Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3130392e3137362e302f32302d3230203d3e203533303539.roa
File:                     3138372e3130392e3137362e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier:          Lrff521chws55HnDJWMgdL4YXzH1XvZu7xP6eDFYwWE=
Subject key identifier:   26:29:A2:B0:36:5E:E4:70:D7:48:00:AD:44:30:03:85:7C:C4:96:82
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       43E83B169F264C9321B599EF08EDC1DC53D79FDD
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3130392e3137362e302f32302d3230203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:19:26 +0000
ROA not before:           Fri 03 Mar 2023 12:14:26 +0000
ROA not after:            Fri 01 Mar 2024 12:19:26 +0000
asID:                     53059
IP address blocks:        187.109.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e8:3b:16:9f:26:4c:93:21:b5:99:ef:08:ed:c1:dc:53:d7:9f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:14:26 2023 GMT
            Not After : Mar  1 12:19:26 2024 GMT
        Subject: CN=2629A2B0365EE470D74800AD443003857CC49682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:05:cf:e9:5d:fc:0e:23:2d:ec:cb:e3:b8:
                    04:75:81:ea:47:fa:2b:31:8b:62:26:cf:5d:2a:44:
                    87:c3:d6:d2:8b:f8:33:a3:ae:57:f9:a7:5f:82:f0:
                    f6:ce:13:49:56:2f:39:82:1d:7f:d1:0d:da:31:d6:
                    bf:39:98:6a:49:50:1e:4e:30:fa:3b:ce:58:94:81:
                    67:ed:4a:87:ed:47:65:a2:cb:f9:ba:87:2d:c3:20:
                    fa:f3:48:18:5c:da:a5:c7:14:99:82:07:f1:5b:d2:
                    23:5c:d1:b3:ae:57:78:cd:61:62:47:01:36:38:b1:
                    8f:ee:d7:2b:c9:b9:86:17:de:cb:a8:ac:21:fb:61:
                    de:48:5a:fe:2d:17:bf:90:6f:9c:45:5c:f1:22:4f:
                    ef:ac:4d:b5:a7:e0:f6:1e:85:11:2f:ce:92:21:99:
                    27:ca:fd:33:32:6c:5f:72:33:e9:53:1c:72:bb:5f:
                    86:dc:79:b8:5d:4d:f6:23:36:00:73:4b:f8:ad:38:
                    86:28:38:67:a3:cc:6f:85:df:40:e4:e7:a6:13:2a:
                    33:20:61:73:f4:90:bc:b8:b2:db:12:aa:2d:44:ad:
                    9e:76:87:c4:a4:93:ab:db:75:fd:d1:6b:e6:05:dc:
                    bf:11:49:89:91:fe:d4:c6:64:d9:08:8e:42:d8:63:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:29:A2:B0:36:5E:E4:70:D7:48:00:AD:44:30:03:85:7C:C4:96:82
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3130392e3137362e302f32302d3230203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c6:53:46:38:a3:54:72:b0:be:5b:63:56:c9:c8:cb:5a:be:6b:
         dd:8c:a1:97:e3:a1:de:bf:48:85:1c:09:6a:02:79:38:f9:93:
         9b:7b:bb:f6:d2:e8:a2:43:d5:54:ac:44:17:1b:84:d3:37:ae:
         a3:e1:c5:b3:ca:0b:18:ac:81:ab:01:f3:08:db:e2:59:7c:47:
         18:0c:bc:4b:79:4d:d3:d4:83:01:89:d0:00:62:97:d1:2b:aa:
         21:be:3d:f4:ce:00:44:4b:c3:e9:de:31:49:dd:da:b8:ef:78:
         7e:ab:32:0e:5b:1f:93:2a:26:dc:5f:e2:94:a0:90:5e:05:7c:
         98:19:fa:76:04:f1:ef:5f:98:b0:29:b1:41:e6:00:8b:ad:ea:
         d7:a3:a6:d4:08:8c:5f:d4:cb:73:46:95:05:8c:0c:d1:41:2b:
         f2:13:89:a8:b8:b1:2c:dd:32:1d:75:41:fd:bf:d5:68:fd:d4:
         45:96:23:4a:e1:8e:39:1c:f3:9a:ff:63:7e:5f:7d:c1:d9:fa:
         1d:de:f2:d2:e7:9b:b0:05:ae:6d:2b:94:aa:ea:b9:ed:56:c0:
         54:80:70:83:32:f8:2a:eb:1b:25:16:17:e7:97:62:93:ec:d5:
         3c:ae:6d:5a:a7:f8:0c:02:49:7a:30:7b:cc:57:ab:da:09:01:
         e4:64:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org