Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e302e302f32302d3230203d3e20323632373133.roa
File:                     3138362e3230382e302e302f32302d3230203d3e20323632373133.roa (raw, json)
Hash identifier:          9fgJnb8hu4f8HbLEp6Eu8SAVVaiVZW9RmiqGydxbdSg=
Subject key identifier:   C1:10:16:B5:9E:95:09:B5:74:44:FA:E4:1F:7E:F4:D2:7D:D5:C8:EA
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       36A4C91033BDECCF32DBD04480A6905B92A51D14
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e302e302f32302d3230203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:50 +0000
ROA not before:           Wed 03 Apr 2024 18:25:50 +0000
ROA not after:            Wed 02 Apr 2025 18:30:50 +0000
asID:                     262713
IP address blocks:        186.208.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a4:c9:10:33:bd:ec:cf:32:db:d0:44:80:a6:90:5b:92:a5:1d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:50 2024 GMT
            Not After : Apr  2 18:30:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:e4:39:fd:77:bf:8a:c2:e7:0b:16:e8:89:
                    ca:2d:19:fd:af:f6:c9:51:f3:67:40:13:f4:73:c6:
                    c5:52:fc:c4:99:af:86:27:43:62:45:d4:6f:59:e8:
                    c5:b6:42:9d:03:52:ed:f7:7e:ef:f1:c8:9d:a4:5f:
                    3b:9d:c7:ec:25:92:3f:f7:2c:23:47:49:bf:d3:61:
                    28:ef:81:fb:69:15:1c:9b:3a:d2:8d:84:5b:f0:f6:
                    d5:79:fb:07:0c:b5:0f:d2:dd:2b:d3:62:a3:9f:e6:
                    e6:ba:f0:9b:bc:63:25:3c:8b:d6:c0:64:ee:5e:35:
                    6d:48:7a:c2:af:9a:0b:00:dd:5b:23:09:a7:d7:5c:
                    b6:b2:3e:5a:a1:b9:67:f4:16:10:b0:02:d5:b3:b8:
                    9e:55:a5:f1:4d:3e:18:2d:3f:e3:0f:dc:73:50:14:
                    8a:3f:32:8c:70:f1:87:2a:e8:4d:61:9e:e3:56:00:
                    95:6e:d4:9b:ed:ec:99:ca:fe:9a:0f:6d:65:c3:08:
                    68:2e:ef:78:e6:4e:53:5d:6b:fc:a6:62:bd:f4:0c:
                    b9:0e:fb:3b:d7:9c:15:dc:51:69:2e:6f:aa:d6:df:
                    9d:fd:9d:f7:72:39:33:b8:80:9f:9e:19:dc:27:07:
                    38:0d:3a:c1:4f:82:3d:76:a2:32:93:b5:57:29:af:
                    49:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:10:16:B5:9E:95:09:B5:74:44:FA:E4:1F:7E:F4:D2:7D:D5:C8:EA
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e302e302f32302d3230203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:93:eb:bd:54:2a:8b:f7:37:78:a8:58:f8:e2:c7:3e:47:9a:
         ce:97:36:59:db:db:56:d1:ca:bd:56:bc:bb:51:72:4a:e9:e6:
         19:68:79:45:17:f1:67:d3:a4:99:45:a4:2a:43:6b:10:8c:a1:
         5f:8f:6f:c3:0f:c0:a9:2e:db:6a:d7:b7:18:3d:3b:cb:ee:07:
         c5:9c:81:79:d7:d4:8a:53:33:f5:c3:aa:bf:cc:59:10:2b:c6:
         0d:72:90:f8:63:dd:f6:ae:4e:55:f4:0c:6a:8c:3d:3e:78:bb:
         34:77:8e:e0:d4:88:0c:b3:a0:f7:c7:6c:10:08:61:c0:14:80:
         af:7c:5a:47:18:8c:a6:86:00:10:aa:7e:88:68:a3:e1:15:ac:
         c5:cc:8c:31:6a:69:ea:c3:8d:b8:16:4f:cf:62:67:a8:57:39:
         e4:b4:8a:23:2f:71:c2:28:b5:b0:75:44:81:03:4a:78:45:c6:
         fc:18:23:8c:b2:4f:e8:a0:30:3d:11:d7:7c:31:d7:41:3c:f2:
         c0:63:e9:fe:e8:f6:33:c3:0f:ae:0c:b5:ac:c9:28:03:20:87:
         2f:1f:61:a1:39:15:82:9d:ee:aa:f3:e8:11:8c:74:ae:aa:4f:
         0e:cb:ba:a0:33:2e:01:22:69:b2:c2:49:af:65:36:16:e8:9a:
         f3:d0:a9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:33 2024 by rpki-client on console-ams.rpki-client.org