Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31312e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e31312e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          pLqMUMRu6Y7pLIPWeKAd6+IuL8KieW6ygp9xzePrNuM=
Subject key identifier:   C1:E0:CF:43:F1:CB:61:53:5F:C6:CE:35:8B:73:03:DD:FD:B8:FA:F4
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       71760BB0D526571233E2C7AEEE4FF0A5217E4523
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31312e302f32342d3234203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:49 +0000
ROA not before:           Wed 03 Apr 2024 18:25:49 +0000
ROA not after:            Wed 02 Apr 2025 18:30:49 +0000
asID:                     262713
IP address blocks:        186.208.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:76:0b:b0:d5:26:57:12:33:e2:c7:ae:ee:4f:f0:a5:21:7e:45:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:49 2024 GMT
            Not After : Apr  2 18:30:49 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:75:ef:57:b9:42:53:2b:0f:73:a2:a3:ab:c2:
                    e2:3b:07:6c:bd:ae:c7:54:ea:0a:8c:ee:d9:a5:1a:
                    33:4a:10:1e:f4:c2:42:67:a5:96:a5:1b:fa:a0:14:
                    c2:81:b2:2a:8f:a6:ea:2c:d8:f9:77:5d:21:cb:38:
                    82:4c:a8:e8:31:d7:47:18:19:83:43:65:d2:d9:2f:
                    8f:c0:98:7c:b7:57:b7:ec:9e:1c:41:34:f5:71:e5:
                    d4:e9:7f:f3:3a:39:5c:19:b0:cb:d3:dc:9d:84:45:
                    a6:3d:05:93:3b:9f:9d:83:9b:f8:19:5e:3b:01:2f:
                    25:89:aa:5b:13:a1:29:3f:26:7e:af:9e:e6:25:7e:
                    7d:12:c9:1c:ca:6b:eb:74:00:de:08:4b:47:85:11:
                    cd:71:35:29:c5:57:8b:ac:f1:7f:1d:1b:ef:3e:5f:
                    74:fd:bd:a6:6c:14:7d:9a:a3:f4:db:4a:80:61:f5:
                    f9:d1:e8:94:d9:fb:a1:06:25:4f:4f:f7:46:1e:71:
                    ab:50:95:4a:6e:55:29:d9:eb:2b:34:0b:56:c1:9c:
                    18:40:90:5d:4d:08:94:b3:4c:77:53:4e:3a:90:c2:
                    48:e0:18:0c:61:69:94:db:12:9d:37:f1:4b:8f:c5:
                    1c:19:e9:fa:35:57:c8:91:c9:af:87:b4:b8:35:ff:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E0:CF:43:F1:CB:61:53:5F:C6:CE:35:8B:73:03:DD:FD:B8:FA:F4
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31312e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:f7:15:98:30:21:b5:c1:17:40:70:d9:28:65:e4:ea:fa:c0:
         b4:dc:a2:c2:6b:28:db:04:e0:ef:d0:9e:bb:b4:d1:f4:51:65:
         ee:8f:d0:dc:36:2c:b1:14:8f:34:59:a0:6f:ef:cb:49:92:50:
         f6:b6:45:7d:42:ab:4e:0c:b5:89:04:07:68:62:8b:69:1d:4a:
         81:43:10:75:cc:e7:6f:48:ff:16:34:7f:20:02:44:9e:d4:60:
         f2:44:a3:c2:f1:89:b2:72:99:e4:92:7a:16:a8:84:63:9a:12:
         51:b1:9d:89:7f:b9:53:00:05:b5:5b:4d:69:74:ab:a5:a1:71:
         e6:02:a4:9d:32:13:e3:60:9c:6b:94:b5:20:46:b5:b9:ec:80:
         de:ed:dd:98:21:43:e5:c4:a3:90:4a:a0:cf:d0:16:6d:ae:a8:
         94:db:30:73:a8:e1:b7:1d:c3:a3:ca:97:e8:98:41:cb:6c:4e:
         85:41:b4:6c:93:85:3f:8c:74:0c:0a:38:01:ea:28:bf:90:ab:
         b6:65:cf:07:35:07:c8:a4:f5:22:64:40:98:b9:64:5f:99:bd:
         3e:5c:bb:cd:8f:5f:31:0e:05:56:8d:c0:14:82:8e:e2:eb:1c:
         1c:1f:81:25:b6:01:65:eb:ca:94:3d:65:fb:97:56:16:3e:d1:
         41:45:1c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 18:20:04 2024 by rpki-client on console-fra.rpki-client.org