Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31322e302f32322d3232203d3e20323632373133.roa
File:                     3138362e3230382e31322e302f32322d3232203d3e20323632373133.roa (raw, json)
Hash identifier:          Iu/Atzw2YlANa6+tp+fmAt0u0z01qNTRNwIJvOlIJ7s=
Subject key identifier:   67:DB:E5:F6:A1:4A:AD:03:2F:45:92:76:39:FE:C7:46:65:A2:A1:AF
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       35A7CC33378FF449B215248FECF0ECA9D8EA57E2
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31322e302f32322d3232203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:46 +0000
ROA not before:           Wed 03 Apr 2024 18:25:46 +0000
ROA not after:            Wed 02 Apr 2025 18:30:46 +0000
asID:                     262713
IP address blocks:        186.208.12.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a7:cc:33:37:8f:f4:49:b2:15:24:8f:ec:f0:ec:a9:d8:ea:57:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:46 2024 GMT
            Not After : Apr  2 18:30:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:49:74:3f:2c:01:1e:ce:a7:b3:93:34:c1:32:
                    d8:25:e1:5f:6c:a8:4b:77:3e:bb:14:49:12:0b:43:
                    dd:1e:15:5a:63:52:e9:b1:f0:a3:5f:78:8f:66:72:
                    5d:a3:db:e6:16:e9:4f:1f:32:7d:24:d9:d8:a6:b4:
                    c0:51:3b:74:5e:cb:c5:66:02:fe:16:7f:7d:40:92:
                    92:9b:1a:f6:44:26:a1:bb:cc:f0:e0:d4:a8:70:19:
                    9e:5b:af:4f:49:15:ef:8d:3a:de:0f:1c:ab:5c:2d:
                    f7:11:d5:15:91:56:93:80:f9:97:d3:d2:05:54:43:
                    51:ac:b2:76:5a:03:7d:4d:ba:c9:db:91:f4:50:6f:
                    68:8e:52:00:84:09:89:80:e7:27:33:ff:34:eb:a9:
                    ec:04:bc:1f:c8:09:95:a6:a1:3f:30:4b:fe:8c:52:
                    65:52:b2:ac:3e:83:34:bb:80:15:f6:04:49:e4:8c:
                    18:4d:bc:d9:61:56:9b:77:1c:a7:f2:05:74:bb:a6:
                    b5:e6:a5:69:c7:ca:b3:75:a2:a6:2b:e6:21:3a:c4:
                    70:5d:bd:50:80:35:21:7c:d5:18:b1:72:ba:02:72:
                    22:33:c3:78:7b:bf:4a:a9:81:5b:06:ea:f0:c4:1c:
                    90:37:e8:94:c4:d9:94:71:ba:1b:d1:fb:d8:72:82:
                    f7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DB:E5:F6:A1:4A:AD:03:2F:45:92:76:39:FE:C7:46:65:A2:A1:AF
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31322e302f32322d3232203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:6f:d1:77:8a:77:e7:83:58:b3:20:72:59:c6:b2:1a:cf:75:
         51:e9:1e:12:19:53:a5:8d:f7:dc:7c:51:75:e6:3a:03:a5:23:
         77:79:42:15:63:d0:cf:87:b3:61:cf:e8:d2:2a:11:99:63:ce:
         b2:11:a4:20:9e:c7:b9:e6:fc:f7:a1:28:39:a5:f9:fb:c0:32:
         45:03:8e:59:eb:8f:ee:07:a4:05:b8:85:d8:f5:ce:e7:f2:04:
         57:c6:76:ff:c8:96:83:d0:7b:2b:08:89:ce:3c:00:23:0a:53:
         61:a9:15:65:c4:bb:d7:d6:a0:42:ee:e2:8a:ea:cc:fe:7e:c3:
         84:15:f9:ba:d7:14:a7:ee:79:c2:2d:4f:7f:92:22:52:36:a0:
         dd:65:28:69:b4:30:10:d6:ed:2d:e9:bf:12:3d:9b:f1:16:b3:
         be:63:f8:87:83:3f:7c:d0:bd:f2:04:a6:b4:24:41:10:3e:b5:
         4f:67:09:1c:80:53:85:61:fa:d0:8f:fa:ec:d6:f3:9c:8d:75:
         6f:a2:43:27:70:1d:94:1b:46:d8:bf:c5:3d:6e:ef:00:5b:ec:
         9b:fe:5e:f7:9d:c5:66:f3:9e:c0:50:24:3a:5e:c0:bb:ac:6a:
         06:48:1e:e0:79:d6:15:58:96:14:2f:37:09:52:7c:af:1d:ef:
         07:57:eb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 18:20:04 2024 by rpki-client on console-fra.rpki-client.org