Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa
File:                     3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa (raw, json)
Hash identifier:          PDkJhPenmWh/gKmpYeg5N8xMFmT2lfnbz6NGx8u7TjI=
Subject key identifier:   1B:58:A4:2F:2F:21:1A:22:3F:E5:17:24:A0:B7:26:FD:CB:E2:D0:7F
Certificate issuer:       /CN=5EB537A15FD53CD0621615B69D55DB7153896898
Certificate serial:       35D91611E22DFD565FC54246D865760DA781DC14
Authority key identifier: 5E:B5:37:A1:5F:D5:3C:D0:62:16:15:B6:9D:55:DB:71:53:89:68:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EB537A15FD53CD0621615B69D55DB7153896898.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa
Signing time:             Fri 15 Dec 2023 13:12:51 +0000
ROA not before:           Fri 15 Dec 2023 13:07:51 +0000
ROA not after:            Fri 13 Dec 2024 13:12:51 +0000
asID:                     262772
IP address blocks:        186.233.236.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d9:16:11:e2:2d:fd:56:5f:c5:42:46:d8:65:76:0d:a7:81:dc:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EB537A15FD53CD0621615B69D55DB7153896898
        Validity
            Not Before: Dec 15 13:07:51 2023 GMT
            Not After : Dec 13 13:12:51 2024 GMT
        Subject: CN=1B58A42F2F211A223FE51724A0B726FDCBE2D07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:dc:78:ba:c5:33:12:64:01:23:1b:e5:3f:
                    ab:2e:66:7b:15:0e:92:6d:f7:7b:7a:6d:89:c2:fc:
                    db:aa:fb:f2:81:b2:a4:b0:bc:89:cc:3f:b2:59:63:
                    5d:5f:a7:b9:b6:2f:ef:ea:c5:7e:4f:b0:c4:d2:25:
                    f7:27:24:f7:60:dd:e1:6b:15:4f:66:94:bb:9a:de:
                    b3:68:6c:a2:52:64:23:79:4b:d6:91:18:ad:40:23:
                    26:2f:b0:50:47:bd:f5:9b:8d:2b:13:56:a1:49:64:
                    d6:62:f2:ca:4e:50:93:7f:bb:c2:bb:95:ca:ac:4d:
                    92:39:9e:79:ea:55:03:1c:81:55:db:af:5a:58:74:
                    b2:87:6d:87:ae:70:cb:e9:d7:4b:8e:5b:6e:ae:ca:
                    6c:86:83:2a:ce:a0:55:d3:54:d6:20:e9:de:9f:62:
                    47:10:94:1e:4e:b0:22:44:3c:bb:29:4a:ad:39:a2:
                    d2:f7:92:22:de:a5:69:b6:9a:54:64:00:1f:13:34:
                    ad:43:5c:7a:c1:9c:dd:f0:bd:5e:9c:18:e0:e2:5d:
                    54:8b:a7:ce:fb:35:ec:06:b7:5f:55:35:45:7c:62:
                    1f:fe:d1:f2:4a:0c:70:97:03:72:9c:e2:e9:2b:d3:
                    dc:9d:5a:66:43:45:6c:fd:e7:7d:b9:53:b9:69:16:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:58:A4:2F:2F:21:1A:22:3F:E5:17:24:A0:B7:26:FD:CB:E2:D0:7F
            X509v3 Authority Key Identifier:
                keyid:5E:B5:37:A1:5F:D5:3C:D0:62:16:15:B6:9D:55:DB:71:53:89:68:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/5EB537A15FD53CD0621615B69D55DB7153896898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EB537A15FD53CD0621615B69D55DB7153896898.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/0/3138362e3233332e3233362e302f32322d3332203d3e20323632373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:d1:28:2b:fc:60:70:ed:0c:13:3f:0e:89:95:23:25:58:f2:
         64:28:c6:0c:2f:e4:14:da:25:63:ee:2b:2a:dc:79:dc:36:52:
         71:29:60:b5:49:38:49:6a:82:a0:5c:b1:cb:b7:4c:72:3c:d3:
         c6:37:01:90:fb:29:87:22:9a:91:b9:8c:e3:19:44:cf:77:e7:
         68:e4:e2:ef:3b:53:21:d0:56:26:e4:f5:e5:b1:f9:97:2c:ff:
         9c:03:a3:71:bc:79:ef:5b:fb:29:39:96:ec:82:21:e5:95:f9:
         72:91:11:75:c2:44:82:45:5a:12:04:d6:c6:41:4f:f6:70:f9:
         5e:58:90:f8:f3:53:a7:99:1d:e7:19:62:97:c2:b1:29:ec:0f:
         28:a9:66:f1:e7:26:73:d1:4c:0a:45:58:3d:32:b7:46:b8:ec:
         29:ca:47:b5:10:95:4d:63:3b:e8:80:1c:29:7e:af:08:07:eb:
         77:ca:03:40:06:c1:e9:37:bc:8e:67:ab:db:31:66:40:27:c2:
         ab:fe:31:c5:17:10:d0:49:36:cd:e3:4d:80:df:90:5f:2f:87:
         49:0e:b1:92:46:eb:a0:77:7c:82:5f:86:e2:f6:13:83:6e:f5:
         78:d0:9f:16:d5:ce:e4:d9:62:8e:6c:54:57:4f:c4:e3:78:82:
         a9:21:03:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org