Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/0/3138362e3233352e3136302e302f32302d3234203d3e20323632373834.roa
File:                     3138362e3233352e3136302e302f32302d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          HrrueQ3/g6puPlg7uQ/ZUErHrZG0C5JmG86QVkEX+nQ=
Subject key identifier:   3F:EC:43:E7:20:01:BA:EB:77:93:46:33:35:E6:70:9C:2C:4B:CD:03
Certificate issuer:       /CN=4B4A3916DD0EAD2BBF922C18C33A3C35819E3E10
Certificate serial:       22643CA74FBD98CD0564FA81FB9A2EDB5AC8B79F
Authority key identifier: 4B:4A:39:16:DD:0E:AD:2B:BF:92:2C:18:C3:3A:3C:35:81:9E:3E:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B4A3916DD0EAD2BBF922C18C33A3C35819E3E10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/0/3138362e3233352e3136302e302f32302d3234203d3e20323632373834.roa
Signing time:             Mon 05 Feb 2024 17:59:32 +0000
ROA not before:           Mon 05 Feb 2024 17:54:32 +0000
ROA not after:            Mon 03 Feb 2025 17:59:32 +0000
asID:                     262784
IP address blocks:        186.235.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:64:3c:a7:4f:bd:98:cd:05:64:fa:81:fb:9a:2e:db:5a:c8:b7:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B4A3916DD0EAD2BBF922C18C33A3C35819E3E10
        Validity
            Not Before: Feb  5 17:54:32 2024 GMT
            Not After : Feb  3 17:59:32 2025 GMT
        Subject: CN=3FEC43E72001BAEB7793463335E6709C2C4BCD03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:07:e3:be:56:28:81:ed:b4:11:e0:ac:41:
                    a7:bc:31:49:ab:27:0a:5c:1f:22:fc:60:12:7e:8d:
                    63:8b:4e:d0:79:66:7b:a5:38:bb:80:ba:7d:7d:50:
                    c5:25:07:66:c5:bd:59:9b:8e:d9:93:12:f8:e8:d2:
                    ba:71:4d:c0:26:ce:f7:4f:ab:61:b8:31:cc:be:f0:
                    20:ef:e9:6b:d3:19:e6:31:5d:05:96:ab:6f:4e:44:
                    9e:dd:1b:59:e7:21:4f:55:3d:02:99:a8:c3:ff:cc:
                    2c:c3:ef:67:6a:38:61:6f:ab:be:6f:43:27:cc:82:
                    09:f2:8e:30:76:33:06:2c:47:af:22:3f:84:1a:12:
                    7b:ac:75:91:bc:7c:8b:db:67:0f:fe:98:e9:df:d3:
                    9c:2d:ac:b9:99:98:5f:2c:80:22:28:3f:4a:c7:99:
                    2a:83:39:6e:3d:03:74:37:fb:55:60:b0:b8:0c:88:
                    be:a1:55:51:84:be:ca:d6:9c:ed:1b:d4:94:8f:72:
                    ef:a4:aa:ec:43:53:90:77:96:a1:c7:79:28:ea:45:
                    9e:39:01:15:c3:41:95:75:51:fe:d1:39:49:05:fe:
                    b6:d1:96:88:90:5a:7c:3b:eb:07:50:a5:e3:61:5c:
                    10:74:ee:87:68:1d:44:c7:77:6d:9c:22:f5:5a:f7:
                    5f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EC:43:E7:20:01:BA:EB:77:93:46:33:35:E6:70:9C:2C:4B:CD:03
            X509v3 Authority Key Identifier:
                keyid:4B:4A:39:16:DD:0E:AD:2B:BF:92:2C:18:C3:3A:3C:35:81:9E:3E:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/0/4B4A3916DD0EAD2BBF922C18C33A3C35819E3E10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B4A3916DD0EAD2BBF922C18C33A3C35819E3E10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/0/3138362e3233352e3136302e302f32302d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:b5:81:30:64:95:d9:ed:9f:43:c2:25:bd:ba:82:d7:4a:55:
         0f:ab:9f:ca:e4:de:22:9a:7b:d6:87:f5:b2:3f:05:d0:a0:be:
         93:11:9a:ad:e9:88:99:c1:fb:5e:90:8a:d0:23:f3:40:d8:fa:
         09:79:44:52:99:09:d3:91:5b:e4:67:d2:b7:ee:e1:2a:0f:a5:
         5f:de:ad:aa:3b:bc:50:87:a0:d3:04:e2:4c:af:6a:57:fc:ed:
         09:f7:a1:83:c7:03:a4:ca:54:6f:90:2b:77:47:48:8e:06:85:
         32:95:a8:5c:1d:90:6c:6c:a7:c0:22:7e:de:ed:5a:86:16:4f:
         30:7c:27:f6:6a:15:29:68:44:47:11:ce:b3:0a:df:02:24:32:
         42:e7:0e:f4:fc:19:fa:0d:36:73:a0:10:9b:7c:8d:ea:bb:31:
         79:ce:24:e5:98:03:5d:10:0e:a4:66:5a:53:87:16:0b:a3:26:
         63:98:ec:7e:83:ba:12:47:a1:e3:23:af:8d:de:80:7c:c1:78:
         ac:f5:3f:92:84:4a:32:c5:3f:26:83:21:12:61:84:63:5f:ed:
         ac:d1:7d:09:fd:59:96:14:20:84:ff:3a:ec:05:41:7c:d3:79:
         0e:12:a3:45:7d:30:e7:3d:2f:8f:4b:20:2a:83:c0:46:96:be:
         83:14:06:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org