Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32342d3234203d3e203533303539.roa
File:                     3138372e38362e39362e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          S6XOZUDWWKcmN9uDm4SF4kwV2ObXkEcUj9LDtfmLBXw=
Subject key identifier:   75:46:00:54:CD:7A:17:A5:09:14:13:1D:EA:EE:DB:F2:83:1C:1E:AE
Certificate issuer:       /CN=3622354098DA9E8445BAD24445F56C57EE638E0E
Certificate serial:       17A0B8A38C5CC2B1DC1E9E355ED0C6E235C7FCA7
Authority key identifier: 36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32342d3234203d3e203533303539.roa
Signing time:             Fri 03 Mar 2023 12:19:14 +0000
ROA not before:           Fri 03 Mar 2023 12:14:14 +0000
ROA not after:            Fri 01 Mar 2024 12:19:14 +0000
asID:                     53059
IP address blocks:        187.86.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a0:b8:a3:8c:5c:c2:b1:dc:1e:9e:35:5e:d0:c6:e2:35:c7:fc:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622354098DA9E8445BAD24445F56C57EE638E0E
        Validity
            Not Before: Mar  3 12:14:14 2023 GMT
            Not After : Mar  1 12:19:14 2024 GMT
        Subject: CN=75460054CD7A17A50914131DEAEEDBF2831C1EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:45:7c:ab:b5:e6:a3:1d:54:49:eb:f4:b8:4b:
                    40:2d:b1:f2:85:68:5c:12:0c:f9:36:df:9a:f4:f4:
                    bc:52:fd:f7:e4:c6:c2:18:54:05:f9:48:2f:cf:ee:
                    56:8d:c2:73:b2:9d:0b:55:40:00:87:39:ff:6e:14:
                    49:32:5f:7e:2b:04:12:d9:41:05:33:81:9e:e7:08:
                    cd:06:0e:34:c8:a7:4f:3b:c0:6e:53:46:3c:9f:9f:
                    49:ea:20:bf:81:46:95:08:8f:6d:fd:10:af:fc:19:
                    f7:2d:47:ba:94:47:b3:07:2a:0d:58:44:1a:d0:2e:
                    f2:fc:99:09:c8:a3:65:37:fb:fc:3d:7a:b8:6d:6a:
                    fa:02:d5:f4:5f:2e:76:cf:32:e9:d2:4b:9e:69:53:
                    42:1b:75:4e:c3:14:5c:85:d9:0b:ea:a9:67:07:80:
                    0b:0f:34:ae:72:66:5e:9c:c3:89:32:9a:34:36:38:
                    63:a8:4d:b2:96:e0:09:0c:74:0c:da:b2:a5:42:6b:
                    6b:e1:a3:2b:5a:00:49:12:18:96:90:a8:80:7e:a8:
                    ae:30:9c:f2:e2:d2:d5:b5:60:99:a5:b9:4a:f1:0c:
                    31:33:8d:0a:4d:82:46:a5:86:8d:87:ae:cf:84:49:
                    02:a2:2d:e6:de:29:2f:41:36:fd:cc:4c:f5:95:ed:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:46:00:54:CD:7A:17:A5:09:14:13:1D:EA:EE:DB:F2:83:1C:1E:AE
            X509v3 Authority Key Identifier:
                keyid:36:22:35:40:98:DA:9E:84:45:BA:D2:44:45:F5:6C:57:EE:63:8E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3622354098DA9E8445BAD24445F56C57EE638E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3622354098DA9E8445BAD24445F56C57EE638E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39362e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:74:c2:92:dc:f2:b3:e6:af:04:ec:f6:ac:f5:ca:55:e0:fc:
         a6:42:49:9f:7f:6f:d1:21:de:e3:3b:34:3b:c7:d3:d0:b1:86:
         b3:61:10:56:40:25:52:fb:4b:24:e5:16:d3:04:20:63:5e:fd:
         2b:b9:e5:5b:61:3a:eb:7d:1c:a1:94:ed:5d:41:f5:bf:04:e5:
         12:77:ac:49:04:0b:dc:8b:c3:d4:27:5b:d1:9e:6b:c4:b4:ab:
         77:d2:c4:a0:4f:65:b1:ff:a8:80:f9:d6:14:49:9c:bc:d8:33:
         4a:d6:ca:01:e7:d2:80:90:21:53:90:90:b2:de:e8:19:83:d4:
         d2:8e:ac:7c:a5:0c:e8:7c:e7:3d:c2:bd:9b:4a:bb:8b:40:13:
         b6:29:37:90:9f:0f:1a:03:42:aa:4e:3f:f0:15:8d:b3:d3:de:
         8c:65:d8:f6:ad:f2:85:71:aa:b2:29:b3:88:cc:97:89:17:42:
         77:6b:fa:8b:95:d2:66:8e:25:c3:5c:fc:55:df:f8:0b:a5:40:
         7b:2f:c9:26:4c:55:ab:bb:6c:5b:9a:02:a8:c0:66:01:61:ac:
         63:db:7d:a7:6f:b6:e6:55:3f:eb:f1:67:ce:4d:5a:fc:15:5a:
         66:a5:73:92:a2:21:26:6f:20:c8:e7:c7:3c:d1:09:49:f3:04:
         0a:c4:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org