Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e362e302f32332d3233203d3e20323730383832.roa
File:                     3138362e3139342e362e302f32332d3233203d3e20323730383832.roa (raw, json)
Hash identifier:          rv3oxKSLFhkaLIpdE7kJvEN34GEaEjsVGoVDFE5ftDE=
Subject key identifier:   5D:CF:8F:16:B5:60:27:4A:F1:FF:27:3F:9B:91:A2:11:A1:AA:A5:BF
Certificate issuer:       /CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
Certificate serial:       50CC9B4C0E1CB43D3BA6143468FDFA5C0D2904EF
Authority key identifier: E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e362e302f32332d3233203d3e20323730383832.roa
Signing time:             Mon 15 Apr 2024 11:56:32 +0000
ROA not before:           Mon 15 Apr 2024 11:51:32 +0000
ROA not after:            Mon 14 Apr 2025 11:56:32 +0000
asID:                     270882
IP address blocks:        186.194.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cc:9b:4c:0e:1c:b4:3d:3b:a6:14:34:68:fd:fa:5c:0d:29:04:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
        Validity
            Not Before: Apr 15 11:51:32 2024 GMT
            Not After : Apr 14 11:56:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:cf:64:8c:3f:40:72:24:69:a3:34:93:f4:
                    8c:66:56:93:99:9f:cd:98:9f:1a:ef:3c:ca:5b:94:
                    88:d1:93:6a:79:a6:af:f8:93:ce:98:81:98:b6:1c:
                    2c:82:90:77:e0:e6:97:8c:53:11:91:1a:bc:df:72:
                    c9:37:be:3b:1c:2d:8d:16:ac:00:78:a1:ea:fe:d5:
                    0c:78:fe:51:19:86:33:88:14:74:4b:1f:4d:31:04:
                    14:43:e5:a8:da:09:72:a8:d2:0d:7e:51:eb:d8:54:
                    bf:55:57:11:b5:56:4c:19:bc:71:2c:5f:d4:7f:21:
                    38:61:d2:d1:63:3f:0a:d7:62:5a:a3:96:59:af:26:
                    05:1d:f8:ce:de:45:c7:b7:27:81:31:bd:87:03:87:
                    be:bb:3e:94:56:c6:7c:f8:ec:ec:23:ab:54:68:48:
                    9b:84:8b:4f:22:db:4f:f7:e8:93:9b:d9:61:b8:f2:
                    bd:1d:55:ae:ab:3c:ad:82:a8:0a:47:0d:74:aa:b5:
                    9e:5b:c5:c7:88:31:fd:ce:0e:fa:14:dc:f3:18:49:
                    92:13:11:77:5d:07:d5:7d:b1:86:d2:33:8b:89:f4:
                    cd:19:7a:a3:e5:18:3a:a9:81:29:27:c4:0b:13:3e:
                    a7:b0:c5:a6:3c:07:b7:e7:27:06:db:7f:b9:68:5c:
                    88:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CF:8F:16:B5:60:27:4A:F1:FF:27:3F:9B:91:A2:11:A1:AA:A5:BF
            X509v3 Authority Key Identifier:
                keyid:E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/3138362e3139342e362e302f32332d3233203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:e8:ea:05:12:bc:d1:cc:45:de:a6:9c:a2:2e:ac:29:f0:80:
         fb:f1:9d:7f:2b:44:81:3c:0c:7b:11:7c:e6:b5:1a:22:f2:02:
         86:5c:27:e6:13:13:a3:87:3d:bc:20:90:2e:7f:53:13:8c:8c:
         30:45:f4:ab:86:65:0c:1f:bb:97:b1:a3:45:3d:75:01:66:60:
         48:e4:fe:81:62:1f:09:dd:3f:a2:da:c0:f7:0c:dd:7a:db:2b:
         71:f2:34:d3:de:c8:22:ac:5c:96:a3:cf:f7:57:52:15:3c:d1:
         1a:e1:6b:4e:a5:1b:be:6d:5d:f9:4c:e6:d9:b6:3a:63:f7:f8:
         7a:26:44:ed:ab:09:eb:56:16:c6:f2:71:f3:9a:57:a1:20:38:
         c3:83:a5:7b:ec:c6:22:86:14:60:8c:91:27:e3:04:c7:d8:f0:
         b6:fc:e5:23:18:00:5a:55:85:ba:55:17:0c:8e:65:97:f0:8b:
         12:1a:93:f5:f3:26:84:8a:49:3d:76:dd:94:55:8d:cc:aa:b0:
         d6:dc:d6:ea:57:44:a3:93:c1:e7:81:b6:cc:f9:f6:8b:18:37:
         9d:36:9b:66:88:1a:26:2a:40:ff:44:47:fc:13:ef:03:38:64:
         93:93:4d:13:87:16:d3:a7:d2:90:8d:6d:13:68:32:49:a9:70:
         1e:8f:05:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org