Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e3130342e302f32312d3231203d3e203533303539.roa
File:                     3138372e38362e3130342e302f32312d3231203d3e203533303539.roa (raw, json)
Hash identifier:          dldTlhmDBveB3x2T2qwHuDk/w0/aNeg0u7hfAuoZK5U=
Subject key identifier:   51:28:89:24:D2:6E:93:42:65:03:D3:63:2C:4C:49:3F:10:BE:2D:D0
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       21F405D1DA15B33DDE00E513509ED19B6EFB3310
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e3130342e302f32312d3231203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:19:16 +0000
ROA not before:           Fri 03 Mar 2023 12:14:16 +0000
ROA not after:            Fri 01 Mar 2024 12:19:16 +0000
asID:                     53059
IP address blocks:        187.86.104.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f4:05:d1:da:15:b3:3d:de:00:e5:13:50:9e:d1:9b:6e:fb:33:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:14:16 2023 GMT
            Not After : Mar  1 12:19:16 2024 GMT
        Subject: CN=51288924D26E93426503D3632C4C493F10BE2DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:85:e7:a0:20:c3:73:63:55:c7:25:04:58:c4:
                    23:5e:76:1f:d6:13:be:41:1b:7e:d2:c9:51:d5:ac:
                    ca:ec:c1:14:fe:51:2d:fc:cc:df:80:f4:07:1d:5f:
                    b7:a1:91:43:9c:e2:0a:c4:d1:f9:ea:97:04:84:35:
                    d6:e8:ab:d8:10:75:2e:54:53:d2:97:ba:14:6e:15:
                    e2:e0:1f:0c:a2:a6:09:9d:4b:bd:70:7e:88:58:a1:
                    4b:b5:37:49:77:a2:25:8b:de:cb:e8:1d:46:38:7a:
                    1f:c7:12:7d:85:df:37:e8:0c:64:80:83:b6:24:cc:
                    f9:6a:38:5d:1b:48:1b:f2:b9:01:de:77:a7:80:12:
                    f0:c0:eb:82:24:87:19:96:c3:b6:c6:d2:2c:9e:09:
                    ec:c5:7a:58:50:21:dc:61:7a:98:9b:3b:d2:00:b4:
                    12:69:94:5e:b2:f9:83:04:e1:85:e4:f2:07:63:a7:
                    ee:a7:9e:56:34:d7:cb:1e:0e:dd:1b:b2:d7:75:5b:
                    cb:dd:37:a1:87:cb:38:4a:1f:2f:32:e7:35:0f:8c:
                    a7:25:dc:bc:e9:1f:ec:1c:42:fe:62:74:59:bb:e1:
                    07:64:58:f1:7d:a8:89:30:e4:13:c5:ba:ce:89:38:
                    a9:81:80:50:0e:fc:bf:c2:e2:a8:94:89:8b:11:f7:
                    2b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:28:89:24:D2:6E:93:42:65:03:D3:63:2C:4C:49:3F:10:BE:2D:D0
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e3130342e302f32312d3231203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:34:14:aa:21:4d:51:e4:b4:bd:07:61:ce:0e:dd:be:7c:c0:
         c1:48:29:4b:c0:2d:5a:a4:26:07:9b:bc:0b:1f:9e:58:2b:1f:
         a9:a1:c6:7d:95:00:48:c9:66:d9:9f:f7:7d:db:42:34:29:43:
         32:dc:1a:0f:66:d1:86:11:ff:96:7f:73:3b:c4:8e:f3:3d:4f:
         5b:a8:cd:c9:23:9c:00:25:80:dd:41:5d:d8:5b:3b:ac:9a:b9:
         28:4d:d9:5b:f3:16:4f:53:44:d2:88:00:fb:66:58:f7:4f:52:
         e9:b4:5d:6b:f2:2e:36:d9:e5:7a:78:10:98:ca:d5:87:20:e5:
         c3:7f:16:bd:df:2b:55:da:ec:64:d6:ed:cb:84:96:ec:11:e9:
         45:51:cb:eb:32:ce:e2:b3:a6:3a:60:6f:ba:ba:16:f1:c3:26:
         4c:e0:f0:65:6d:da:05:c2:ee:c6:13:c9:60:8e:30:f4:d4:9e:
         03:10:c3:0d:ca:d2:81:d7:9d:4e:30:aa:be:6e:b7:04:c0:c1:
         f5:bc:fd:ea:1e:19:c0:9b:4b:36:2d:ef:be:58:4a:81:3c:76:
         6d:50:3c:41:60:ee:ed:98:ef:77:0b:74:1b:8e:e5:ca:8f:e5:
         50:20:f4:26:c5:73:e2:cc:1f:c8:97:a0:8f:cb:7c:61:bc:d6:
         bd:87:27:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org