Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/3138362e3233372e3136302e302f32302d3234203d3e20323632383133.roa
File:                     3138362e3233372e3136302e302f32302d3234203d3e20323632383133.roa (raw, json)
Hash identifier:          kgL//VZ4clYUmIq5FvHwZ2LrsiuGUO+QuRf0f5j78rg=
Subject key identifier:   EA:71:E1:B9:29:8C:FD:F6:C9:B6:89:F9:27:9D:62:75:9B:92:7C:3B
Certificate issuer:       /CN=57BD1EC8BC001A3303F83653135622A639BE6663
Certificate serial:       2A8EE5821DE265070F48F516E527490E677166C5
Authority key identifier: 57:BD:1E:C8:BC:00:1A:33:03:F8:36:53:13:56:22:A6:39:BE:66:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BD1EC8BC001A3303F83653135622A639BE6663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/3138362e3233372e3136302e302f32302d3234203d3e20323632383133.roa
Signing time:             Wed 23 Aug 2023 14:00:00 +0000
ROA not before:           Wed 23 Aug 2023 13:55:00 +0000
ROA not after:            Fri 23 Aug 2024 14:00:00 +0000
asID:                     262813
IP address blocks:        186.237.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8e:e5:82:1d:e2:65:07:0f:48:f5:16:e5:27:49:0e:67:71:66:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57BD1EC8BC001A3303F83653135622A639BE6663
        Validity
            Not Before: Aug 23 13:55:00 2023 GMT
            Not After : Aug 23 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:eb:4e:aa:28:0c:1f:75:7b:8a:3d:57:c3:81:
                    b4:a4:d0:ac:b4:8d:fb:11:be:14:96:eb:56:0f:18:
                    13:f2:f3:ca:bb:8c:c8:35:6d:cc:19:14:a4:5e:a9:
                    1a:1e:64:f6:0c:bb:c5:2a:bd:81:25:30:bc:dc:df:
                    c9:0f:2d:d6:ac:51:05:b8:08:e5:af:0f:e3:c7:ac:
                    28:3d:98:5a:2e:a6:16:31:6c:af:25:e3:6c:d8:74:
                    ef:7e:a4:1a:3f:4b:f2:01:9d:31:65:2e:28:ac:2f:
                    56:81:6a:9f:bf:76:f7:25:fa:60:19:93:1c:a0:d9:
                    48:ff:b5:5e:d4:cf:34:92:84:27:20:d3:fd:70:5c:
                    d3:55:87:6f:08:cf:11:80:c6:c1:f2:5a:75:6c:1a:
                    5e:be:86:2a:58:5f:12:38:ab:51:d8:2f:05:75:e8:
                    f5:2e:86:e7:0c:d8:d5:74:fc:5f:d8:ae:f2:b9:67:
                    08:3c:eb:0a:91:e7:34:4f:2c:69:fd:f7:23:ef:5c:
                    2d:21:55:b7:77:39:33:3b:8c:04:94:68:f6:ea:a1:
                    53:a6:44:d0:b7:01:b9:ec:52:b8:81:e0:22:9f:0f:
                    0e:0b:9c:98:3d:7e:91:05:14:1b:d3:95:b3:af:3a:
                    4b:3c:ac:8f:b9:ca:ab:5e:14:9f:d7:94:de:b6:bc:
                    9e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:71:E1:B9:29:8C:FD:F6:C9:B6:89:F9:27:9D:62:75:9B:92:7C:3B
            X509v3 Authority Key Identifier:
                keyid:57:BD:1E:C8:BC:00:1A:33:03:F8:36:53:13:56:22:A6:39:BE:66:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/57BD1EC8BC001A3303F83653135622A639BE6663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BD1EC8BC001A3303F83653135622A639BE6663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/3138362e3233372e3136302e302f32302d3234203d3e20323632383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:8c:9b:28:f3:33:cc:37:05:73:0d:4e:c1:8d:d5:85:5c:
         21:55:29:3d:34:f1:78:b4:4f:a5:13:64:d3:de:c8:c0:f6:65:
         c4:be:01:a1:d8:84:65:02:9d:07:8c:83:22:aa:5a:1a:67:d1:
         1a:e4:47:9f:c4:5c:5f:60:7e:b0:be:32:43:18:c9:6f:c6:37:
         c1:96:a3:1f:2a:dc:00:0f:cb:9e:9a:d1:8d:f6:4f:43:95:39:
         41:0a:d3:00:e8:1c:a4:47:0f:25:ac:ed:8a:0c:e4:d5:78:9a:
         28:e7:da:8b:2c:e1:e1:4a:4f:f2:14:19:59:db:3b:1d:92:04:
         14:45:5b:0f:10:5e:79:0d:16:bd:11:54:b4:eb:f4:3d:5a:4f:
         c7:66:f3:cd:12:02:12:1a:e3:44:59:a8:2b:a7:7c:5c:4f:38:
         ce:9b:fc:84:05:fd:1a:24:21:c1:b2:60:d7:98:c2:a4:81:97:
         46:5c:37:86:58:73:72:19:e4:41:3f:33:2f:1a:9b:d2:36:b5:
         51:fa:58:f9:09:61:64:ee:29:41:66:1b:33:ef:88:cc:f1:e0:
         7b:6e:07:47:98:54:10:31:40:87:69:bb:62:9f:72:05:e6:a2:
         ca:a1:e4:f9:91:ab:58:02:9f:83:12:64:2d:0f:d5:c9:32:bb:
         55:fb:28:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org