Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134352e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3134352e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          bWFAbR5Y1gU2uziTA7GzHrfgUnY4lqicS6MwTsS4Jck=
Subject key identifier:   C3:1A:9A:FC:02:E3:54:B6:A4:20:7C:C7:95:21:14:C8:5C:65:BB:17
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       2A43676B2324B59F9529E1A11F2E0AD00A74A9EA
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134352e302f32342d3234203d3e20323632393932.roa
Signing time:             Thu 07 Nov 2024 20:40:14 +0000
ROA not before:           Thu 07 Nov 2024 20:35:14 +0000
ROA not after:            Thu 06 Nov 2025 20:40:14 +0000
asID:                     262992
IP address blocks:        186.219.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:43:67:6b:23:24:b5:9f:95:29:e1:a1:1f:2e:0a:d0:0a:74:a9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:14 2024 GMT
            Not After : Nov  6 20:40:14 2025 GMT
        Subject: CN=C31A9AFC02E354B6A4207CC7952114C85C65BB17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:35:fb:ff:a5:e7:04:9a:cf:55:d6:37:d2:47:
                    d7:79:e3:a8:1e:51:9b:32:43:ac:78:3b:23:36:88:
                    68:c3:a0:c8:83:43:20:db:bc:8c:77:88:d8:8c:44:
                    68:ae:a7:90:11:c8:9f:a5:02:93:5b:1b:62:3e:58:
                    24:ec:01:72:08:d2:49:7d:25:9d:e9:cf:71:85:08:
                    7b:90:fd:b7:49:db:d0:f6:66:3b:49:11:b5:08:6a:
                    d2:27:ca:da:83:99:93:b6:a0:df:76:ed:5a:1b:c2:
                    4f:d9:09:11:8d:73:7f:2b:89:e4:10:ab:6d:54:dc:
                    ef:f0:c2:ef:39:ec:25:43:f6:86:5a:a4:f5:31:86:
                    cc:3e:ae:0b:65:47:2f:f2:90:1c:92:50:a9:75:53:
                    fe:1a:30:98:ca:d4:6d:9f:f3:c2:c7:f2:23:e2:93:
                    2a:ca:3b:39:9f:69:36:96:31:21:36:11:36:da:aa:
                    c5:c1:aa:db:24:e6:7e:84:93:f6:f7:26:b3:4f:32:
                    5b:27:2e:e6:3e:78:5b:e8:e2:aa:1b:5f:d8:42:56:
                    2b:d6:c8:d6:e0:32:8a:be:b8:09:b8:e0:75:71:9e:
                    e3:cc:04:9d:3b:94:0c:f1:97:7f:d5:47:86:bd:49:
                    35:2a:d4:df:0f:fc:6e:90:cc:88:0e:ec:ba:34:b5:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1A:9A:FC:02:E3:54:B6:A4:20:7C:C7:95:21:14:C8:5C:65:BB:17
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134352e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:15:c1:da:cf:23:84:94:07:bc:9e:8c:d8:70:55:2b:11:7d:
         ea:8b:12:62:11:12:f5:e4:62:2e:94:b0:3a:c9:0b:90:e7:68:
         b4:7d:1d:07:1a:c7:89:32:62:28:ff:d3:42:65:51:ce:d0:ab:
         27:f9:93:68:0e:28:c4:45:cd:93:77:42:88:b7:ec:0d:ef:fe:
         f2:b7:52:b1:c6:a2:20:2d:9b:2c:59:4b:ac:a6:1f:41:42:6e:
         3d:2a:83:1b:bf:d4:75:b4:b4:ca:e1:32:10:b9:ef:45:6a:e7:
         45:91:b9:f1:c5:13:0b:97:d2:44:6b:73:51:66:de:f4:71:0d:
         bb:e4:84:22:22:e4:aa:05:a1:87:b2:1f:e0:28:e0:d5:67:7a:
         01:4b:bf:e9:00:74:02:d0:7a:23:51:73:70:b7:88:7f:c1:82:
         ea:ed:7b:75:41:41:df:49:b5:7f:eb:32:c4:6f:00:4a:95:84:
         b2:d3:38:42:41:63:5c:1b:22:47:5e:ee:2f:dd:78:2e:e0:2a:
         da:98:19:d0:db:93:e9:7d:07:cf:46:90:83:d7:a6:55:8b:13:
         45:aa:5a:a6:9c:34:54:86:7b:d5:c6:00:71:32:fc:5d:ce:1a:
         8a:5c:51:99:c8:87:ee:a9:40:d9:fc:7b:1b:14:33:33:a2:92:
         5c:63:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org