Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138362e3235302e38382e302f32322d3234203d3e203238313436.roa
File:                     3138362e3235302e38382e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          y9Y2/HPvwpjiq8pjvxxBkkbE78eBykw7tDqdidHc4K4=
Subject key identifier:   55:2B:CF:B8:EF:61:92:23:2A:91:C3:B1:EC:3C:1C:23:70:39:87:92
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       55921233CC3A0011F385420961E8EFD860ADF351
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138362e3235302e38382e302f32322d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:50 +0000
ROA not before:           Wed 21 Dec 2022 17:11:50 +0000
ROA not after:            Wed 20 Dec 2023 17:16:50 +0000
asID:                     28146
IP address blocks:        186.250.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:92:12:33:cc:3a:00:11:f3:85:42:09:61:e8:ef:d8:60:ad:f3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:50 2022 GMT
            Not After : Dec 20 17:16:50 2023 GMT
        Subject: CN=552BCFB8EF6192232A91C3B1EC3C1C2370398792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:cc:d8:bd:ef:b0:c0:2a:5d:ed:cf:64:d1:
                    7d:32:66:7c:79:44:f0:51:15:70:07:e7:9f:f6:f8:
                    ba:a3:89:73:4e:0b:56:1c:f5:8c:eb:45:2d:b0:db:
                    61:00:73:ac:07:71:a9:3b:0e:3f:e8:26:a2:74:8c:
                    b0:30:6a:31:7d:78:90:28:ba:88:04:ee:fb:95:1c:
                    61:d6:a4:d8:81:1b:9d:46:da:78:6c:ab:bb:f6:09:
                    73:ad:a4:24:9f:4a:b7:8e:c6:3b:ce:52:4d:a5:d1:
                    79:18:f2:2b:13:ab:42:38:7e:d2:48:64:e8:ec:9f:
                    fe:0e:c2:48:9e:26:73:79:de:c6:96:19:cf:24:6b:
                    89:70:bd:97:a2:fa:18:9e:ad:53:71:bc:4c:8b:02:
                    14:ff:50:95:b1:ba:a0:5e:0c:c0:a3:5d:9c:8e:ef:
                    03:08:5b:08:8c:91:ab:6f:bf:8c:b6:0c:7f:aa:8f:
                    d1:d8:f5:c5:16:52:57:dc:c8:d5:c2:c3:32:bb:50:
                    8c:25:2c:15:04:ad:73:c2:09:f4:74:68:c4:6e:0a:
                    a4:51:dd:62:47:00:e5:03:ea:f7:fc:75:c3:f9:75:
                    93:b3:5d:c5:00:af:e3:89:e4:9e:3a:bb:51:7f:bf:
                    05:d9:f5:88:b7:a3:40:ed:c3:56:c8:bb:70:6f:68:
                    b2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2B:CF:B8:EF:61:92:23:2A:91:C3:B1:EC:3C:1C:23:70:39:87:92
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3138362e3235302e38382e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:3b:af:bc:32:01:1f:20:a9:cb:bd:4a:ad:dc:01:34:bf:6b:
         2b:f2:82:2e:3b:0d:b4:0b:5b:d0:91:21:d4:0f:29:53:51:72:
         2a:6c:a8:f4:64:2b:96:3c:f6:c5:b2:6c:94:66:96:d7:61:dc:
         b0:80:16:06:8d:92:9e:f6:9c:d9:fe:dd:84:9f:38:54:7e:18:
         53:91:6b:6f:fa:25:1d:27:d9:a7:0e:b4:b2:b5:ef:13:6f:4f:
         52:43:72:f8:0f:97:9a:42:2e:55:9c:49:1c:e7:00:cf:a4:b3:
         d2:65:5b:23:26:57:e8:8b:7f:57:7b:4c:e9:9a:b8:4b:51:4b:
         f0:96:33:f9:58:57:98:22:5e:76:63:51:3a:04:fc:86:d8:e7:
         e7:66:cb:1f:e2:b9:26:cb:2a:e1:b3:f0:90:1a:4f:94:d2:9b:
         f3:98:41:e1:a4:31:e0:23:96:53:a2:40:64:0a:36:93:b6:b3:
         04:fe:08:27:60:e0:03:28:65:dd:96:e6:94:19:df:69:2e:97:
         69:58:04:57:23:e3:9e:ac:b0:c6:48:67:b6:22:7a:6b:ba:10:
         1f:6e:67:df:94:60:b4:65:f2:28:93:92:e0:c9:74:b5:97:08:
         77:de:12:bf:82:cd:3c:f0:09:c2:91:7e:d9:10:2e:43:17:59:
         6c:70:b9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org