Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e342e302f32332d3233203d3e20323730383832.roa
File:                     3138362e3139342e342e302f32332d3233203d3e20323730383832.roa (raw, json)
Hash identifier:          ixlRwC8uguHtMCRdviAACCmYAtwloJgZyRS0bLHeGNQ=
Subject key identifier:   1C:33:27:3D:30:0E:1C:70:A3:F6:46:6F:DA:CE:9F:AC:1D:13:4A:29
Certificate issuer:       /CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
Certificate serial:       65D4DDC0C29C023DD66E4C06371545E087BEDBC0
Authority key identifier: E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e342e302f32332d3233203d3e20323730383832.roa
Signing time:             Mon 15 Apr 2024 11:56:32 +0000
ROA not before:           Mon 15 Apr 2024 11:51:32 +0000
ROA not after:            Mon 14 Apr 2025 11:56:32 +0000
asID:                     270882
IP address blocks:        186.194.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d4:dd:c0:c2:9c:02:3d:d6:6e:4c:06:37:15:45:e0:87:be:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
        Validity
            Not Before: Apr 15 11:51:32 2024 GMT
            Not After : Apr 14 11:56:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:8a:e6:54:92:19:5a:1d:17:79:9e:a7:82:
                    a0:49:0c:49:48:79:4c:47:25:78:38:de:7a:6c:75:
                    5b:82:b6:1c:cb:9c:e0:62:13:64:06:66:50:29:0c:
                    bb:a3:7c:65:09:f8:ac:f3:da:a6:fb:12:15:4f:4d:
                    18:76:bd:44:f3:39:35:be:dd:63:f5:d5:48:43:d9:
                    5d:1d:ac:3a:a2:61:2f:91:85:ce:1a:b7:2e:fd:54:
                    32:63:e7:99:9c:78:b6:08:d7:3a:0d:b9:b3:ee:db:
                    d3:33:a6:8d:b4:3d:24:9e:79:bd:83:70:53:d4:9c:
                    a2:8b:80:24:db:82:26:4a:cf:f9:74:e9:a9:47:73:
                    97:1f:84:2c:c1:e6:2c:97:73:09:57:63:7c:d2:13:
                    e6:31:63:38:2d:85:d9:e9:18:47:b4:fb:9f:e3:eb:
                    9a:1e:13:cd:7c:d6:f7:5e:75:20:04:15:a5:10:7d:
                    e8:c0:2a:d1:3a:be:6b:c5:64:43:2e:57:95:04:a0:
                    d0:eb:62:67:00:a1:c7:d3:41:eb:be:c1:ad:44:fd:
                    8f:46:ab:34:f9:79:01:f6:f3:10:c2:2e:d3:72:5c:
                    6d:d5:1d:7a:c5:07:66:8d:55:f7:82:1c:ed:11:27:
                    2d:6a:cc:5f:0f:2d:16:04:dc:d8:ed:b4:24:9d:74:
                    c1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:33:27:3D:30:0E:1C:70:A3:F6:46:6F:DA:CE:9F:AC:1D:13:4A:29
            X509v3 Authority Key Identifier:
                keyid:E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e342e302f32332d3233203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:32:2b:46:28:c5:32:c7:89:23:b8:ce:4b:b6:f7:1d:93:be:
         82:23:d9:a9:0c:0e:a0:28:c1:b7:4b:3c:88:ed:b4:bb:02:9c:
         40:e8:c1:97:13:10:35:ed:35:1f:0d:3c:83:c2:77:8c:ad:6e:
         83:3b:ac:0e:4f:ef:31:29:0a:4c:e3:88:b0:3d:c5:67:a9:ba:
         b9:20:be:ec:bd:1d:c8:47:a4:19:7a:c0:cc:70:e7:3c:7a:04:
         cc:3f:21:dc:a2:e3:57:58:73:1e:09:eb:15:61:8b:15:bc:59:
         d2:ca:54:cf:66:33:be:62:a8:86:a6:8e:5a:8b:01:14:b3:13:
         63:db:83:8d:99:c7:18:e1:e3:d4:75:5c:f0:0d:4d:21:c1:4b:
         9e:5e:7e:70:f1:19:b0:37:bd:e7:94:b2:43:a1:89:b9:02:ab:
         ec:5a:90:73:87:2a:6e:c3:a1:98:22:cb:91:74:d7:81:f8:05:
         cc:c8:2b:ec:b4:3e:07:ec:0b:5a:6e:8e:25:b8:92:ff:4f:d4:
         e4:ac:b0:52:98:1d:9c:40:9f:56:bd:e2:7f:d3:60:7f:98:d3:
         31:5c:90:a9:94:36:79:c4:20:6b:b6:aa:e6:ab:a1:48:ab:5f:
         be:16:38:7c:7f:f9:70:bf:78:64:47:76:dc:60:4f:db:6f:cf:
         95:76:07:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org