Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31352e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e31352e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          xURaCQakZ/WhRDuD4yCvHAo0Glx1N0GWDjzwAyRS2GI=
Subject key identifier:   1C:DA:F8:53:35:70:56:C8:69:D6:D9:58:F8:86:5E:AB:B3:67:22:97
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       4BBC25BF3184ADCCD1E50BA59E3905AEC69DE353
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31352e302f32342d3234203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:47 +0000
ROA not before:           Wed 03 Apr 2024 18:25:47 +0000
ROA not after:            Wed 02 Apr 2025 18:30:47 +0000
asID:                     262713
IP address blocks:        186.208.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bc:25:bf:31:84:ad:cc:d1:e5:0b:a5:9e:39:05:ae:c6:9d:e3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:47 2024 GMT
            Not After : Apr  2 18:30:47 2025 GMT
        Subject: CN=3082010A0282010100CD1D2EDC3D665555ED039C6B8F336AF9EDAAE25706D95566584F2C4A8E636B41FB9E488BFCCE0D57F95B755FAE300E58583216E714B9CE9EB0B33090BB84370098D0B0B93A03B3C01A81AECF455332C319FF37549C274C508AA771138D71A76F3DAA1D167CF262DD7E128A7020321BDA644B6AC88EC93E962BAF7FFDE247C22E688A982701A77CE61640034E9541E2635027629FF692A2797B33D54937914682715D89CC03EECCF274BA929A3E79D252E7134204CE1E0560987550F86FE39C86B6DA34BC4FD95BC90BA63BBD528A24944EAB9A7A9501519461F75A75C8C1ED55C31F10A458A11E8E4755CB3A38FBD1090507F1F4F72F89729EB41C7FFF979DB50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:2e:dc:3d:66:55:55:ed:03:9c:6b:8f:33:
                    6a:f9:ed:aa:e2:57:06:d9:55:66:58:4f:2c:4a:8e:
                    63:6b:41:fb:9e:48:8b:fc:ce:0d:57:f9:5b:75:5f:
                    ae:30:0e:58:58:32:16:e7:14:b9:ce:9e:b0:b3:30:
                    90:bb:84:37:00:98:d0:b0:b9:3a:03:b3:c0:1a:81:
                    ae:cf:45:53:32:c3:19:ff:37:54:9c:27:4c:50:8a:
                    a7:71:13:8d:71:a7:6f:3d:aa:1d:16:7c:f2:62:dd:
                    7e:12:8a:70:20:32:1b:da:64:4b:6a:c8:8e:c9:3e:
                    96:2b:af:7f:fd:e2:47:c2:2e:68:8a:98:27:01:a7:
                    7c:e6:16:40:03:4e:95:41:e2:63:50:27:62:9f:f6:
                    92:a2:79:7b:33:d5:49:37:91:46:82:71:5d:89:cc:
                    03:ee:cc:f2:74:ba:92:9a:3e:79:d2:52:e7:13:42:
                    04:ce:1e:05:60:98:75:50:f8:6f:e3:9c:86:b6:da:
                    34:bc:4f:d9:5b:c9:0b:a6:3b:bd:52:8a:24:94:4e:
                    ab:9a:7a:95:01:51:94:61:f7:5a:75:c8:c1:ed:55:
                    c3:1f:10:a4:58:a1:1e:8e:47:55:cb:3a:38:fb:d1:
                    09:05:07:f1:f4:f7:2f:89:72:9e:b4:1c:7f:ff:97:
                    9d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DA:F8:53:35:70:56:C8:69:D6:D9:58:F8:86:5E:AB:B3:67:22:97
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31352e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:14:50:d0:f4:4c:ae:4c:80:c3:54:1a:95:2b:5a:2e:37:24:
         65:c9:56:f3:5e:85:0c:e6:c5:26:bf:c0:9e:d7:95:30:cc:03:
         3d:2d:71:8f:cc:99:95:4a:32:c0:b0:f5:34:f9:f1:fb:a5:49:
         79:f8:37:46:68:49:f1:11:90:89:0e:f6:62:92:9a:2d:70:17:
