Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131392e302f32342d3234203d3e203533303539.roa
File:                     3138362e3235312e3131392e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          B6GDtX0RhdkhP38rj+L7pzd2dg3lqQFbTo9Uxl0p4x4=
Subject key identifier:   95:7C:63:C3:62:A9:EA:3E:43:AE:83:8B:BC:30:60:F1:D8:85:A4:5D
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       584BAE1E9380AEA1063BA881DCE3242D2E07C3FC
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131392e302f32342d3234203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:19:04 +0000
ROA not before:           Fri 03 Mar 2023 12:14:04 +0000
ROA not after:            Fri 01 Mar 2024 12:19:04 +0000
asID:                     53059
IP address blocks:        186.251.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4b:ae:1e:93:80:ae:a1:06:3b:a8:81:dc:e3:24:2d:2e:07:c3:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:14:04 2023 GMT
            Not After : Mar  1 12:19:04 2024 GMT
        Subject: CN=957C63C362A9EA3E43AE838BBC3060F1D885A45D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:79:f8:81:df:12:b3:9e:9f:b1:b8:ae:7f:
                    01:87:f4:c0:34:3d:13:5b:f7:80:3c:74:ba:f8:44:
                    fe:fa:aa:83:7e:f2:ea:51:04:ca:ed:42:f1:95:04:
                    0f:62:06:4b:65:e6:6e:61:d9:1d:92:7e:be:ce:50:
                    47:80:94:6e:d6:22:3f:f5:fe:55:bd:34:fe:99:83:
                    46:48:2e:ee:5e:e7:1b:d0:30:3f:00:2d:0f:ef:f4:
                    14:6c:95:8a:2b:54:e0:15:11:a7:88:84:4e:5c:99:
                    87:cb:d5:2d:91:17:20:fe:37:73:8c:b3:a7:a9:96:
                    56:e1:0a:a9:67:34:b8:d2:9a:ff:2b:70:20:d5:c5:
                    b5:bb:d1:04:4b:5c:3c:d0:0d:7b:43:6b:e8:d4:32:
                    88:8c:7f:f5:5b:d9:62:7a:cb:b2:dd:09:74:62:8f:
                    c4:92:e7:5f:8d:0b:4c:e2:4b:cc:28:ba:12:fe:15:
                    5f:ed:7e:0b:23:30:25:bd:67:cb:c6:9d:1a:53:16:
                    1a:49:a8:e2:28:1b:e7:c7:3b:cc:df:53:dc:b9:dd:
                    51:6c:56:a3:41:79:e0:be:25:12:90:31:fe:a2:95:
                    4e:84:c2:dc:ad:3b:be:62:af:7b:21:a5:0c:c5:68:
                    9e:5d:6a:b2:2b:f8:34:3e:9f:6c:a7:ee:4c:ca:cc:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7C:63:C3:62:A9:EA:3E:43:AE:83:8B:BC:30:60:F1:D8:85:A4:5D
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131392e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:30:0c:43:be:1e:8f:39:86:df:86:c0:a6:23:c3:01:ba:96:
         3c:26:61:fd:44:36:7e:1d:a3:10:21:ac:d9:59:e1:fa:2b:e1:
         03:9f:de:06:1d:4e:85:37:76:37:bc:f4:bf:15:db:6f:23:80:
         5b:37:29:48:43:b8:74:53:b3:78:14:63:1f:a1:89:90:d9:1c:
         f8:e7:d5:52:c1:be:c2:fa:0d:b9:2b:a6:91:6f:92:c8:b7:7f:
         ee:85:67:57:b1:0b:08:3f:02:3f:c6:2e:ba:19:ea:e2:45:c3:
         b3:41:42:ae:08:ed:e2:1a:0a:27:ca:08:1b:2d:ae:7e:a3:95:
         59:20:9a:ed:76:30:0b:d7:ee:9c:4a:6f:5d:5a:8d:44:80:c0:
         ec:08:d7:d0:ac:d8:0c:0f:c2:df:48:ac:62:01:0a:4c:a0:f1:
         72:3d:d1:3a:02:52:1e:72:34:c2:83:8e:97:a9:cb:4e:d8:17:
         09:7f:5f:3e:3e:0d:d5:86:5f:37:3b:29:b2:e9:97:b9:dd:22:
         d6:0c:51:a8:f3:5f:5b:66:5f:e3:42:d3:06:d0:b8:15:f1:c0:
         fb:a9:6c:f8:63:0b:8e:07:49:7c:c8:77:a0:e5:1d:5f:77:b3:
         2d:6f:ed:c3:60:26:fd:20:87:83:24:94:1d:1b:19:85:76:b1:
         ae:92:f6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org