Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3130382e36342e302f32302d3230203d3e203533303539.roa
File:                     3138372e3130382e36342e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier:          Uv3xhncyr6dmTVs205dahGqzZECpvNAYz+QPoEfVH64=
Subject key identifier:   A5:04:97:50:72:19:99:13:50:CD:9F:28:47:42:00:8D:FC:69:94:4F
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       5860C91486513D49F48E5EB0C6511A4304552C6B
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3130382e36342e302f32302d3230203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:19:24 +0000
ROA not before:           Fri 03 Mar 2023 12:14:24 +0000
ROA not after:            Fri 01 Mar 2024 12:19:24 +0000
asID:                     53059
IP address blocks:        187.108.64.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:60:c9:14:86:51:3d:49:f4:8e:5e:b0:c6:51:1a:43:04:55:2c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:14:24 2023 GMT
            Not After : Mar  1 12:19:24 2024 GMT
        Subject: CN=A50497507219991350CD9F284742008DFC69944F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:2f:5e:8e:c9:e4:bb:48:d9:7b:48:8b:87:
                    28:2c:d1:c7:89:be:ae:81:11:df:b5:f2:73:f2:17:
                    92:b3:06:5f:be:3e:a6:29:ac:f8:5a:66:5a:4f:38:
                    0b:5d:30:fd:fe:5d:3f:74:8f:82:ea:17:10:be:b7:
                    4d:3d:32:58:0f:cc:48:22:49:30:07:04:08:fd:1d:
                    a3:eb:4f:d6:29:5e:df:07:63:d1:af:ff:26:7e:52:
                    b4:64:86:e0:e4:ce:18:07:01:ef:1e:e8:a4:0e:db:
                    09:24:fa:27:09:d4:53:9d:47:a9:41:b1:28:3d:90:
                    91:b6:ce:58:fa:48:ed:ef:d1:aa:bc:dd:a0:17:cc:
                    ed:a2:a7:49:4b:d5:9d:e9:84:f5:a8:db:20:25:7a:
                    85:44:7e:55:47:f3:05:85:11:dd:16:38:67:10:2d:
                    c1:42:e9:9b:0b:b0:b0:6a:70:dd:ad:e6:26:23:70:
                    b7:4d:4e:fa:83:e9:7a:8e:c1:46:b0:3a:98:4e:1a:
                    74:20:99:01:74:0f:4a:c5:d7:7b:2a:a9:fe:e0:03:
                    95:53:f2:d7:90:13:ab:da:a0:dc:03:01:2f:c3:df:
                    8c:a2:91:64:01:fe:dc:40:57:2a:f4:64:b3:a1:ee:
                    80:71:73:e6:78:fa:77:e0:92:33:53:ca:27:48:5a:
                    91:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:04:97:50:72:19:99:13:50:CD:9F:28:47:42:00:8D:FC:69:94:4F
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3130382e36342e302f32302d3230203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:38:2c:e1:e8:d8:30:8c:4a:6e:ec:33:be:58:d4:dd:94:be:
         51:c0:1d:df:e0:5f:da:8c:8e:1c:e8:7e:df:f4:81:32:bd:92:
         0f:cc:ac:83:15:0a:77:a8:d6:ad:b7:52:e0:f8:e8:30:fc:ff:
         ff:e6:79:8b:ae:ae:96:04:e6:30:47:54:6c:8e:d0:2a:00:3f:
         2d:f7:7a:82:06:8a:c1:92:d7:56:48:25:a3:a7:37:c1:f2:e9:
         4b:b5:37:97:28:8e:61:6c:c4:a1:33:5a:1b:95:ab:48:b7:49:
         03:0a:45:b5:37:45:d0:74:ef:ae:1a:a7:b5:16:3c:e6:a2:b5:
         73:8a:d9:ea:d7:80:1a:8a:94:1e:34:42:0d:02:ab:4f:3d:45:
         d2:65:c2:40:1e:6d:77:a9:b7:56:6c:21:50:79:e1:a9:fa:54:
         84:29:ec:3c:21:71:d2:f0:61:5e:0e:86:df:36:96:72:c1:0b:
         1d:17:48:b2:4c:52:8d:2c:76:d8:28:35:b6:cb:bc:d4:fb:a1:
         d0:b3:40:8a:f4:54:47:6b:fb:fb:35:56:71:18:94:69:25:62:
         c8:16:dd:3d:0e:37:a3:ae:4c:85:23:27:77:33:83:19:6b:c9:
         71:d4:76:22:d6:e8:dd:d3:7f:45:a5:67:4b:fe:05:2d:29:9d:
         91:7b:25:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org