Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3138362e3233332e31322e302f32322d3332203d3e20323633303833.roa
File:                     3138362e3233332e31322e302f32322d3332203d3e20323633303833.roa (raw, json)
Hash identifier:          0FUCvSxhVqCYGOR+qA03evIcbhjNaWaJOSbxOD3hG60=
Subject key identifier:   34:54:0E:D9:31:F5:B4:D7:E7:29:81:E4:06:27:60:F9:70:AE:1A:EE
Certificate issuer:       /CN=43A516A504F5064680E71E74458628230159DB80
Certificate serial:       639E7589BA00860668FFDECD76EF7BF0FAC6B949
Authority key identifier: 43:A5:16:A5:04:F5:06:46:80:E7:1E:74:45:86:28:23:01:59:DB:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A516A504F5064680E71E74458628230159DB80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3138362e3233332e31322e302f32322d3332203d3e20323633303833.roa
Signing time:             Mon 01 Apr 2024 20:12:55 +0000
ROA not before:           Mon 01 Apr 2024 20:07:55 +0000
ROA not after:            Mon 31 Mar 2025 20:12:55 +0000
asID:                     263083
IP address blocks:        186.233.12.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9e:75:89:ba:00:86:06:68:ff:de:cd:76:ef:7b:f0:fa:c6:b9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A516A504F5064680E71E74458628230159DB80
        Validity
            Not Before: Apr  1 20:07:55 2024 GMT
            Not After : Mar 31 20:12:55 2025 GMT
        Subject: CN=34540ED931F5B4D7E72981E4062760F970AE1AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ed:5f:a1:1d:bd:51:c8:ef:f0:8d:e5:1b:28:
                    aa:7d:d3:2f:72:bb:29:37:1b:ff:d5:1e:a9:9c:9f:
                    59:92:71:50:c8:58:4e:fd:88:aa:bc:45:11:89:51:
                    ac:98:bb:85:cb:c5:2d:9d:d4:62:dd:31:0c:69:2f:
                    87:97:22:cd:2e:89:42:60:43:05:5e:79:07:23:aa:
                    96:b1:4e:cf:5c:41:31:3b:97:81:6e:8c:2c:13:c0:
                    fd:8f:1a:a0:0d:74:42:51:b3:6d:f9:ce:2e:42:38:
                    dc:cb:fe:15:a7:8a:a1:99:7e:09:64:15:e1:32:cb:
                    27:c0:0b:6c:09:6c:29:30:d3:d1:65:72:23:2b:ec:
                    18:48:a5:06:6e:42:2d:1e:88:31:50:c6:f2:cd:ac:
                    26:3e:d4:61:8d:81:ab:7e:73:b9:49:81:15:7e:61:
                    48:f0:ab:0c:3e:d3:43:35:3b:f3:8c:f6:b3:d8:2f:
                    a1:90:fa:31:9c:ed:1d:0d:23:de:2d:24:a8:a0:60:
                    b9:e5:5c:f3:1a:16:13:94:80:c1:39:94:bb:5d:f3:
                    ad:05:60:ee:e9:d1:70:70:00:31:7a:cc:ee:a7:80:
                    5a:f4:63:85:63:fe:ec:53:28:a5:85:c2:b2:db:24:
                    30:ec:b7:7f:e5:83:bd:b9:35:25:47:c0:aa:8f:43:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:54:0E:D9:31:F5:B4:D7:E7:29:81:E4:06:27:60:F9:70:AE:1A:EE
            X509v3 Authority Key Identifier:
                keyid:43:A5:16:A5:04:F5:06:46:80:E7:1E:74:45:86:28:23:01:59:DB:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/43A516A504F5064680E71E74458628230159DB80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/43A516A504F5064680E71E74458628230159DB80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/3138362e3233332e31322e302f32322d3332203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:7e:da:26:bb:9e:c6:83:56:34:ed:2a:50:10:c3:b5:e7:61:
         b2:0d:83:cb:d6:19:85:4e:59:3d:2f:88:c4:76:37:93:c5:7f:
         ad:44:cf:07:77:0a:64:d0:8d:a1:46:57:ec:92:83:70:f6:d0:
         bd:a9:bb:26:34:f7:0d:fc:9a:60:66:0c:71:e4:70:a1:60:b4:
         9d:5b:0d:04:cc:52:fb:fa:71:83:9b:c3:c6:5b:3d:87:9b:ea:
         db:a2:af:9a:cc:63:13:f2:4f:be:8d:d3:d3:48:69:46:6c:eb:
         ae:1e:08:57:41:bf:2e:bd:f2:b1:a9:03:8a:55:85:ab:6b:ba:
         7a:34:4d:07:92:08:5d:9b:69:93:61:72:27:22:11:3d:a8:29:
         3f:57:fe:86:9c:0b:83:80:d4:ef:54:05:4e:1f:3c:ac:4d:2e:
         28:82:ae:1c:cd:df:a6:de:a0:3d:b8:d4:8d:ce:72:cf:0c:2d:
         49:96:5b:b5:f1:43:9e:ca:67:0a:43:e8:8d:fb:38:0d:7a:dd:
         48:bf:cb:03:e4:f8:23:f5:27:fe:23:f0:d7:b8:6f:41:33:eb:
         6f:dc:b4:6d:46:26:4c:61:54:c6:49:ca:89:a6:4e:05:cb:26:
         56:3e:18:42:9c:ae:0c:74:e2:ac:57:d2:00:2c:e1:d0:9e:55:
         5f:21:ae:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org