Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/1/3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa
File:                     3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa (raw, json)
Hash identifier:          gP7O1VhINEY+7PN1NEc2riPPw3H1pQ0bxOg7yXGqxK8=
Subject key identifier:   1F:B3:7B:CE:52:97:65:EB:31:61:EA:EB:A6:0F:A4:82:55:4D:F6:9A
Certificate issuer:       /CN=9CB027AE1BD919835115690373E042C5FECD871B
Certificate serial:       0CE2A3C5BD7E9BF3707DF5F55EE5E99F76CEF583
Authority key identifier: 9C:B0:27:AE:1B:D9:19:83:51:15:69:03:73:E0:42:C5:FE:CD:87:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB027AE1BD919835115690373E042C5FECD871B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/1/3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa
Signing time:             Thu 04 Apr 2024 06:19:26 +0000
ROA not before:           Thu 04 Apr 2024 06:14:26 +0000
ROA not after:            Thu 03 Apr 2025 06:19:26 +0000
asID:                     52999
IP address blocks:        186.216.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e2:a3:c5:bd:7e:9b:f3:70:7d:f5:f5:5e:e5:e9:9f:76:ce:f5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB027AE1BD919835115690373E042C5FECD871B
        Validity
            Not Before: Apr  4 06:14:26 2024 GMT
            Not After : Apr  3 06:19:26 2025 GMT
        Subject: CN=1FB37BCE529765EB3161EAEBA60FA482554DF69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:ff:9d:4f:f8:e7:88:d5:10:4e:9c:db:c6:
                    e3:e8:12:95:cd:95:b1:7e:32:75:3c:ee:34:b5:22:
                    19:78:ed:7a:a5:53:a2:78:33:ae:eb:a6:2e:a0:d2:
                    2c:06:c0:08:0a:2f:7f:01:6d:2d:d3:13:72:aa:88:
                    d3:25:36:2f:9a:4c:54:c1:e5:92:03:b1:63:e9:9e:
                    f9:fc:30:e6:9c:c7:8a:d8:95:c1:02:43:9e:9a:6b:
                    a9:ea:2a:41:d0:13:4b:80:b6:2c:68:3b:bb:9b:0c:
                    68:f7:bd:d9:bb:9b:ae:91:dc:2e:54:4d:10:ec:76:
                    34:72:a0:99:d3:1b:a5:86:04:45:63:d3:2b:22:3e:
                    e8:81:ff:6e:4f:38:28:a0:99:46:45:de:bb:39:cb:
                    18:64:89:d3:80:7b:e2:0e:fe:33:88:7f:fb:98:bd:
                    32:f7:70:9a:51:0f:cc:32:f1:64:ec:c5:70:dc:e4:
                    10:1d:db:ef:60:37:8a:3f:82:78:d4:3b:72:02:62:
                    00:8b:e8:6f:44:db:04:2e:d2:bf:66:5f:ea:69:41:
                    07:73:97:b2:cd:f2:03:16:db:24:97:00:77:ad:78:
                    85:f1:b8:fc:85:c3:07:72:de:09:ec:76:44:de:2b:
                    cb:63:3b:03:f4:5a:c2:fa:0c:44:2d:88:2e:cf:94:
                    b9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B3:7B:CE:52:97:65:EB:31:61:EA:EB:A6:0F:A4:82:55:4D:F6:9A
            X509v3 Authority Key Identifier:
                keyid:9C:B0:27:AE:1B:D9:19:83:51:15:69:03:73:E0:42:C5:FE:CD:87:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/1/9CB027AE1BD919835115690373E042C5FECD871B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB027AE1BD919835115690373E042C5FECD871B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/1/3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:44:49:de:a2:47:e9:02:94:eb:3c:bb:d0:94:74:e3:93:bc:
         a7:a6:8d:b2:5a:0d:17:71:ce:33:01:ef:da:68:6c:03:1e:4a:
         5a:c6:95:32:c8:c7:2e:b0:ed:a5:cd:8b:95:4d:a8:fa:17:50:
         13:21:05:f0:fb:80:29:1e:5d:cb:b4:d3:e8:69:9d:01:5b:ff:
         3b:a4:a3:91:fb:ee:15:24:e2:6e:39:9f:93:89:fe:c7:04:50:
         7b:72:dc:e8:ee:a7:92:4c:02:dc:af:f2:5d:62:8c:39:40:4d:
         cf:cb:15:05:c8:ca:87:84:e1:aa:a8:4e:b4:5b:d2:97:e4:59:
         01:ea:2a:f8:b7:de:60:ee:0a:7d:2e:1c:66:4e:fa:92:bc:6d:
         4f:1a:cf:42:cd:08:a7:84:b1:7f:43:62:25:11:cb:d5:04:94:
         a0:14:f1:aa:50:9c:19:04:54:0c:45:b5:0c:25:7a:11:63:34:
         35:65:e5:46:29:26:4c:aa:22:2c:d5:8c:a8:74:4d:1e:cd:61:
         4b:7f:cc:ff:2a:eb:3c:6e:81:02:52:ce:d2:b6:64:be:a3:b1:
         09:66:12:08:93:9b:8b:00:45:2c:20:ca:c5:92:15:8b:4a:dd:
         b8:55:73:af:bb:27:e5:a8:49:f2:95:88:86:4a:ea:c8:28:a0:
         5c:a8:79:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org