Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e342e302f32322d3232203d3e20323730383832.roa
File:                     3138362e3139342e342e302f32322d3232203d3e20323730383832.roa (raw, json)
Hash identifier:          G57ljYl9LfKLEx7rShgPM4m/UBWLCQPZSys4kkQQpZQ=
Subject key identifier:   EC:96:50:92:0E:E0:65:4A:85:1E:D6:16:5A:68:B4:96:67:93:24:69
Certificate issuer:       /CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
Certificate serial:       3C36086D188AF558B4323C867B85E81F62E74E3D
Authority key identifier: E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e342e302f32322d3232203d3e20323730383832.roa
Signing time:             Mon 15 Apr 2024 11:56:32 +0000
ROA not before:           Mon 15 Apr 2024 11:51:32 +0000
ROA not after:            Mon 14 Apr 2025 11:56:32 +0000
asID:                     270882
IP address blocks:        186.194.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:36:08:6d:18:8a:f5:58:b4:32:3c:86:7b:85:e8:1f:62:e7:4e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
        Validity
            Not Before: Apr 15 11:51:32 2024 GMT
            Not After : Apr 14 11:56:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7f:0a:c5:6c:4d:06:69:d4:51:46:90:25:38:
                    c3:a3:1c:37:ec:d0:f5:53:0b:e0:04:7d:76:f9:fb:
                    78:cd:8f:2c:02:dd:25:14:25:f6:53:83:f7:b4:09:
                    ef:9c:bb:41:c4:aa:1b:55:f7:3c:99:c2:4d:41:27:
                    e5:5b:55:a0:34:89:36:ed:ac:cf:6f:45:53:7b:6b:
                    df:7b:16:73:97:73:3c:64:74:3b:e4:9e:02:68:32:
                    2c:4b:15:57:2c:be:ae:24:9c:97:38:46:5b:35:00:
                    91:f0:ff:8c:94:d2:2f:b6:a9:99:22:70:79:2c:25:
                    ec:95:27:4f:f1:27:52:98:f4:c5:50:f2:1d:54:ac:
                    77:b3:af:51:e9:d9:55:2f:ef:59:1e:d8:8f:a5:86:
                    6f:57:c4:15:4b:0a:62:00:8e:2e:91:94:bc:4c:40:
                    d2:d6:8a:8e:49:e2:b7:36:73:f8:bf:3a:24:9e:68:
                    19:a3:96:d4:e4:f4:da:a7:c2:05:44:25:4b:fb:62:
                    51:25:77:09:c8:0a:af:49:b4:53:71:10:c3:a8:69:
                    37:e3:44:c1:ec:f4:61:c5:50:06:2c:1a:7b:01:96:
                    cf:7e:96:21:63:4d:91:e9:b9:bd:ff:5f:fb:c0:1f:
                    2e:31:28:c7:e1:72:33:52:ce:48:fd:22:77:0b:8b:
                    91:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:96:50:92:0E:E0:65:4A:85:1E:D6:16:5A:68:B4:96:67:93:24:69
            X509v3 Authority Key Identifier:
                keyid:E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e342e302f32322d3232203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:95:f1:39:15:e0:f4:d1:47:be:34:1b:46:a9:c1:e2:0c:72:
         8d:4b:b0:ae:ee:90:c8:93:b5:d0:ac:3d:88:d3:05:1e:5e:41:
         7a:02:01:66:1a:d6:75:79:7d:47:e8:df:06:2e:0a:f8:c2:86:
         89:9b:38:7e:1d:08:b8:d7:21:d9:57:aa:b1:63:6d:db:d2:77:
         81:55:5c:f0:e5:77:3b:f8:62:b1:be:e5:a6:7f:db:42:85:f5:
         f0:13:3e:ba:d5:cd:36:aa:21:be:be:55:4e:bf:99:f5:7d:68:
         ad:03:e8:75:1e:d0:aa:e2:ea:8e:8b:35:0a:88:1f:a3:76:0c:
         f2:12:06:ac:24:f1:7c:ec:87:cf:6c:1f:46:6e:6b:1c:d4:88:
         94:f3:ea:30:6b:90:a6:a8:08:ca:7b:2d:24:38:97:b3:be:04:
         af:7e:3c:22:36:f1:ea:93:6b:3b:03:72:db:c8:61:62:a2:75:
         6c:e4:ac:b5:a7:eb:3f:dd:3b:f3:e9:8d:29:99:f2:4a:98:f0:
         09:4d:91:63:3d:88:68:3e:33:29:63:62:59:2e:52:4d:81:80:
         0d:d0:ca:97:82:74:56:97:b9:75:82:08:35:e6:65:13:3e:21:
         b8:56:73:2b:33:fa:7d:86:02:62:39:77:ea:df:16:5c:95:30:
         fd:7d:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org