Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31322e302f32332d3233203d3e20323632373133.roa
File:                     3138362e3230382e31322e302f32332d3233203d3e20323632373133.roa (raw, json)
Hash identifier:          czKAw7nacoZ+zSMC3wbeL3FoVBNWhRujSVbdu6ZkUNA=
Subject key identifier:   43:80:46:C0:46:15:3A:EC:2A:42:7D:0E:73:7D:BD:FD:32:61:3A:6C
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       7FAAEEC959D781F72797DDE66F4595AB68A37F2F
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31322e302f32332d3233203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     262713
IP address blocks:        186.208.12.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:aa:ee:c9:59:d7:81:f7:27:97:dd:e6:6f:45:95:ab:68:a3:7f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:84:16:25:53:fe:69:7b:bc:77:86:57:bd:
                    e1:37:f2:06:0d:f6:dc:7d:04:c3:a5:54:f0:91:e6:
                    9c:b7:c6:6b:51:ec:da:67:e0:72:ce:18:23:e4:b4:
                    35:8c:23:12:85:77:bf:ce:85:83:66:7a:f4:bc:49:
                    e0:66:1f:b4:ac:23:7e:ad:f6:ef:07:71:28:9b:8c:
                    6c:3d:59:b6:b3:c7:de:a0:90:dd:67:ca:d9:f0:af:
                    f0:16:46:ce:0a:7b:f7:4e:2e:a8:45:04:14:e4:3c:
                    b9:6a:81:89:1c:99:8d:4e:d3:7f:14:56:58:b7:53:
                    f2:0c:7e:8f:58:9f:99:02:7e:d8:08:fc:8c:08:a3:
                    2b:6f:f5:08:33:5d:a5:0e:da:ad:1a:17:05:c4:8c:
                    91:53:07:43:98:00:d6:e5:27:b3:0b:a7:5c:0c:0f:
                    ed:32:a5:b0:c5:b4:d9:26:11:0c:3d:49:0b:15:25:
                    51:3b:0c:7a:7b:f9:e2:07:52:d6:51:ec:17:12:3e:
                    f2:e2:bf:ae:e5:77:09:0f:18:eb:be:57:a5:be:78:
                    67:20:f7:e9:9d:ca:89:d2:c4:34:3d:85:08:82:e1:
                    c3:b9:29:f8:e2:03:63:7c:8b:1f:4b:72:2b:a1:9f:
                    06:c6:04:30:73:e6:b2:41:5e:86:42:32:82:62:0a:
                    83:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:80:46:C0:46:15:3A:EC:2A:42:7D:0E:73:7D:BD:FD:32:61:3A:6C
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31322e302f32332d3233203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:8a:e2:9a:2b:8d:46:21:7d:2d:32:6d:d5:be:e1:7e:2e:af:
         47:34:ed:7f:b7:68:c3:47:aa:f2:c5:57:f2:ba:ee:e0:c2:12:
         67:c0:dd:f0:f0:2b:7f:5d:0a:f1:72:a2:d5:0c:0a:f1:bb:4b:
         a0:db:4e:96:ee:ca:75:9b:f9:7b:17:a5:04:e1:7f:79:05:a6:
         b6:d0:ef:e7:02:ae:46:9f:11:e6:64:95:bd:3e:4f:77:dc:64:
         f3:4b:01:e0:08:6f:b1:00:29:2a:7f:a3:c7:8c:84:cb:c5:0e:
         70:51:9f:54:23:eb:b9:a0:4e:9c:f7:1f:b9:6a:9c:de:0f:d9:
         b9:e6:48:74:27:a2:45:f5:8e:82:1e:de:8b:1c:f1:dd:54:d6:
         a6:71:26:4e:77:d6:25:b5:ec:eb:b1:af:2a:fe:3e:cb:bf:53:
         cf:4a:53:e7:d0:e3:0c:01:a5:de:43:e8:9e:4b:1d:c8:e6:30:
         4f:8a:7d:86:33:9e:c0:61:bd:d9:71:55:2d:45:8a:7b:4b:9c:
         1e:1a:69:d3:60:61:20:ca:20:80:fd:55:26:4b:f4:46:33:e5:
         3b:21:80:fb:b3:c0:b1:e9:f9:be:a5:0b:87:e5:b6:4c:36:5a:
         3d:ca:4b:93:89:4e:3e:b7:d9:70:71:1a:aa:b4:2f:88:26:ad:
         b9:b2:b1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 18:20:04 2024 by rpki-client on console-fra.rpki-client.org