Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e302e302f32312d3231203d3e20323632373133.roa
File:                     3138362e3230382e302e302f32312d3231203d3e20323632373133.roa (raw, json)
Hash identifier:          ysCU5kb3yXOcpFdhHfyCz40TYiQZaBHsIwahObk84TM=
Subject key identifier:   64:8F:B5:94:66:71:99:19:77:63:F1:D9:9A:76:61:2A:25:DE:D8:3F
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       3A6347D9C2761FEED5F4E349455A8F622B64F013
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e302e302f32312d3231203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     262713
IP address blocks:        186.208.0.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:63:47:d9:c2:76:1f:ee:d5:f4:e3:49:45:5a:8f:62:2b:64:f0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=3082010A0282010100A8FD5A0D30C234B2D5F241E1E08F59359047E2BAE78A8BAFD933A9B51E4E17C2251DC0B4655C81744A9C497A11C8C49F6EAACFED22190C4EF172639250CB2F3775B2CDC677478E8CAB72FEB9B861BE5B0598DFF00755D415CBD8168159A3D40C30C8F59C29CDC795781615E4F486A2436585F6D22A22A8098F9A9BB11A28267B63998A83098E2BF79C12964EEE378B2E09144E65E48A4994637B09A21C47DB029EC2E236B750AD2129393B2649E81F4366A46B1EE97918AA776B31947F4A5EDF6EBD6E7D1FF18064BAB0C35C30C6DA9176D937FFF01543C98EA7785FCDB2D1EAAC981082930366C9A1AAA4D94CF74F10C888CDAB7B401E18395F83B64B2D75A70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:5a:0d:30:c2:34:b2:d5:f2:41:e1:e0:8f:
                    59:35:90:47:e2:ba:e7:8a:8b:af:d9:33:a9:b5:1e:
                    4e:17:c2:25:1d:c0:b4:65:5c:81:74:4a:9c:49:7a:
                    11:c8:c4:9f:6e:aa:cf:ed:22:19:0c:4e:f1:72:63:
                    92:50:cb:2f:37:75:b2:cd:c6:77:47:8e:8c:ab:72:
                    fe:b9:b8:61:be:5b:05:98:df:f0:07:55:d4:15:cb:
                    d8:16:81:59:a3:d4:0c:30:c8:f5:9c:29:cd:c7:95:
                    78:16:15:e4:f4:86:a2:43:65:85:f6:d2:2a:22:a8:
                    09:8f:9a:9b:b1:1a:28:26:7b:63:99:8a:83:09:8e:
                    2b:f7:9c:12:96:4e:ee:37:8b:2e:09:14:4e:65:e4:
                    8a:49:94:63:7b:09:a2:1c:47:db:02:9e:c2:e2:36:
                    b7:50:ad:21:29:39:3b:26:49:e8:1f:43:66:a4:6b:
                    1e:e9:79:18:aa:77:6b:31:94:7f:4a:5e:df:6e:bd:
                    6e:7d:1f:f1:80:64:ba:b0:c3:5c:30:c6:da:91:76:
                    d9:37:ff:f0:15:43:c9:8e:a7:78:5f:cd:b2:d1:ea:
                    ac:98:10:82:93:03:66:c9:a1:aa:a4:d9:4c:f7:4f:
                    10:c8:88:cd:ab:7b:40:1e:18:39:5f:83:b6:4b:2d:
                    75:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8F:B5:94:66:71:99:19:77:63:F1:D9:9A:76:61:2A:25:DE:D8:3F
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e302e302f32312d3231203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:c8:70:dd:b7:e5:2d:06:0d:7d:2a:16:14:73:5a:10:2a:e3:
         68:13:5d:52:ad:f8:10:ea:d2:a4:9b:e0:49:4d:79:e3:de:50:
         fc:e0:21:b7:c6:21:c8:42:ad:c6:3d:75:a0:6b:fb:4f:0c:80:
         c2:8b:c2:03:31:09:cc:d5:eb:43:58:94:7c:dd:e2:44:4b:78:
         39:a4:48:be:cb:ea:6a:9d:f8:3d:2c:77:ee:ac:f8:0c:66:0d:
         86:21:48:a7:86:09:cd:6c:03:51:14:cb:f7:06:c1:62:8d:ee:
         3d:2d:ff:4c:dc:af:c0:ac:49:a7:e6:22:f1:bb:1f:f1:81:d1:
         d2:b0:8f:c1:c3:f9:c9:9e:22:26:b2:2d:32:0e:ff:1e:8b:1d:
         12:a3:78:74:0e:e1:ec:d8:4b:42:ef:b1:c7:f3:a0:75:8b:32:
         85:ac:72:e5:15:3f:82:70:57:97:fb:53:5e:c3:8c:d8:0f:d9:
         b3:1e:0e:9c:f4:b4:d8:8f:34:af:45:e4:8e:fe:fa:4e:ab:8a:
         05:fc:56:f9:be:cb:3f:e0:a0:26:f9:21:51:a3:62:4f:fc:14:
         e4:c5:35:68:05:6d:31:74:1c:a6:80:ce:1b:50:50:f7:24:d4:
         f1:42:07:d0:f8:1a:19:02:f6:c9:ca:cb:1d:17:ae:df:de:ef:
         c9:2f:b5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:33 2024 by rpki-client on console-ams.rpki-client.org