Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3138372e312e36342e302f32302d3234203d3e203238323830.roa
File:                     3138372e312e36342e302f32302d3234203d3e203238323830.roa (raw, json)
Hash identifier:          xiQTRkq83nMqpXBInUno2Vex1TrZT9cnTd7oB5oWF2U=
Subject key identifier:   D5:17:A8:7E:CF:95:8A:E2:DF:A2:91:65:51:EB:63:CB:EE:49:6A:34
Certificate issuer:       /CN=3C4101973F3741AA7FD920C82809162B188C085A
Certificate serial:       36E4A0904A40C0ADB0022E11FCE42E4BFA471191
Authority key identifier: 3C:41:01:97:3F:37:41:AA:7F:D9:20:C8:28:09:16:2B:18:8C:08:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4101973F3741AA7FD920C82809162B188C085A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3138372e312e36342e302f32302d3234203d3e203238323830.roa
Signing time:             Mon 13 Feb 2023 11:41:37 +0000
ROA not before:           Mon 13 Feb 2023 11:36:37 +0000
ROA not after:            Mon 12 Feb 2024 11:41:37 +0000
asID:                     28280
IP address blocks:        187.1.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e4:a0:90:4a:40:c0:ad:b0:02:2e:11:fc:e4:2e:4b:fa:47:11:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C4101973F3741AA7FD920C82809162B188C085A
        Validity
            Not Before: Feb 13 11:36:37 2023 GMT
            Not After : Feb 12 11:41:37 2024 GMT
        Subject: CN=D517A87ECF958AE2DFA2916551EB63CBEE496A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:7e:02:44:c8:af:f1:ab:44:a0:38:64:47:
                    ed:98:6a:dd:52:f6:c5:10:c9:94:87:24:57:59:63:
                    92:05:e3:b6:d2:95:b4:b7:b3:b2:05:e8:e2:f6:03:
                    6f:f2:61:1b:f6:9d:57:fa:6b:6e:c3:29:56:09:84:
                    8c:36:1c:6f:c9:99:5e:d7:18:88:fa:50:93:b4:53:
                    34:49:24:c9:16:2d:72:85:8e:21:79:86:4c:e3:bc:
                    d9:1f:66:b8:97:c2:fb:6b:d0:a9:f8:54:d6:f4:c6:
                    04:5f:3c:d7:f0:3d:75:d4:f9:aa:de:0c:db:1c:b1:
                    68:47:2f:f4:cf:03:92:9c:0f:10:2a:1d:a7:1a:a9:
                    78:36:d4:3e:2e:ae:35:7e:3f:37:48:71:2e:c9:b6:
                    ee:85:d0:c5:7d:02:b4:72:95:15:78:b9:be:0d:f1:
                    87:64:e1:12:9b:ef:a7:62:65:18:e9:1b:a6:58:3d:
                    9e:1f:38:c1:1b:41:af:74:7f:fa:96:22:85:f5:6f:
                    b3:b3:b6:39:f7:70:40:fc:1a:df:63:13:cb:4f:fc:
                    7b:59:2a:7a:c7:bf:35:98:53:a8:97:4c:81:d6:11:
                    41:6e:88:15:4e:2b:4a:27:7c:6f:bb:8a:f8:3a:c7:
                    ac:01:32:29:79:e4:df:29:0e:17:b9:43:22:69:c6:
                    43:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:17:A8:7E:CF:95:8A:E2:DF:A2:91:65:51:EB:63:CB:EE:49:6A:34
            X509v3 Authority Key Identifier:
                keyid:3C:41:01:97:3F:37:41:AA:7F:D9:20:C8:28:09:16:2B:18:8C:08:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3C4101973F3741AA7FD920C82809162B188C085A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4101973F3741AA7FD920C82809162B188C085A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6M7d3WBHXkfBD2Y2KWGLSbDYzFWQRPDiwPQJbSBZM4iJ/0/3138372e312e36342e302f32302d3234203d3e203238323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:1c:96:80:12:38:b7:fd:3d:c8:2b:33:b6:f0:3a:d4:7c:1d:
         f6:64:ff:8b:e0:6d:30:56:6c:d8:e1:ae:8d:4e:a3:40:5d:ca:
         06:87:23:b8:57:53:d8:0e:db:9b:b0:ee:63:f5:9f:5e:c3:67:
         04:1e:b2:9c:10:03:ab:9c:cd:bc:79:29:17:f1:ac:20:35:21:
         ee:3f:76:79:0d:e6:ee:55:85:d7:ea:cb:f9:3e:d2:8d:71:a9:
         10:f9:b8:79:0f:5e:ee:2f:87:06:29:c6:2b:d2:18:94:5f:94:
         67:a1:04:fd:98:34:f9:da:ce:11:e6:1b:be:91:7e:1b:12:fe:
         d5:b8:ce:48:6e:37:28:85:64:8b:24:7e:c6:8e:a5:bc:25:92:
         67:75:1a:83:6f:d0:88:24:a5:49:2f:8b:05:4b:7a:4b:ce:b0:
         5c:0c:fb:1b:43:cd:65:f2:b9:71:cd:9c:73:f0:8e:de:02:6e:
         2c:e4:e6:fc:c5:d6:13:56:cd:b8:81:55:2b:b1:b4:8f:72:61:
         7b:f4:44:43:d2:4d:ad:09:37:47:40:fb:04:99:fa:15:9a:6e:
         76:01:c3:e6:0f:5e:b3:2d:86:36:0f:c6:f4:cb:ef:41:91:bd:
         19:f4:43:0c:27:cd:fd:cd:6c:d2:b0:c7:a9:1a:82:cc:26:0d:
         47:75:1a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org