Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134342e302f32302d3234203d3e203238323730.roa
File:                     3138362e3231392e3134342e302f32302d3234203d3e203238323730.roa (raw, json)
Hash identifier:          7+8Jn/qfvSsMnwquAgsn8caMaPl7Z/qItor1VvGCsdA=
Subject key identifier:   94:98:88:9B:3D:1D:63:FF:60:3C:7F:8A:96:1A:47:72:44:F2:4A:65
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       3FF53ED9A28B1F74CCF906134DE751A344DC9DE9
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134342e302f32302d3234203d3e203238323730.roa
Signing time:             Wed 31 Jan 2024 17:31:18 +0000
ROA not before:           Wed 31 Jan 2024 17:26:18 +0000
ROA not after:            Wed 29 Jan 2025 17:31:18 +0000
asID:                     28270
IP address blocks:        186.219.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f5:3e:d9:a2:8b:1f:74:cc:f9:06:13:4d:e7:51:a3:44:dc:9d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Jan 31 17:26:18 2024 GMT
            Not After : Jan 29 17:31:18 2025 GMT
        Subject: CN=9498889B3D1D63FF603C7F8A961A477244F24A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:71:7d:ac:ff:42:88:c9:cf:3a:57:ab:3a:
                    75:25:9f:7b:64:c1:09:f2:4a:0e:9d:00:dd:f7:9d:
                    07:a3:8c:dd:47:d5:12:30:04:d4:f6:75:14:2f:6a:
                    c3:ad:a6:c9:d0:bb:97:18:6a:83:1b:58:de:68:65:
                    7e:80:78:1d:6c:99:dc:dd:39:8c:01:b8:3b:fe:e9:
                    84:4c:ff:03:17:2c:1f:29:e3:a0:b0:85:31:56:86:
                    fc:7d:9d:95:80:ec:80:01:9c:9f:b2:15:d7:f2:8b:
                    a3:6e:6f:ab:8c:ef:93:32:8f:0c:26:ee:39:76:93:
                    09:50:7b:91:3a:e7:e8:7a:5a:03:77:db:1a:a2:14:
                    f2:02:9f:05:bc:94:51:bd:9a:ff:92:45:34:33:99:
                    c1:de:e4:5f:3e:0f:af:e7:93:b9:fa:89:4e:d2:4d:
                    3f:fa:41:d6:52:44:36:32:d8:bb:a0:8f:05:d7:6c:
                    f8:60:c7:2f:27:62:b4:e1:ca:32:21:c3:c4:2c:ee:
                    c1:d1:5b:67:d4:3c:df:6d:90:b2:bf:b2:f3:0d:c5:
                    3f:88:a4:70:18:88:39:f1:ea:d8:6d:a2:3a:73:ec:
                    3d:73:c3:bd:d0:cd:7d:47:d6:ef:09:ba:d8:61:1b:
                    0f:f2:14:2f:a3:20:94:aa:41:5d:ea:3f:ff:63:78:
                    39:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:98:88:9B:3D:1D:63:FF:60:3C:7F:8A:96:1A:47:72:44:F2:4A:65
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134342e302f32302d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         dd:6c:1d:a4:ee:30:ef:81:8d:35:33:11:49:ff:cb:41:11:23:
         2a:b5:45:63:3c:5e:da:de:f3:20:8e:cf:8c:82:c9:0a:5d:4d:
         4c:8d:45:74:cf:c0:ea:57:61:dd:08:40:c6:ac:a9:b0:6c:a4:
         5b:d5:60:8c:06:c9:cf:eb:8a:df:81:26:8a:e4:7c:7d:7d:a3:
         54:fb:61:56:3a:ea:e4:a5:cb:35:ac:f0:22:e9:bb:ee:40:30:
         a6:cd:7a:de:22:27:4e:51:1f:1f:b2:86:36:10:44:27:7b:c7:
         6d:c9:b2:55:13:e9:c6:1c:13:7d:90:2b:36:04:15:5b:44:07:
         c3:9f:85:8c:f5:2e:76:96:80:ba:2b:f5:de:30:d6:82:ac:43:
         f1:2d:f0:a1:8a:f5:14:e2:ae:ac:3e:ed:d0:0d:80:0c:e6:f1:
         9f:1c:db:b8:de:e6:c3:4f:8b:da:12:48:e0:c1:37:da:d4:38:
         cb:28:98:66:9e:45:e9:ce:a2:34:07:87:fd:cb:06:a0:23:34:
         de:36:5c:e4:0d:89:e1:ee:68:03:b5:75:ff:3d:9a:ff:8a:d6:
         59:bf:37:1a:d2:7b:3d:2a:ef:48:6e:6b:10:75:fc:04:51:2a:
         92:6e:f0:a8:bb:4d:55:a1:e0:84:59:f4:ea:e0:d8:2c:b0:3a:
         89:7d:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org