Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e352e302f32342d3234203d3e20323730383832.roa
File:                     3138362e3139342e352e302f32342d3234203d3e20323730383832.roa (raw, json)
Hash identifier:          8Hwleo4+/zXclklDpNxSHxHwYkXLSOfG0wTmjn7uHKs=
Subject key identifier:   15:BD:2D:1C:D3:94:59:0F:03:53:B2:F3:9B:BE:50:CC:73:96:AE:B9
Certificate issuer:       /CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
Certificate serial:       45B6870BECC38FE57507E2D2EC799FEBAAE253EF
Authority key identifier: E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e352e302f32342d3234203d3e20323730383832.roa
Signing time:             Mon 15 Apr 2024 11:56:32 +0000
ROA not before:           Mon 15 Apr 2024 11:51:32 +0000
ROA not after:            Mon 14 Apr 2025 11:56:32 +0000
asID:                     270882
IP address blocks:        186.194.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b6:87:0b:ec:c3:8f:e5:75:07:e2:d2:ec:79:9f:eb:aa:e2:53:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
        Validity
            Not Before: Apr 15 11:51:32 2024 GMT
            Not After : Apr 14 11:56:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:75:27:84:ef:8c:2f:89:51:f4:aa:cd:5b:
                    9b:a8:12:60:a2:c9:f5:8f:11:06:12:92:33:a0:6d:
                    a8:7e:14:d9:9e:d0:6b:d6:3e:d2:00:b0:e0:9a:7d:
                    2d:70:4e:55:ea:14:9a:76:91:79:f3:9c:63:40:b6:
                    16:c2:df:1f:81:fd:29:cc:60:a5:30:01:bf:93:85:
                    25:37:f9:75:e5:e3:75:57:7e:c6:c8:45:91:52:e6:
                    fd:4e:f5:e4:dc:25:e7:a4:5c:1e:47:37:99:48:4a:
                    55:1e:d2:2f:41:64:9f:a7:75:5b:d0:cb:e3:17:4a:
                    9d:11:ea:af:84:e4:a8:27:1b:85:ac:c7:39:ca:ee:
                    6b:6e:f7:76:27:5b:d1:7e:79:e5:5e:4d:f1:0a:12:
                    22:96:9f:ab:1d:ff:02:3e:56:a5:8d:cc:ca:1c:82:
                    1c:52:24:b4:3f:9c:90:54:ea:b0:05:04:f8:e3:3a:
                    01:7e:10:00:cb:15:21:18:ad:7f:b0:5f:81:d3:3c:
                    da:a5:00:61:7d:fd:f3:21:4d:22:2e:3d:05:2b:86:
                    ec:f9:24:56:f0:b5:f4:e1:37:7b:8c:b0:70:e2:05:
                    cb:98:5f:03:fc:1e:50:5e:bb:26:15:50:a2:02:da:
                    40:21:9c:08:3f:30:ae:bd:1d:d1:7a:dd:31:3a:bc:
                    c0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BD:2D:1C:D3:94:59:0F:03:53:B2:F3:9B:BE:50:CC:73:96:AE:B9
            X509v3 Authority Key Identifier:
                keyid:E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e352e302f32342d3234203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:00:7e:d3:34:72:53:20:73:f1:99:9c:de:f5:ba:17:0e:2f:
         3f:73:53:5d:19:e4:ef:96:6d:19:b4:d0:5f:65:20:07:a6:58:
         3b:01:7c:02:14:32:c7:8a:a9:f9:ad:9c:c4:db:7a:0e:69:88:
         1f:79:c9:cb:2d:3d:43:05:51:46:5c:df:49:bd:07:fd:7b:22:
         ed:00:65:76:14:e0:1d:8e:07:e8:30:ef:e0:d8:49:09:23:98:
         c7:e1:f6:17:02:01:a8:1c:b2:ee:c6:2c:c8:93:f5:62:f8:36:
         1a:d7:c6:48:cb:f0:8f:db:8c:3c:c6:0b:d4:9c:ba:18:0d:22:
         72:d5:3a:bb:46:b7:13:e1:53:0b:8e:06:02:08:11:11:22:b0:
         06:0e:47:51:09:04:5f:b8:70:34:10:08:ed:d1:c3:71:9f:ec:
         52:93:24:66:74:08:c8:b1:24:61:35:a7:c3:f7:c0:60:05:14:
         02:6b:72:23:ad:87:cc:39:73:de:c0:ff:11:88:91:80:a4:55:
         38:11:d2:3a:c5:e6:76:87:d5:7f:cf:da:8f:0c:30:2b:38:4f:
         b3:77:e2:24:2a:8d:82:8c:15:81:50:08:aa:08:1c:6d:b1:b8:
         c0:e0:08:50:6e:fc:50:c1:ae:dc:3f:a1:e5:96:d4:6b:42:ad:
         f7:2e:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org