         41:e4:ba:90:7e:2a:6f:c6:db:53:3c:df:6f:4e:1c:8d:b4:8a:
         42:3a:21:9e:79:05:a9:9c:08:c4:a8:99:e3:d4:77:bd:d7:4f:
         67:a4:9f:86:2b:d5:40:96:3d:85:96:70:f1:1a:e7:ec:fc:c0:
         76:1b:7e:6f:34:b7:4d:c1:d9:9a:53:3b:d8:f0:7f:37:ee:12:
         35:b5:b8:f6:db:0e:ae:7c:b4:89:ea:35:c9:08:f1:d8:c7:f5:
         dd:82:98:79:bf:28:85:a9:c5:88:2c:b2:6a:75:53:dd:90:83:
         d2:a9:f7:7e:b5:f0:7d:91:74:02:6a:a9:fb:90:5c:51:4c:fe:
         ae:e0:ef:ed:71:68:7b:d8:d0:3a:1c:18:60:61:2f:16:f1:44:
         14:8e:53:4a:08:ac:3d:0d:ef:fd:6a:55:fd:af:30:5a:02:cd:
         51:36:1a:f8:33:28:0c:b5:8f:5e:53:80:97:72:be:f2:57:06:
         c9:f8:24:21
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUS7wlvzGErczR5QulnjkFrsad41MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzMENBOTgwOTFEQTg2QjNFNkQxOEZEMjA3RjFGQjY1
ODg1MjQ2MzAeFw0yNDA0MDMxODI1NDdaFw0yNTA0MDIxODMwNDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0QxRDJFREMzRDY2NTU1NUVE
MDM5QzZCOEYzMzZBRjlFREFBRTI1NzA2RDk1NTY2NTg0RjJDNEE4RTYzNkI0MUZC
OUU0ODhCRkNDRTBENTdGOTVCNzU1RkFFMzAwRTU4NTgzMjE2RTcxNEI5Q0U5RUIw
QjMzMDkwQkI4NDM3MDA5OEQwQjBCOTNBMDNCM0MwMUE4MUFFQ0Y0NTUzMzJDMzE5
RkYzNzU0OUMyNzRDNTA4QUE3NzExMzhENzFBNzZGM0RBQTFEMTY3Q0YyNjJERDdF
MTI4QTcwMjAzMjFCREE2NDRCNkFDODhFQzkzRTk2MkJBRjdGRkRFMjQ3QzIyRTY4
OEE5ODI3MDFBNzdDRTYxNjQwMDM0RTk1NDFFMjYzNTAyNzYyOUZGNjkyQTI3OTdC
MzNENTQ5Mzc5MTQ2ODI3MTVEODlDQzAzRUVDQ0YyNzRCQTkyOUEzRTc5RDI1MkU3
MTM0MjA0Q0UxRTA1NjA5ODc1NTBGODZGRTM5Qzg2QjZEQTM0QkM0RkQ5NUJDOTBC
QTYzQkJENTI4QTI0OTQ0RUFCOUE3QTk1MDE1MTk0NjFGNzVBNzVDOEMxRUQ1NUMz
MUYxMEE0NThBMTFFOEU0NzU1Q0IzQTM4RkJEMTA5MDUwN0YxRjRGNzJGODk3MjlF
QjQxQzdGRkY5NzlEQjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzR0u3D1mVVXtA5xrjzNq+e2q4lcG2VVmWE8sSo5ja0H7nkiL/M4N
V/lbdV+uMA5YWDIW5xS5zp6wszCQu4Q3AJjQsLk6A7PAGoGuz0VTMsMZ/zdUnCdM
UIqncRONcadvPaodFnzyYt1+EopwIDIb2mRLasiOyT6WK69//eJHwi5oipgnAad8
5hZAA06VQeJjUCdin/aSonl7M9VJN5FGgnFdicwD7szydLqSmj550lLnE0IEzh4F
YJh1UPhv45yGtto0vE/ZW8kLpju9UooklE6rmnqVAVGUYfdadcjB7VXDHxCkWKEe
jkdVyzo4+9EJBQfx9PcviXKetBx//5edtQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FBza+FM1cFbIadbZWPiGXquzZyKXMB8GA1UdIwQYMBaAFD8wypgJHahrPm0Y/SB/
H7ZYhSRjMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdON2lUVDRxRzU0b3Jh
U2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzEvM0YzMENBOTgwOTFEQTg2
QjNFNkQxOEZEMjA3RjFGQjY1ODg1MjQ2My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zRjMwQ0E5ODA5MURBODZCM0U2RDE4RkQyMDdGMUZCNjU4ODUy
NDYzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TjdpVFQ0cUc1NG9yYVNjdGU4
MWNrVlFZOHFNYXdCMnBGMzFYNTVFNlg5MS8xLzMxMzgzNjJlMzIzMDM4MmUzMTM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzczMTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
utAPMA0GCSqGSIb3DQEBCwUAA4IBAQCCFFDQ9EyuTIDDVBqVK1ouNyRlyVbzXoUM
5sUmv8Ce15UwzAM9LXGPzJmVSjLAsPU0+fH7pUl5+DdGaEnxEZCJDvZikpotcBdB
5LqQfipvxttTPN9vThyNtIpCOiGeeQWpnAjEqJnj1He9109npJ+GK9VAlj2FlnDx
Gufs/MB2G35vNLdNwdmaUzvY8H837hI1tbj22w6ufLSJ6jXJCPHYx/Xdgph5vyiF
qcWILLJqdVPdkIPSqfd+tfB9kXQCaqn7kFxRTP6u4O/tcWh72NA6HBhgYS8W8UQU
jlNKCKw9De/9alX9rzBaAs1RNhr4MygMtY9eU4CXcr7yVwbJ+CQh
-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:33 2024 by rpki-client on console-ams.rpki-client.org