Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e39362e302f32322d3232203d3e20323632373230.roa
File:                     3138362e3139352e39362e302f32322d3232203d3e20323632373230.roa (raw, json)
Hash identifier:          uPwSu2cacKgxDhdkMeAGb3B4UfFYTS7Ge1llMKrXeTE=
Subject key identifier:   39:E7:4F:D8:63:C6:1B:F5:0D:8D:7F:38:A9:70:A5:A4:19:48:1C:B9
Certificate issuer:       /CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
Certificate serial:       4B90FA712218E2B45E3463063F7D2289BBBA5A95
Authority key identifier: 1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e39362e302f32322d3232203d3e20323632373230.roa
Signing time:             Tue 28 Mar 2023 20:25:52 +0000
ROA not before:           Tue 28 Mar 2023 20:20:52 +0000
ROA not after:            Tue 26 Mar 2024 20:25:52 +0000
asID:                     262720
IP address blocks:        186.195.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:90:fa:71:22:18:e2:b4:5e:34:63:06:3f:7d:22:89:bb:ba:5a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Validity
            Not Before: Mar 28 20:20:52 2023 GMT
            Not After : Mar 26 20:25:52 2024 GMT
        Subject: CN=39E74FD863C61BF50D8D7F38A970A5A419481CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:57:74:bd:42:d6:93:b7:70:79:c9:f5:bd:d5:
                    72:ae:83:41:c0:e8:6e:a5:8f:7d:61:3c:86:cc:96:
                    c8:f5:db:80:b9:ee:ab:b9:da:52:6e:20:de:06:28:
                    44:35:21:45:4f:82:33:7d:9e:6f:62:cd:4d:e3:09:
                    d3:8c:4f:de:02:8c:e4:ea:15:49:77:5c:79:c1:5a:
                    99:ec:05:cc:29:5a:89:48:00:f4:9d:7a:a4:9f:bc:
                    c2:c3:84:52:fb:55:92:d2:43:63:73:87:ef:fa:d4:
                    6a:35:76:4c:0e:12:3a:74:4b:c9:cb:0f:4d:40:7f:
                    3b:86:99:e6:50:bd:09:ad:28:99:3e:f5:39:5a:94:
                    39:43:2a:c0:1a:ac:0e:e2:87:a6:69:86:65:bd:6c:
                    1e:e5:4e:27:7f:32:95:97:08:d6:af:95:4c:ce:75:
                    e7:b4:47:18:9c:0c:cc:af:f3:d6:ba:a1:f8:7e:88:
                    48:85:b6:b6:f3:6b:18:94:8e:4d:28:9b:1d:d9:df:
                    58:2e:b3:5d:0e:f5:6a:04:db:ca:32:a0:be:00:39:
                    dd:c3:f6:fb:fe:2f:f0:5e:53:66:3f:2e:a2:10:3c:
                    f4:de:19:24:fc:78:04:9d:9c:cc:a7:29:7e:c7:5f:
                    01:6c:7d:6b:6c:9d:37:04:81:89:98:72:5c:75:63:
                    0a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E7:4F:D8:63:C6:1B:F5:0D:8D:7F:38:A9:70:A5:A4:19:48:1C:B9
            X509v3 Authority Key Identifier:
                keyid:1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e39362e302f32322d3232203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:fe:88:36:2d:73:0e:0b:50:e8:30:fd:de:03:d8:c1:d0:
         00:ad:a9:e3:69:21:be:bb:a0:70:d5:f2:94:89:e9:24:10:8f:
         16:86:49:26:2d:a5:c6:f2:ae:e7:24:be:e9:a9:d9:7e:91:3f:
         36:5d:3c:8d:cc:fc:ec:5e:09:64:54:d3:96:ad:83:b8:51:c3:
         66:51:36:ea:37:e2:ee:f7:71:27:94:8f:82:0d:05:1a:c8:13:
         5c:76:2b:75:2c:51:ee:39:ca:bf:1c:db:7a:82:51:d7:4a:08:
         e5:1f:c8:b9:52:f0:a0:bd:96:e0:65:03:85:1d:1a:0f:90:22:
         c3:3b:33:d9:9e:e6:8b:a5:57:a1:39:fd:49:fb:95:36:cd:6d:
         f1:70:13:41:cd:1e:be:3b:79:38:fc:7f:6d:e5:f8:9c:72:5d:
         c9:20:3a:81:bd:4a:77:91:25:65:e1:ad:04:d0:76:81:c5:33:
         53:eb:8b:2b:40:74:d1:f5:50:0a:14:ad:4b:4d:a3:ff:01:b5:
         20:b8:77:b9:f0:e8:d8:32:4d:1d:a7:58:2d:f4:d2:e0:a2:92:
         21:0f:ea:01:21:b4:0c:09:32:14:29:ce:f3:bc:02:a5:2f:3f:
         b2:d7:03:b6:d5:f8:c1:fe:8b:4e:19:fd:e7:1b:bb:06:34:c7:
         b1:5b:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org