Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e332e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e332e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          KYj63XyzhwJL1ncs+e/FhQ5KGocycRdXbBzmWbVoKrY=
Subject key identifier:   C0:3F:22:61:66:A6:87:59:7A:28:2F:80:45:BF:96:8F:FA:A8:ED:FC
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       594EC5E924D6E46410AD04E884379E4109F78EA5
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e332e302f32342d3234203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:53 +0000
ROA not before:           Wed 03 Apr 2024 18:25:53 +0000
ROA not after:            Wed 02 Apr 2025 18:30:53 +0000
asID:                     262713
IP address blocks:        186.208.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4e:c5:e9:24:d6:e4:64:10:ad:04:e8:84:37:9e:41:09:f7:8e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:53 2024 GMT
            Not After : Apr  2 18:30:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:57:d1:36:9d:bb:de:79:d0:c2:3b:22:0c:
                    db:2a:13:73:ea:29:f5:86:01:09:a3:bc:e5:8f:d5:
                    1c:b3:d6:96:7a:d3:d3:c5:5b:eb:c2:35:c1:19:06:
                    4d:c1:46:20:48:4a:96:de:07:fe:b9:99:93:70:ea:
                    0f:99:f6:0e:29:57:e7:6e:b4:82:d7:ee:77:5e:3b:
                    c8:88:2b:49:e4:a7:df:04:24:b0:53:7a:9e:1b:11:
                    8d:d9:d6:d0:9c:90:75:c8:85:ec:6e:4c:33:49:80:
                    8b:e7:df:bb:69:a9:ca:7f:3b:30:44:5f:04:1f:73:
                    a7:e6:0c:f7:c9:7c:03:af:2b:88:d0:50:c2:45:af:
                    f9:12:27:5e:17:2c:ff:bd:04:88:eb:8b:4a:9d:b0:
                    0d:52:55:11:f7:4f:ac:7d:9d:88:8d:e9:06:22:9b:
                    ef:e7:cd:3b:63:e8:18:e0:2f:11:29:20:81:4a:83:
                    43:45:ea:b5:20:8e:44:fd:3d:f3:d2:85:89:b5:15:
                    e4:ba:b7:f0:74:2f:3e:52:13:65:0e:2c:0d:2b:31:
                    4e:1d:72:99:24:a3:fd:c4:8d:2f:82:ef:7c:51:2a:
                    3b:6b:12:fc:27:0a:f9:4f:a4:bf:f3:0d:df:33:99:
                    61:17:37:3d:e8:fb:3b:4b:8a:9f:2a:ac:a7:68:45:
                    34:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3F:22:61:66:A6:87:59:7A:28:2F:80:45:BF:96:8F:FA:A8:ED:FC
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e332e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:6e:e1:ee:2d:76:f3:ff:2e:7c:84:e9:91:66:86:39:3c:66:
         99:1f:2b:90:ff:76:1d:29:37:ac:38:d5:14:be:29:40:ea:ce:
         a7:3f:73:b4:7b:2f:46:7f:ea:19:c1:78:24:8d:c3:0d:88:50:
         4c:9e:c1:27:50:c3:8a:2c:51:2c:de:68:fb:ef:d1:57:10:f6:
         e3:46:d8:53:78:52:c0:54:84:5e:2e:cc:44:a9:42:27:69:1b:
         02:d9:88:a9:8d:c5:25:37:90:a1:0b:66:7f:cf:e6:0a:9e:cb:
         8d:91:7a:b3:7b:73:0c:af:de:59:31:c3:74:04:1e:58:4b:e7:
         e7:f6:94:0d:14:88:30:3f:d3:23:14:52:bd:b0:77:37:d9:1e:
         83:fa:02:35:65:f1:8b:a8:3b:94:d9:9e:29:3e:69:0c:19:70:
