Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36382e302f32342d3234203d3e203533313732.roa
File:                     3138362e3232352e36382e302f32342d3234203d3e203533313732.roa (raw, json)
Hash identifier:          1AMUPlusQOgWGBg3SeX5dOu0JkLJAZZ6gt8mtPtsB0A=
Subject key identifier:   38:CC:B6:2D:3C:A7:F8:05:95:F1:DA:07:0D:D4:09:F9:A1:7E:9A:BA
Certificate issuer:       /CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
Certificate serial:       58E3FD8842D79288B6A9B07498F9CE4AB12FDDB3
Authority key identifier: C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36382e302f32342d3234203d3e203533313732.roa
Signing time:             Thu 11 May 2023 11:12:05 +0000
ROA not before:           Thu 11 May 2023 11:07:05 +0000
ROA not after:            Thu 09 May 2024 11:12:05 +0000
asID:                     53172
IP address blocks:        186.225.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e3:fd:88:42:d7:92:88:b6:a9:b0:74:98:f9:ce:4a:b1:2f:dd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3397AC82A4044FF7764FAF3B7033CAB6341AF84
        Validity
            Not Before: May 11 11:07:05 2023 GMT
            Not After : May  9 11:12:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:87:2c:8b:5f:35:ff:3c:ac:df:77:6e:16:53:
                    eb:de:15:21:75:bd:f5:9f:34:80:84:89:69:90:6e:
                    86:04:ab:38:36:f0:ef:33:ef:87:f8:28:a4:ac:a2:
                    1b:b0:b0:da:4d:e5:4c:ba:72:8b:b2:d7:ea:99:e5:
                    6f:4e:44:d1:6e:80:e9:3c:64:f1:52:1b:6c:b3:c9:
                    22:2d:56:08:a9:20:d7:1a:d2:de:4c:09:5e:8b:e5:
                    d7:01:35:30:6b:89:5e:2a:1d:05:d8:22:f8:e2:27:
                    d0:c3:ab:4c:41:20:7f:de:21:f1:2e:c4:ec:eb:0a:
                    33:45:65:c9:b0:76:01:9e:41:f7:c5:4c:21:ac:b6:
                    d3:1e:f5:97:48:0d:2a:b4:7e:7d:28:6c:bb:40:fb:
                    e3:4e:67:13:93:6b:8f:22:3f:c7:05:f7:8a:15:e4:
                    e5:00:3b:05:51:bb:ae:02:36:2c:2c:29:aa:cc:07:
                    06:a1:03:1a:5c:d2:4b:15:65:25:6f:40:62:ab:c2:
                    3a:f3:d4:67:01:e5:9f:84:0d:24:3f:9a:6e:b2:0f:
                    1a:97:5c:00:9a:59:b0:83:89:49:15:09:5f:8e:c1:
                    4b:b6:20:92:1b:f2:e9:b1:d2:96:83:6b:97:c5:f6:
                    eb:1c:7f:96:3c:9d:8d:ab:be:c2:94:d3:f3:6c:67:
                    37:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CC:B6:2D:3C:A7:F8:05:95:F1:DA:07:0D:D4:09:F9:A1:7E:9A:BA
            X509v3 Authority Key Identifier:
                keyid:C3:39:7A:C8:2A:40:44:FF:77:64:FA:F3:B7:03:3C:AB:63:41:AF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C3397AC82A4044FF7764FAF3B7033CAB6341AF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hJ4RCNPQvYnRTmSpDFzcf1PWaxQ9Y11okExr7dq5n5k/0/3138362e3232352e36382e302f32342d3234203d3e203533313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:15:2f:fc:0a:ae:d1:86:4c:a0:a0:60:9d:3f:0f:c1:44:99:
         8c:7f:06:da:78:14:3f:8f:2a:85:e7:65:c1:7c:3d:d7:7c:48:
         7b:c2:3a:f3:3c:b7:e2:d8:b2:d9:ac:13:60:b7:60:ce:4a:57:
         cf:84:3e:55:fb:42:d7:66:b6:20:c0:2f:35:ce:49:5b:56:70:
         10:7e:e5:1a:9c:a5:84:60:02:9b:77:59:c9:18:22:4a:7b:10:
         8c:99:fe:b4:af:9a:fa:ce:2a:ea:b1:42:90:24:79:15:95:13:
         e7:b6:88:b3:68:48:ba:b1:96:ae:c5:c5:3c:4e:2b:c9:88:b5:
         ef:9e:6e:cd:5c:f2:e7:85:dd:b8:83:bd:21:f3:99:1c:3e:d7:
         00:ef:f2:c2:1f:ba:b5:45:35:25:34:ca:f9:0e:2f:11:91:bd:
         3b:af:09:b8:59:9e:e2:37:ab:ca:1a:53:2b:c0:90:ac:fc:d7:
         e0:37:d2:b7:17:d0:b7:f5:7b:78:9f:02:f1:b0:d2:4a:d7:9b:
         75:d3:25:0b:72:9f:76:5c:41:32:90:49:a7:47:37:e7:18:34:
         9f:ef:68:b2:83:60:4c:fc:9e:72:71:6b:07:8b:c6:7d:b9:96:
         e7:75:d7:e9:e2:7e:39:fc:db:e5:3c:3e:b2:df:6f:cb:87:54:
         60:c5:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org