Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/3138362e3233362e3232342e302f32302d3234203d3e203238323139.roa
File:                     3138362e3233362e3232342e302f32302d3234203d3e203238323139.roa (raw, json)
Hash identifier:          QzSIMsboHIDRxh3olsmvoKqcS8EAosfRRFITlkw92hQ=
Subject key identifier:   7C:AD:B4:C5:F2:00:8E:15:63:D7:30:06:1C:FD:95:65:52:2D:CD:13
Certificate issuer:       /CN=D3FE378BD4E7B3E9AF1C47D245624178DC4E9709
Certificate serial:       4D629936213EA2C734E9B69A5047C56BF5D1533A
Authority key identifier: D3:FE:37:8B:D4:E7:B3:E9:AF:1C:47:D2:45:62:41:78:DC:4E:97:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/3138362e3233362e3232342e302f32302d3234203d3e203238323139.roa
Signing time:             Fri 08 Dec 2023 13:39:55 +0000
ROA not before:           Fri 08 Dec 2023 13:34:55 +0000
ROA not after:            Fri 06 Dec 2024 13:39:55 +0000
asID:                     28219
IP address blocks:        186.236.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:62:99:36:21:3e:a2:c7:34:e9:b6:9a:50:47:c5:6b:f5:d1:53:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FE378BD4E7B3E9AF1C47D245624178DC4E9709
        Validity
            Not Before: Dec  8 13:34:55 2023 GMT
            Not After : Dec  6 13:39:55 2024 GMT
        Subject: CN=7CADB4C5F2008E1563D730061CFD9565522DCD13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:55:2c:71:7c:5b:b6:3f:d2:2e:0f:a0:06:f9:
                    c6:d3:7e:49:3b:2d:a1:f4:6b:1e:72:05:49:5f:bc:
                    c6:c1:cb:df:26:06:cd:aa:b0:bf:7f:2d:a4:f9:7e:
                    ec:4b:72:9a:16:06:3f:fe:80:b0:d3:d7:26:3b:2f:
                    b2:78:d7:a2:f1:26:a8:6d:37:aa:ec:fb:97:91:e0:
                    2b:f6:d4:08:d0:e6:6b:72:6f:39:42:96:e6:0d:ce:
                    fb:8e:d8:d1:8b:26:ae:55:8c:c9:ff:7d:f9:05:c6:
                    d6:56:97:d1:cb:89:62:e9:d3:c2:46:61:b6:14:9b:
                    15:9d:58:f5:cc:01:4a:60:ac:17:1c:03:1d:86:59:
                    2d:39:e9:83:60:64:fe:f1:c0:1b:47:82:47:1a:55:
                    e9:47:e9:3d:c3:44:6d:68:bc:9b:91:86:1d:10:5d:
                    47:77:4e:b3:e1:28:2d:a5:c6:3a:bb:20:a3:50:7f:
                    c0:2f:82:50:9e:a5:60:11:3f:6b:29:2f:71:4a:f4:
                    1e:1f:cb:5c:b6:46:9f:46:d5:7e:80:2c:86:d7:1b:
                    96:73:db:2d:8e:30:b9:7e:67:6c:78:df:92:cd:84:
                    d3:89:bb:67:3d:cb:d5:2b:f0:56:53:ac:18:25:e3:
                    81:a8:f3:a0:f4:91:74:cc:59:32:d9:36:a1:e3:b9:
                    32:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AD:B4:C5:F2:00:8E:15:63:D7:30:06:1C:FD:95:65:52:2D:CD:13
            X509v3 Authority Key Identifier:
                keyid:D3:FE:37:8B:D4:E7:B3:E9:AF:1C:47:D2:45:62:41:78:DC:4E:97:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D3FE378BD4E7B3E9AF1C47D245624178DC4E9709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Uf7qJ1QVp8HdoF7b6UnPR25C7gf3hzcBFNEH3d44Cdn/0/3138362e3233362e3232342e302f32302d3234203d3e203238323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:f9:4a:7c:6b:2b:38:d3:8f:8d:42:50:f2:af:b6:70:54:0c:
         8e:43:ba:e5:56:9d:ab:6d:e8:d9:a3:db:e7:24:25:c8:d2:98:
         f5:b5:6d:c6:da:d6:9c:dc:1f:05:22:e4:e1:d1:68:bc:3e:dd:
         b5:4f:c3:31:b0:6d:2a:44:07:4e:40:8b:c6:07:60:b8:a3:38:
         b2:25:a2:2b:3b:c3:2b:1a:5e:4c:ae:b9:16:4a:30:2e:de:19:
         00:4a:5b:2e:ef:8b:17:d4:d3:43:3f:32:5a:cc:e8:74:b0:a3:
         0e:79:66:2d:44:6a:0e:b4:2e:30:a7:ce:27:db:3a:98:8c:bc:
         6b:da:e2:2a:69:2d:78:39:4e:36:6c:a7:07:51:a0:27:3e:a3:
         53:15:2b:61:8b:76:53:14:98:66:6e:e0:20:ee:e5:74:74:68:
         89:a3:3e:96:af:e0:72:d9:bd:45:01:83:0f:16:d6:98:90:f0:
         fb:09:71:2f:4d:0a:19:a6:63:d1:50:e2:5a:60:a3:9e:50:59:
         0c:cf:34:24:d3:aa:05:42:a0:4a:03:40:aa:ba:fd:0a:cb:95:
         bd:7f:ae:91:ef:aa:aa:35:f1:e0:e9:a7:96:2a:93:7f:f2:d9:
         54:6a:b8:6e:cc:e4:1b:45:b1:0e:90:ad:83:e7:a4:9e:1f:93:
         8c:c2:7d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-ams.rpki-client.org