Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XbRjhkaZDrWruLqHN98rCQgjCrpQCc7oLFFKUuZ28eF/0/3138362e3233332e37302e302f32332d3233203d3e20323632373831.roa
File:                     3138362e3233332e37302e302f32332d3233203d3e20323632373831.roa (raw, json)
Hash identifier:          gYQ/zhLhPhuLUAU0YHHymTfa9bP/SrtQDGTcfyTw3so=
Subject key identifier:   33:68:A3:04:B8:C6:BA:10:64:60:60:16:F2:ED:16:60:62:A8:93:31
Certificate issuer:       /CN=86EE23E01BB6127A06313B2D8737AFB075F8C1F0
Certificate serial:       5E6E58683EA67DDA72FD7F28A83F78189363F595
Authority key identifier: 86:EE:23:E0:1B:B6:12:7A:06:31:3B:2D:87:37:AF:B0:75:F8:C1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86EE23E01BB6127A06313B2D8737AFB075F8C1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XbRjhkaZDrWruLqHN98rCQgjCrpQCc7oLFFKUuZ28eF/0/3138362e3233332e37302e302f32332d3233203d3e20323632373831.roa
Signing time:             Fri 22 Sep 2023 19:18:05 +0000
ROA not before:           Fri 22 Sep 2023 19:13:05 +0000
ROA not after:            Fri 20 Sep 2024 19:18:05 +0000
asID:                     262781
IP address blocks:        186.233.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6e:58:68:3e:a6:7d:da:72:fd:7f:28:a8:3f:78:18:93:63:f5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86EE23E01BB6127A06313B2D8737AFB075F8C1F0
        Validity
            Not Before: Sep 22 19:13:05 2023 GMT
            Not After : Sep 20 19:18:05 2024 GMT
        Subject: CN=3368A304B8C6BA1064606016F2ED166062A89331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:3d:47:d7:e1:b0:bd:46:5e:39:25:7d:d8:
                    12:c9:c8:07:2a:cb:44:ad:b1:7b:c1:fd:dc:fb:bc:
                    83:5b:68:1c:1c:86:08:c0:fd:20:ca:4d:17:ac:26:
                    65:c3:ce:e6:e6:fe:6b:d8:63:c3:f2:44:5b:81:3e:
                    52:eb:a7:a5:01:0c:ff:be:e3:02:ab:f1:8d:34:93:
                    09:20:23:c8:a3:42:13:98:36:78:b4:81:25:31:5c:
                    a5:74:2e:1e:17:93:09:b0:cf:aa:fb:06:85:d9:0c:
                    2e:62:81:05:7f:a3:4f:c6:1f:1b:2b:a1:47:bc:b5:
                    a5:69:4f:ee:b4:b7:36:e1:17:df:48:40:5f:ce:ae:
                    51:0c:e2:4c:72:da:64:36:a5:02:c9:72:48:cc:6f:
                    ba:48:f3:22:6f:9a:52:33:3a:ed:19:a1:92:a8:04:
                    4a:e8:dc:93:a9:02:94:0e:fa:05:45:3a:df:c8:ef:
                    0d:21:4f:ed:6e:e9:49:94:18:59:71:69:36:8b:d5:
                    7d:3f:4b:49:9b:17:a2:aa:72:13:51:db:04:89:4a:
                    cf:af:ff:0a:b0:47:20:fc:a0:f2:9d:5c:c9:b1:63:
                    eb:b3:03:3c:99:d9:60:42:d3:a4:1d:7b:eb:f3:d9:
                    26:87:61:ee:e7:8a:8a:0c:a7:a8:c5:be:e0:ec:69:
                    62:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:68:A3:04:B8:C6:BA:10:64:60:60:16:F2:ED:16:60:62:A8:93:31
            X509v3 Authority Key Identifier:
                keyid:86:EE:23:E0:1B:B6:12:7A:06:31:3B:2D:87:37:AF:B0:75:F8:C1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XbRjhkaZDrWruLqHN98rCQgjCrpQCc7oLFFKUuZ28eF/0/86EE23E01BB6127A06313B2D8737AFB075F8C1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86EE23E01BB6127A06313B2D8737AFB075F8C1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XbRjhkaZDrWruLqHN98rCQgjCrpQCc7oLFFKUuZ28eF/0/3138362e3233332e37302e302f32332d3233203d3e20323632373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:b8:5d:e3:6e:5b:16:24:b7:9d:fc:f9:b0:04:ea:d1:b6:db:
         90:60:89:55:16:c4:56:d9:62:48:e7:6c:10:19:fa:25:21:db:
         24:1b:22:13:d2:f5:8a:65:fd:59:a3:38:15:e9:f1:4b:04:95:
         d9:98:44:6d:52:30:d9:70:e3:e0:40:e8:2f:7c:83:ef:fe:4d:
         dc:08:b4:83:b1:2a:2d:a0:0c:8a:99:1c:4a:da:56:f9:e8:34:
         a4:62:23:d2:a2:c3:b2:74:25:03:33:c8:b1:6c:d5:db:8f:60:
         f0:54:6a:4f:2a:c3:49:02:1a:0b:18:d3:27:23:3d:2f:b2:72:
         3f:c9:bd:f9:4b:a2:05:c2:26:8d:0f:37:9d:e4:ba:78:6b:f7:
         5c:3c:1e:cd:17:05:dc:e1:92:af:02:d9:a7:2e:6e:d4:4b:0f:
         9e:e5:bf:74:e1:dd:83:3b:ad:c7:5d:83:23:47:37:ff:21:12:
         d1:6b:2b:63:f6:7d:c2:42:69:69:64:3c:64:02:74:ef:07:8d:
         e6:fc:5f:55:42:6d:ea:8e:99:ef:cc:46:02:25:c8:6f:ed:e2:
         67:66:15:1b:1a:e5:ba:f2:cb:4d:a3:25:f6:77:ee:8d:2c:32:
         e5:70:5c:2b:26:a9:eb:40:34:ba:b6:5f:99:10:bb:78:c2:33:
         8c:55:20:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org