Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa
File:                     3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa (raw, json)
Hash identifier:          8PC5IXcpkw7jz4arpLJ2shQGY2QY2pBLulWIUm5lonU=
Subject key identifier:   D6:A2:8D:66:0E:E1:86:41:38:65:DF:7A:94:39:4F:A1:40:09:E9:1B
Certificate issuer:       /CN=5EB537A15FD53CD0621615B69D55DB7153896898
Certificate serial:       328071BCD1E8A14F9516A627E5237F630C6C01B8
Authority key identifier: 5E:B5:37:A1:5F:D5:3C:D0:62:16:15:B6:9D:55:DB:71:53:89:68:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EB537A15FD53CD0621615B69D55DB7153896898.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa
Signing time:             Fri 15 Dec 2023 13:12:51 +0000
ROA not before:           Fri 15 Dec 2023 13:07:51 +0000
ROA not after:            Fri 13 Dec 2024 13:12:51 +0000
asID:                     262772
IP address blocks:        186.232.176.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:80:71:bc:d1:e8:a1:4f:95:16:a6:27:e5:23:7f:63:0c:6c:01:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EB537A15FD53CD0621615B69D55DB7153896898
        Validity
            Not Before: Dec 15 13:07:51 2023 GMT
            Not After : Dec 13 13:12:51 2024 GMT
        Subject: CN=D6A28D660EE186413865DF7A94394FA14009E91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:be:92:8f:5f:4f:a6:61:aa:85:12:29:c7:
                    b5:0d:d0:f4:6a:47:e7:05:8f:bb:c4:8a:9d:3e:f3:
                    0f:3b:e7:27:d2:ec:a5:18:a6:26:7a:85:61:40:3e:
                    ad:8b:f1:33:8a:05:f1:f6:70:ca:35:ea:d8:e8:f4:
                    93:04:3a:96:2f:26:f7:c9:16:22:44:99:74:d2:f2:
                    89:5d:33:5a:7c:87:66:11:07:86:3c:e0:57:14:e6:
                    7b:48:35:14:7a:f0:e1:90:6e:38:f9:7c:07:b1:18:
                    37:23:cb:62:60:b6:dd:83:6e:ff:ae:e5:62:fb:8b:
                    f5:67:80:c8:81:92:0d:a3:97:ba:bc:a2:5b:2b:bb:
                    ea:b7:2e:4f:32:c9:b7:fd:b1:28:7b:42:51:72:36:
                    a4:90:55:8c:d8:47:a0:52:5d:8c:4c:25:13:03:72:
                    51:cc:da:1b:a9:74:39:3e:b7:8b:9a:f3:1a:16:66:
                    7b:a7:df:7b:b8:51:73:ac:8d:af:ed:66:8d:57:ff:
                    a7:e7:b2:50:63:38:da:61:7c:e8:d2:03:2c:07:77:
                    5e:24:78:11:f9:90:29:19:92:58:75:6b:15:2c:66:
                    58:a4:77:27:fa:18:e1:60:69:b8:ca:c0:01:b9:d6:
                    5a:7c:0d:0f:1c:eb:de:f4:d8:16:e3:a6:29:b5:5d:
                    30:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A2:8D:66:0E:E1:86:41:38:65:DF:7A:94:39:4F:A1:40:09:E9:1B
            X509v3 Authority Key Identifier:
                keyid:5E:B5:37:A1:5F:D5:3C:D0:62:16:15:B6:9D:55:DB:71:53:89:68:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/5EB537A15FD53CD0621615B69D55DB7153896898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EB537A15FD53CD0621615B69D55DB7153896898.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/3138362e3233322e3137362e302f32332d3332203d3e20323632373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:4f:a0:82:1e:b5:67:ac:72:4a:2c:fa:fa:79:b3:c1:69:c4:
         51:61:75:ee:fb:4b:02:c7:65:91:10:60:bf:c9:bf:29:30:6c:
         4f:45:25:08:9b:0a:f1:01:2e:9d:17:0e:0b:e9:09:33:c0:21:
         b1:ba:cc:b5:90:9d:20:ed:01:dc:c7:db:87:da:70:af:05:16:
         94:5e:03:eb:26:f6:a8:2c:6f:10:c0:40:9a:8c:1a:f0:a6:05:
         ba:90:d2:94:51:7f:cd:9f:36:87:c6:40:21:1e:67:b1:f8:0b:
         4e:28:dd:98:a0:61:26:31:37:d8:77:9d:0a:f5:02:e2:48:bc:
         a7:cd:a7:08:4c:0e:0e:5b:fd:a5:34:f3:46:dd:e2:85:8f:aa:
         7e:bc:b4:9c:97:39:74:13:79:2f:9a:22:61:10:1e:7e:fd:93:
         c8:e0:a8:01:89:e6:ae:e2:56:9e:db:b7:99:d0:91:59:5b:9a:
         d1:26:93:78:78:bc:c0:be:bd:c1:7d:a4:cd:3b:84:95:5a:0c:
         b4:22:91:d2:3a:ce:7f:4a:1b:dc:7c:89:dc:4f:8c:0f:7c:d2:
         ec:68:78:bb:1c:01:27:68:21:b7:06:d3:02:31:ae:39:58:73:
         ba:ae:1f:9c:84:42:b3:58:69:91:b3:25:d1:0b:df:fa:71:25:
         45:2d:17:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org