Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38392e302f32342d3234203d3e203238363130.roa
File:                     3138362e3230392e38392e302f32342d3234203d3e203238363130.roa (raw, json)
Hash identifier:          csM9tDMmhPSpj/nsM8Rycw0vTkz2UK0POAK6V1yHxNM=
Subject key identifier:   74:04:34:5F:33:18:A6:61:A0:1A:79:EA:92:5F:D8:EC:3F:4F:72:FF
Certificate issuer:       /CN=97417F3E236E218F6CACD83DB7C3A791582C6461
Certificate serial:       6BFEF7E918B5ACBD7D03420A558DFFD255C3EBB4
Authority key identifier: 97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38392e302f32342d3234203d3e203238363130.roa
Signing time:             Mon 11 Mar 2024 17:16:06 +0000
ROA not before:           Mon 11 Mar 2024 17:11:06 +0000
ROA not after:            Mon 10 Mar 2025 17:16:06 +0000
asID:                     28610
IP address blocks:        186.209.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fe:f7:e9:18:b5:ac:bd:7d:03:42:0a:55:8d:ff:d2:55:c3:eb:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97417F3E236E218F6CACD83DB7C3A791582C6461
        Validity
            Not Before: Mar 11 17:11:06 2024 GMT
            Not After : Mar 10 17:16:06 2025 GMT
        Subject: CN=7404345F3318A661A01A79EA925FD8EC3F4F72FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:01:a3:f3:2b:bb:71:45:3b:44:57:40:c7:9f:
                    74:e9:aa:18:45:4b:15:57:31:32:b4:99:0b:31:3d:
                    71:8c:14:aa:20:8f:5d:cd:c8:36:95:5e:00:9d:8e:
                    28:3f:98:0a:f3:f1:ee:02:62:45:a4:92:3f:52:e9:
                    88:b3:d5:2f:25:f2:3f:3c:eb:f6:19:f9:05:72:8e:
                    3e:6e:8c:18:bb:34:02:61:39:7c:ac:e4:48:f2:ba:
                    88:52:20:ab:b2:a3:58:cf:f8:04:51:57:4a:bd:8e:
                    49:40:f3:64:a5:c5:38:aa:06:93:a9:a7:d9:74:93:
                    a4:af:b8:d6:2c:05:6e:af:8a:06:dc:e8:2a:57:41:
                    0a:75:04:5c:b1:fc:a2:41:1f:f7:67:5b:ee:f0:fd:
                    6a:e2:8d:0b:1c:41:0c:7f:bd:04:e8:9c:22:3a:c8:
                    41:7e:11:64:39:44:b4:38:47:f7:9f:4e:4a:25:01:
                    88:e4:f0:96:f1:28:7d:61:5b:63:44:a2:34:ff:a5:
                    f2:8c:a8:cd:5d:b8:9a:7c:34:53:a5:a9:b0:5c:bb:
                    b9:92:b5:52:88:fb:73:a6:8e:30:bf:4b:57:58:a5:
                    cd:5d:51:6c:cf:1f:0b:4d:b6:08:18:5a:60:cd:ad:
                    5b:d1:7d:ec:b1:ee:36:c2:2b:be:43:08:a7:4b:81:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:04:34:5F:33:18:A6:61:A0:1A:79:EA:92:5F:D8:EC:3F:4F:72:FF
            X509v3 Authority Key Identifier:
                keyid:97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/97417F3E236E218F6CACD83DB7C3A791582C6461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38392e302f32342d3234203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:63:7d:5b:a1:da:12:50:66:f8:c9:ba:ed:af:1c:12:29:36:
         fc:58:7c:e6:a4:e2:6b:b9:7a:1e:33:44:2c:64:86:9b:57:5b:
         7c:db:dd:53:44:0f:7d:56:4a:00:a5:32:88:bf:ac:e3:5a:80:
         49:79:3e:2a:cb:ed:95:af:0e:c4:b2:87:fb:f1:ae:bc:76:6f:
         99:47:1d:e4:83:75:49:d7:9f:ea:df:f5:ad:65:6d:e2:c9:98:
         2e:dd:13:0f:c8:b1:83:54:4f:cc:b5:97:f5:fd:a1:c1:e5:e1:
         1d:21:76:ca:f2:15:44:1c:ce:db:2a:23:7f:69:06:23:41:7b:
         77:22:c3:8a:c9:05:c8:ae:55:17:11:c6:46:30:f3:fc:5a:be:
         08:55:a6:42:f5:a0:fc:f4:af:76:da:11:6c:11:ad:07:a6:9d:
         c3:4b:a3:01:b7:5a:55:46:30:c6:4d:72:cd:3a:33:b5:82:1a:
         34:eb:cd:9f:2a:5d:64:11:6b:48:fb:6a:9c:34:10:42:37:89:
         0d:b9:f7:d9:2e:b0:45:1c:2e:2e:b7:da:0f:f3:33:77:67:3e:
         db:2b:23:3a:fd:af:f0:b3:1b:33:bf:24:81:3b:73:1a:4b:38:
         1f:48:7b:75:00:52:b8:10:f0:57:46:c4:8b:db:88:3a:ca:ef:
         c9:a0:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org