Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3131312e302f32342d3234203d3e20323632373230.roa
File:                     3138362e3139352e3131312e302f32342d3234203d3e20323632373230.roa (raw, json)
Hash identifier:          WSCjjfVe+aky+IOcWe2NiA2BP/3b372l7iAskvRdznU=
Subject key identifier:   C0:D5:3F:79:09:0D:32:46:5C:C3:48:21:CE:29:B1:91:1C:90:2F:91
Certificate issuer:       /CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
Certificate serial:       5A93D5FBC22026A9B18867A4E5AF26794F988B49
Authority key identifier: 1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3131312e302f32342d3234203d3e20323632373230.roa
Signing time:             Tue 28 Mar 2023 20:25:56 +0000
ROA not before:           Tue 28 Mar 2023 20:20:56 +0000
ROA not after:            Tue 26 Mar 2024 20:25:56 +0000
asID:                     262720
IP address blocks:        186.195.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:93:d5:fb:c2:20:26:a9:b1:88:67:a4:e5:af:26:79:4f:98:8b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Validity
            Not Before: Mar 28 20:20:56 2023 GMT
            Not After : Mar 26 20:25:56 2024 GMT
        Subject: CN=C0D53F79090D32465CC34821CE29B1911C902F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:88:cc:20:c9:e7:e2:94:19:eb:49:d7:a5:32:
                    e0:30:3f:59:61:5b:c5:90:27:5b:32:e1:02:dd:5e:
                    b7:92:d2:b8:78:75:8b:16:b5:14:0d:78:c6:b4:b1:
                    88:c6:f6:db:20:ca:47:fd:39:c2:97:95:08:40:3a:
                    2f:12:b4:96:50:db:e5:ca:6e:72:0e:6e:64:cb:28:
                    cc:93:5f:bd:5c:8b:c8:1f:2c:0a:fe:08:93:9d:4a:
                    65:a3:0f:75:b9:a0:48:57:68:ef:53:6f:a4:fc:a0:
                    1f:ba:c7:cb:d6:9f:cb:97:63:2f:35:a2:fd:c8:70:
                    54:7b:52:ff:8a:c6:30:bc:a4:5d:80:f2:04:99:b7:
                    34:8a:8e:02:e9:73:e9:97:dd:f1:b7:c9:8b:be:cf:
                    64:ae:7e:3d:44:9f:fa:bc:65:45:c0:fd:73:aa:56:
                    76:ee:c1:17:63:e4:bf:92:9d:72:a6:a3:89:33:4b:
                    48:9f:6c:ce:58:cc:99:73:95:f8:90:db:8f:ff:f0:
                    ae:f3:34:9a:7b:91:cc:61:26:2f:8e:11:a5:a5:51:
                    92:7b:2c:ca:85:f4:a0:9f:31:06:c3:86:f5:83:16:
                    f5:79:51:b3:bd:b9:f7:c1:df:16:f0:7a:ab:d7:5c:
                    dd:f0:ac:d4:b9:5a:c7:4e:d9:19:53:2b:73:6d:cb:
                    d0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D5:3F:79:09:0D:32:46:5C:C3:48:21:CE:29:B1:91:1C:90:2F:91
            X509v3 Authority Key Identifier:
                keyid:1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3131312e302f32342d3234203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:d8:95:f2:66:d2:d1:76:c0:77:20:00:1a:29:f3:ce:5d:70:
         55:c3:81:31:64:60:a1:92:aa:b4:9b:57:8a:3a:01:c8:d7:c3:
         f6:4a:f0:9f:b5:0d:cf:bd:cc:7a:b2:65:20:c8:ea:cb:70:db:
         c6:ef:f1:b4:9c:24:fd:45:9a:32:bd:e3:dc:9c:60:20:41:ef:
         42:f0:35:64:af:b9:41:67:d2:3c:c1:04:2e:c1:ac:e1:c2:9b:
         07:7c:fa:cd:b9:b3:84:d6:24:bb:0b:8c:61:47:65:4d:4e:98:
         5f:32:5f:80:2a:9e:9f:66:a4:de:3f:df:d2:40:b1:06:72:64:
         f7:f3:57:a8:ad:f1:f1:0a:96:66:2a:8f:fc:54:0e:bd:d2:e3:
         0c:64:db:30:31:ec:39:a3:d7:10:9c:da:de:26:ca:2b:a8:22:
         fb:1c:f7:ec:3f:35:a2:4b:94:0d:64:f3:0c:d7:3f:35:80:1a:
         29:b4:ca:9d:00:b8:8b:52:e0:34:d3:bb:f8:f9:84:04:41:3d:
         33:f6:a9:94:a6:77:94:85:5e:3f:b8:52:ae:ba:6d:76:7a:e5:
         f3:e5:d6:c5:e8:40:b1:1b:cf:54:e6:94:08:78:47:38:8a:df:
         66:f4:0a:31:a2:73:48:78:b7:1e:e9:70:6b:b5:93:0f:9e:91:
         ed:2e:6a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org