:e5:2d:c9:d4:d7:dd:4e:74:06:e5:63:
                    24:d1:9e:d2:19:47:ce:b6:17:bf:dc:ba:eb:9f:a5:
                    d0:1d:45:9d:82:46:e9:63:68:89:61:eb:42:bf:41:
                    ae:7c:99:f6:35:ec:0b:41:83:26:d4:e5:5f:39:c5:
                    25:52:a3:f1:74:ef:94:c0:4d:b5:b2:f5:61:1f:e0:
                    dd:be:f6:01:f8:ee:89:cd:65:07:fd:16:b7:7b:8a:
                    56:ab:a8:da:52:b9:11:a1:63:02:69:b1:5c:47:99:
                    c8:11:0c:7d:b9:b8:c1:9b:90:65:d2:b6:36:cc:53:
                    c5:82:ec:cb:af:2d:50:11:a9:30:71:e8:a3:c2:14:
                    11:9e:ab:66:d6:6d:73:8a:f9:b3:aa:05:fe:b3:aa:
                    a7:08:84:cf:d0:0a:05:8c:81:38:00:f5:ce:59:65:
                    71:58:ff:6f:8a:04:12:d4:63:17:5a:b9:1f:e1:4f:
                    ab:9d:cf:7e:6a:49:43:60:f7:9e:3a:33:9e:55:69:
                    cc:dc:f8:80:f6:49:27:e4:fc:1a:57:08:57:1f:b1:
                    a1:ba:8e:55:dc:83:85:17:04:48:29:88:bd:c2:3b:
                    71:7c:66:20:fd:4c:16:5c:21:3d:4b:e4:b3:51:b3:
                    b4:d7:a8:d1:56:65:16:5c:5e:83:11:84:02:a0:9b:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DD:BB:BC:DD:51:DD:3D:09:9B:FF:96:59:66:F1:F1:79:F4:4A:83
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131372e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:08:85:79:93:f0:80:2b:58:9d:38:c6:c0:b3:c4:69:c1:f4:
         02:74:e0:37:86:59:5c:e9:51:d1:53:06:4a:5b:fc:13:ba:6d:
         e5:6d:6c:8a:4c:1a:f8:5d:40:87:c0:ff:88:29:e9:d9:cb:ea:
         17:0e:c3:7b:1a:b7:ab:7e:e9:95:dc:02:39:6c:93:c8:4c:db:
         a5:77:cf:5b:00:dc:bd:1a:e5:29:4f:7e:8a:61:8e:2f:6f:d7:
         65:2e:7d:39:87:05:c1:3f:fd:46:b8:78:87:0e:79:31:4c:e6:
         16:61:d7:39:81:1a:a1:a9:c1:62:26:00:60:26:76:b0:e6:bf:
         6f:fe:27:6b:de:af:6c:19:12:bd:99:0f:cb:30:cb:25:05:9d:
         4f:55:5d:c5:e0:7a:93:a3:a1:64:68:94:3b:ee:b2:2b:6a:d8:
         da:e8:e7:f2:be:6e:ef:01:2a:7d:41:ec:76:12:ab:96:dd:e6:
         13:8e:9e:12:dc:01:15:2d:60:9c:7c:3a:98:f2:c6:9e:59:4a:
         27:f2:e8:23:e4:39:8c:8a:bc:16:4c:62:92:7e:8c:18:6b:d0:
         15:8d:40:30:88:9f:d7:27:e9:05:3e:b3:47:d2:42:aa:76:86:
         34:6f:91:0d:80:dc:17:3b:cc:78:33:c9:de:0c:85:79:d9:1d:
         94:2e:f8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org