Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e342e302f32342d3234203d3e20323730383832.roa
File:                     3138362e3139342e342e302f32342d3234203d3e20323730383832.roa (raw, json)
Hash identifier:          oV1ZtEMl7ZA12R1G/mCrwvMHJl21YKqLPo9akteulWQ=
Subject key identifier:   37:2E:63:2A:EB:4A:58:91:D2:85:EE:C3:7B:18:92:AC:55:E6:54:6B
Certificate issuer:       /CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
Certificate serial:       43BEA2CE4F5E8B80EA02FEDCDB32E79201F9D166
Authority key identifier: E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e342e302f32342d3234203d3e20323730383832.roa
Signing time:             Mon 15 Apr 2024 11:56:32 +0000
ROA not before:           Mon 15 Apr 2024 11:51:32 +0000
ROA not after:            Mon 14 Apr 2025 11:56:32 +0000
asID:                     270882
IP address blocks:        186.194.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:be:a2:ce:4f:5e:8b:80:ea:02:fe:dc:db:32:e7:92:01:f9:d1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
        Validity
            Not Before: Apr 15 11:51:32 2024 GMT
            Not After : Apr 14 11:56:32 2025 GMT
        Subject: CN=3082010A0282010100D9D3B77D3CA397C1ECBA97622E5054367DC5EDDEE3974B0380F340A9B34BD3F2B93F1157B285702DBBA20C035DF46FA3CA5463B33CCE166CAFAAB283098BFCF2BC34BA3ECF453D9599E1DD56B590201CA9CC02DCA1B18DDCCC7201FF81EB40DC134BF83157D814F34CEC8A78523E27D5DEE4BE72A55CDE2D5AC50158C4DBCE01E699B21C505C9AAE0B98BB72D5725162ECC944EFD88EF47BF20735191FA1E1521ADE6148DC2EB185F9E4E32242CC0B1FEB97410B69BC304EA54B7DB0EE6429B8D3CDD18A436879B920640A402CE87565B7EB873CBD63EFB7C28BECA0614F052B10925CE99ECC202140AEAAE33CB748B4E94A796C0C63861177F399C76F1B7F1B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:b7:7d:3c:a3:97:c1:ec:ba:97:62:2e:50:
                    54:36:7d:c5:ed:de:e3:97:4b:03:80:f3:40:a9:b3:
                    4b:d3:f2:b9:3f:11:57:b2:85:70:2d:bb:a2:0c:03:
                    5d:f4:6f:a3:ca:54:63:b3:3c:ce:16:6c:af:aa:b2:
                    83:09:8b:fc:f2:bc:34:ba:3e:cf:45:3d:95:99:e1:
                    dd:56:b5:90:20:1c:a9:cc:02:dc:a1:b1:8d:dc:cc:
                    72:01:ff:81:eb:40:dc:13:4b:f8:31:57:d8:14:f3:
                    4c:ec:8a:78:52:3e:27:d5:de:e4:be:72:a5:5c:de:
                    2d:5a:c5:01:58:c4:db:ce:01:e6:99:b2:1c:50:5c:
                    9a:ae:0b:98:bb:72:d5:72:51:62:ec:c9:44:ef:d8:
                    8e:f4:7b:f2:07:35:19:1f:a1:e1:52:1a:de:61:48:
                    dc:2e:b1:85:f9:e4:e3:22:42:cc:0b:1f:eb:97:41:
                    0b:69:bc:30:4e:a5:4b:7d:b0:ee:64:29:b8:d3:cd:
                    d1:8a:43:68:79:b9:20:64:0a:40:2c:e8:75:65:b7:
                    eb:87:3c:bd:63:ef:b7:c2:8b:ec:a0:61:4f:05:2b:
                    10:92:5c:e9:9e:cc:20:21:40:ae:aa:e3:3c:b7:48:
                    b4:e9:4a:79:6c:0c:63:86:11:77:f3:99:c7:6f:1b:
                    7f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2E:63:2A:EB:4A:58:91:D2:85:EE:C3:7B:18:92:AC:55:E6:54:6B
            X509v3 Authority Key Identifier:
                keyid:E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e342e302f32342d3234203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:35:58:9d:00:6f:a6:34:96:be:5f:b0:37:dd:de:28:32:ab:
         a6:b5:07:46:b8:26:c5:cc:8b:19:c1:6c:63:f7:cf:13:f1:6a:
         e1:62:50:68:6f:c8:20:cd:c5:84:66:62:ac:e0:25:5f:5f:4b:
         ed:5c:35:54:c2:73:d9:76:2b:04:74:ae:13:f8:e6:c9:13:15:
         9b:08:f0:19:0d:cf:7b:95:3d:1b:94:45:eb:8c:67:bc:77:53:
         d3:39:59:8d:b4:84:00:25:8f:e4:19:2a:91:cc:96:b0:8b:b9:
         7b:bb:34:1c:9d:01:03:67:d1:04:ff:e1:97:de:8f:17:14:29:
         bd:50:d5:b1:86:c4:bd:45:63:70:5e:e5:24:c9:2a:7a:89:c5:
         59:52:8c:ca:5f:8c:5c:39:36:a8:42:62:68:13:39:f4:a8:fe:
         51:c8:af:5b:89:8b:cc:ac:6e:f5:18:68:a1:6e:d5:2b:51:4b:
         b2:1a:f9:fe:81:20:3c:2b:66:cd:68:5e:92:e7:90:21:1d:ee:
         61:96:ae:17:dd:c9:e1:7a:c6:f2:1f:30:29:bd:d5:7d:e7:92:
         31:ce:a7:1f:85:3a:2b:bc:d1:e4:23:d2:c8:43:54:0e:e8:f4:
         e3:50:b2:70:0d:76:15:8a:38:c6:fd:69:63:0f:82:0b:5b:2d:
         09:d4:43:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org