Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa
File:                     3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          /bpwWVXB/xxZii+MSf/PwlC+Q7juoGy7cjV0KV9sNnY=
Subject key identifier:   D6:7B:39:0F:F9:30:BE:54:2D:E1:E4:48:78:B4:5C:ED:41:7A:D9:C1
Certificate issuer:       /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial:       63B052DE9CD56A810E908BBDB9D9EBA0A076CC32
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa
Signing time:             Fri 03 May 2024 19:44:34 +0000
ROA not before:           Fri 03 May 2024 19:39:34 +0000
ROA not after:            Fri 02 May 2025 19:44:34 +0000
asID:                     28669
IP address blocks:        186.195.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b0:52:de:9c:d5:6a:81:0e:90:8b:bd:b9:d9:eb:a0:a0:76:cc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
        Validity
            Not Before: May  3 19:39:34 2024 GMT
            Not After : May  2 19:44:34 2025 GMT
        Subject: CN=D67B390FF930BE542DE1E44878B45CED417AD9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:bf:e5:2a:dc:10:6e:6e:97:62:a2:03:9e:
                    c7:b6:57:bf:67:4c:b2:07:4c:fe:1d:51:d1:ec:57:
                    f8:4e:70:fa:9a:45:a9:56:04:fa:ce:69:45:61:9a:
                    1b:ef:a7:eb:47:f3:80:11:d4:0e:64:69:43:b2:1a:
                    3f:5c:b4:42:ca:86:d9:af:76:c3:c6:c5:e3:7d:dc:
                    6b:7d:6e:51:bf:4e:1b:4b:f5:f4:b6:b7:45:71:e5:
                    4b:2f:5f:ee:df:6b:65:66:f5:bd:59:65:6a:f7:b5:
                    99:b4:7a:bc:33:b7:fa:b8:8c:a2:3d:3c:cd:0b:f2:
                    49:e2:b5:16:e7:75:bd:4d:88:84:f2:8d:3e:b8:88:
                    b6:74:01:c2:76:f3:e2:3f:aa:f2:88:ea:46:40:07:
                    b4:7a:44:e9:8d:f4:cd:16:25:85:31:a0:bb:08:29:
                    b2:c6:d8:94:b7:da:ee:da:73:1a:77:0a:fc:ab:c0:
                    84:9d:02:ab:30:71:43:c1:e4:b5:24:8c:4e:d7:95:
                    94:ea:73:eb:e1:7c:0d:62:02:6b:5a:3f:fc:4c:c6:
                    91:12:65:b4:75:36:ba:6a:17:ec:64:70:41:cf:f8:
                    41:0e:f2:b9:29:7c:34:5e:79:96:6b:1e:c4:ea:cd:
                    42:29:21:b6:30:29:ce:f8:5d:4b:cc:f2:11:5a:49:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7B:39:0F:F9:30:BE:54:2D:E1:E4:48:78:B4:5C:ED:41:7A:D9:C1
            X509v3 Authority Key Identifier:
                keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/3138362e3139352e3134342e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:03:d7:00:f2:d8:0e:b0:fc:4c:7f:08:21:49:b2:4c:12:eb:
         31:ce:0e:40:96:e6:fe:71:55:5a:4b:b3:cd:18:6f:ea:67:c3:
         0b:01:f0:50:70:13:36:3f:b5:8f:c3:44:8f:4f:71:18:de:b4:
         05:72:c0:4c:33:17:8d:e0:70:c0:fc:b9:ff:43:c7:f6:e1:d6:
         64:c4:1a:d8:00:5c:13:f8:8b:a3:cb:5c:22:8a:46:63:42:f1:
         d2:28:79:13:83:04:18:3e:ce:df:cd:58:26:bd:79:48:3d:34:
         ac:1a:ab:50:da:32:d2:ae:a2:5d:dc:b1:af:59:45:eb:da:b0:
         9e:8f:b9:b1:8f:89:1b:dc:4b:eb:79:8c:35:8b:9a:59:34:77:
         72:bc:fc:0f:80:48:4d:2a:9e:d2:bc:5d:ce:bf:65:f1:3d:a2:
         7a:f2:a0:ea:58:f9:46:29:db:b5:2e:b9:36:08:28:9b:53:8f:
         fe:a7:d9:42:d1:0a:21:0f:46:9d:50:7d:6c:70:6f:ff:74:f2:
         c3:db:5c:35:71:25:1a:b7:52:f8:5f:5c:cb:70:75:e5:d2:be:
         1d:f1:5c:f5:82:fd:0e:9e:25:43:52:6f:7c:47:a1:16:36:3a:
         74:b6:99:52:f5:ef:7b:80:5e:64:0f:1d:7c:12:b8:89:99:56:
         d6:7c:9e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org