Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138362e3233362e302e302f32302d3234203d3e203238313436.roa
File:                     3138362e3233362e302e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          BzN0KSmdZWNzcbiIxOy56gjvSMF7d71eiS/hwFjZIyM=
Subject key identifier:   9E:24:42:B4:D8:66:7E:62:8D:BE:EF:AA:08:54:C3:9E:92:5B:63:33
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       0D534E90C70C565562A1223F21DBCD2484B95F7F
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138362e3233362e302e302f32302d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:46 +0000
ROA not before:           Wed 21 Dec 2022 17:11:46 +0000
ROA not after:            Wed 20 Dec 2023 17:16:46 +0000
asID:                     28146
IP address blocks:        186.236.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:53:4e:90:c7:0c:56:55:62:a1:22:3f:21:db:cd:24:84:b9:5f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:46 2022 GMT
            Not After : Dec 20 17:16:46 2023 GMT
        Subject: CN=9E2442B4D8667E628DBEEFAA0854C39E925B6333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bd:0d:a5:c7:b7:08:d9:20:c1:a0:da:52:43:
                    d3:8b:ec:ba:bd:d4:a2:8c:ee:13:29:8e:85:de:81:
                    af:c8:d2:e4:84:1f:b4:c7:d5:23:ab:0f:91:73:3e:
                    76:5b:8d:ef:49:4c:ba:07:23:1c:15:45:e0:b7:aa:
                    54:f1:8d:33:ea:e2:1a:c5:8d:1e:5f:89:60:5b:1f:
                    b4:07:1b:08:e8:79:73:1a:31:92:f3:b8:91:d3:a0:
                    e5:3f:e5:5d:c3:f9:eb:c6:cd:bb:77:d9:ec:20:0d:
                    3f:3f:b5:ed:b9:ec:1d:3e:c3:4c:40:96:76:f6:c6:
                    b7:5f:87:dc:01:49:f4:8c:c2:55:3a:ed:5f:cf:9b:
                    7e:f6:77:65:9b:75:e8:dd:23:1c:eb:2a:c3:e0:07:
                    2d:b8:7e:dd:8c:4a:1c:a7:fd:07:99:5c:a1:a1:9f:
                    20:2a:c6:78:69:cf:ad:26:03:7f:19:02:5f:53:fa:
                    51:2c:7d:83:ba:25:60:cf:8d:03:fa:be:41:fd:26:
                    9c:83:8b:fe:03:6a:0a:a4:98:ca:f7:ae:74:df:9e:
                    bf:00:de:6e:23:32:b4:4f:72:d6:00:e4:ed:e8:49:
                    10:f9:ee:de:67:a1:e8:8c:18:60:04:bc:45:51:d8:
                    1f:e5:de:37:55:93:04:4f:90:02:54:82:30:ee:ee:
                    32:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:24:42:B4:D8:66:7E:62:8D:BE:EF:AA:08:54:C3:9E:92:5B:63:33
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138362e3233362e302e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:cc:43:d4:5e:b2:70:7e:d7:7d:30:a9:0d:82:05:1f:f4:df:
         fe:00:3e:50:d9:c2:9b:2f:9e:1f:aa:dc:38:d8:f6:52:2f:6f:
         e2:89:16:7f:21:73:4f:99:29:ad:1d:ae:66:94:79:fa:43:7b:
         79:f4:aa:be:0d:2b:03:52:14:bd:2f:de:9a:b1:3b:08:74:3b:
         97:96:1a:92:06:44:3e:aa:1b:5f:eb:41:04:34:e0:73:fa:0a:
         ac:07:e1:a1:49:59:bb:a9:65:8f:ba:ee:75:a2:41:13:92:3d:
         50:77:a8:ae:47:16:de:12:de:aa:49:8c:b8:6c:ac:b9:bd:5c:
         74:37:bb:89:0e:26:33:95:a5:df:48:e8:aa:11:2c:88:15:b0:
         c1:96:b8:ec:e6:dc:26:73:93:5d:ee:81:52:48:37:ce:fc:e4:
         00:59:a9:32:4e:b5:be:ac:60:b4:f4:3e:7d:21:73:7e:eb:b5:
         69:9f:2b:48:da:79:db:22:20:63:b1:7c:80:41:06:d4:5d:a6:
         5a:75:86:89:b2:e0:72:d1:9b:e4:d1:21:36:e0:43:af:b5:60:
         c5:47:70:0e:d0:f4:22:e3:a5:89:f4:4e:42:6e:30:be:9b:0b:
         a4:ec:bd:5b:ce:c1:27:1c:92:b8:f5:99:b3:8b:83:f5:5b:c0:
         24:95:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org