         71:c9:45:a4:56:20:2e:8e:f2:a2:b4:32:f3:7b:44:fe:bd:fc:
         74:e4:9a:52:80:12:f0:9f:93:38:11:2e:20:6c:06:45:58:fb:
         85:a2:11:c8:19:25:d8:c2:6c:17:b7:18:ac:0c:ea:2f:ab:18:
         44:5c:9f:40:ec:17:72:34:5e:1f:15:d9:fb:a6:56:77:22:52:
         6a:6e:09:78:62:07:dc:ce:43:97:26:b7:11:ce:1a:b1:3f:65:
         ea:85:dc:30
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUWU7F6STW5GQQrQTohDeeQQn3jqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzMENBOTgwOTFEQTg2QjNFNkQxOEZEMjA3RjFGQjY1
ODg1MjQ2MzAeFw0yNDA0MDMxODI1NTNaFw0yNTA0MDIxODMwNTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg0QjU3RDEzNjlEQkJERTc5
RDBDMjNCMjIwQ0RCMkExMzczRUEyOUY1ODYwMTA5QTNCQ0U1OEZENTFDQjNENjk2
N0FEM0QzQzU1QkVCQzIzNUMxMTkwNjREQzE0NjIwNDg0QTk2REUwN0ZFQjk5OTkz
NzBFQTBGOTlGNjBFMjk1N0U3NkVCNDgyRDdFRTc3NUUzQkM4ODgyQjQ5RTRBN0RG
MDQyNEIwNTM3QTlFMUIxMThERDlENkQwOUM5MDc1Qzg4NUVDNkU0QzMzNDk4MDhC
RTdERkJCNjlBOUNBN0YzQjMwNDQ1RjA0MUY3M0E3RTYwQ0Y3Qzk3QzAzQUYyQjg4
RDA1MEMyNDVBRkY5MTIyNzVFMTcyQ0ZGQkQwNDg4RUI4QjRBOURCMDBENTI1NTEx
Rjc0RkFDN0Q5RDg4OERFOTA2MjI5QkVGRTdDRDNCNjNFODE4RTAyRjExMjkyMDgx
NEE4MzQzNDVFQUI1MjA4RTQ0RkQzREYzRDI4NTg5QjUxNUU0QkFCN0YwNzQyRjNF
NTIxMzY1MEUyQzBEMkIzMTRFMUQ3Mjk5MjRBM0ZEQzQ4RDJGODJFRjdDNTEyQTNC
NkIxMkZDMjcwQUY5NEZBNEJGRjMwRERGMzM5OTYxMTczNzNERThGQjNCNEI4QTlG
MkFBQ0E3Njg0NTM0N0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyEtX0Tadu9550MI7IgzbKhNz6in1hgEJo7zlj9Ucs9aWetPTxVvr
wjXBGQZNwUYgSEqW3gf+uZmTcOoPmfYOKVfnbrSC1+53XjvIiCtJ5KffBCSwU3qe
GxGN2dbQnJB1yIXsbkwzSYCL59+7aanKfzswRF8EH3On5gz3yXwDryuI0FDCRa/5
EideFyz/vQSI64tKnbANUlUR90+sfZ2IjekGIpvv5807Y+gY4C8RKSCBSoNDReq1
II5E/T3z0oWJtRXkurfwdC8+UhNlDiwNKzFOHXKZJKP9xI0vgu98USo7axL8Jwr5
T6S/8w3fM5lhFzc96Ps7S4qfKqynaEU0fwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FMA/ImFmpodZeigvgEW/lo/6qO38MB8GA1UdIwQYMBaAFD8wypgJHahrPm0Y/SB/
H7ZYhSRjMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdON2lUVDRxRzU0b3Jh
U2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzEvM0YzMENBOTgwOTFEQTg2
QjNFNkQxOEZEMjA3RjFGQjY1ODg1MjQ2My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zRjMwQ0E5ODA5MURBODZCM0U2RDE4RkQyMDdGMUZCNjU4ODUy
NDYzLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TjdpVFQ0cUc1NG9yYVNjdGU4
MWNrVlFZOHFNYXdCMnBGMzFYNTVFNlg5MS8xLzMxMzgzNjJlMzIzMDM4MmUzMzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM3MzEzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALrQ
AzANBgkqhkiG9w0BAQsFAAOCAQEAXG7h7i128/8ufITpkWaGOTxmmR8rkP92HSk3
rDjVFL4pQOrOpz9ztHsvRn/qGcF4JI3DDYhQTJ7BJ1DDiixRLN5o++/RVxD240bY
U3hSwFSEXi7MRKlCJ2kbAtmIqY3FJTeQoQtmf8/mCp7LjZF6s3tzDK/eWTHDdAQe
WEvn5/aUDRSIMD/TIxRSvbB3N9keg/oCNWXxi6g7lNmeKT5pDBlwcclFpFYgLo7y
orQy83tE/r38dOSaUoAS8J+TOBEuIGwGRVj7haIRyBkl2MJsF7cYrAzqL6sYRFyf
QOwXcjReHxXZ+6ZWdyJSam4JeGIH3M5Dlya3Ec4asT9l6oXcMA==
-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:33 2024 by rpki-client on console-ams.rpki-client.org