Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138362e3231392e3131322e302f32312d3234203d3e203238323130.roa
File:                     3138362e3231392e3131322e302f32312d3234203d3e203238323130.roa (raw, json)
Hash identifier:          YMG9XJ1bCUp7q3edie5p0XiPEaYPzgWd2WT4cB/0jSU=
Subject key identifier:   3E:10:6A:90:D4:6F:9F:CB:10:3D:9E:EE:57:0F:25:6A:41:DD:CA:E1
Certificate issuer:       /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial:       21DDEC84C7F076DAFE3348238CE4DBDEF274F2B5
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138362e3231392e3131322e302f32312d3234203d3e203238323130.roa
Signing time:             Sat 04 Mar 2023 16:09:16 +0000
ROA not before:           Sat 04 Mar 2023 16:04:16 +0000
ROA not after:            Sat 02 Mar 2024 16:09:16 +0000
asID:                     28210
IP address blocks:        186.219.112.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:dd:ec:84:c7:f0:76:da:fe:33:48:23:8c:e4:db:de:f2:74:f2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
        Validity
            Not Before: Mar  4 16:04:16 2023 GMT
            Not After : Mar  2 16:09:16 2024 GMT
        Subject: CN=3E106A90D46F9FCB103D9EEE570F256A41DDCAE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:1e:83:20:88:1d:de:96:45:66:ef:97:bb:
                    af:10:2f:f8:ed:13:55:65:01:08:c2:50:40:ab:35:
                    61:ac:77:0a:44:dd:03:7f:b9:84:43:89:c0:a0:29:
                    1e:b0:6c:30:ce:5b:18:2a:bc:bc:cf:a3:c4:f0:92:
                    43:8f:71:7f:78:43:ab:39:0d:b2:07:80:ab:51:68:
                    b5:f7:1c:19:dc:93:5d:eb:7a:1c:b5:f5:17:23:1f:
                    3d:75:7a:bf:18:6f:fd:e8:b2:ce:75:4c:f9:ec:14:
                    32:b8:25:8b:a5:fe:06:2b:33:db:a0:73:4b:34:d6:
                    2f:58:77:e9:7c:3c:12:79:b3:79:ad:13:9e:99:e3:
                    f4:a7:58:97:cd:5f:ca:e9:85:af:13:5b:e3:38:46:
                    75:2a:6d:98:b5:aa:d5:46:4f:1a:75:cf:ab:4a:ae:
                    c7:47:50:c4:ec:84:bb:07:a4:77:76:22:5b:7a:4a:
                    64:7f:d7:93:c1:16:43:25:2f:c6:e0:d0:7c:e5:4f:
                    1a:a5:9b:9f:36:22:8b:70:6d:2a:16:8b:ea:c2:3d:
                    58:ea:3f:bb:58:54:07:fb:a5:cf:96:15:6f:d8:55:
                    06:84:3f:ea:e0:17:8c:5c:75:0a:4a:1a:88:6c:6c:
                    f7:6e:68:bb:f6:11:4e:61:4e:c3:42:80:a5:09:bb:
                    21:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:10:6A:90:D4:6F:9F:CB:10:3D:9E:EE:57:0F:25:6A:41:DD:CA:E1
            X509v3 Authority Key Identifier:
                keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138362e3231392e3131322e302f32312d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:44:1b:0a:de:03:04:9e:ec:e6:42:f3:61:5b:cd:46:c6:6b:
         03:13:8e:5d:a9:50:63:f1:d9:43:48:35:d4:07:ce:16:f1:f5:
         d0:cb:68:16:21:6f:61:eb:65:7c:93:1b:2b:d9:f8:f4:12:a9:
         2a:ee:c4:e1:18:7c:b7:92:9f:d3:60:37:14:35:dc:93:52:ab:
         61:1d:ec:1f:1a:13:2d:a5:4c:65:dc:aa:ad:39:2c:c9:13:68:
         fc:5a:48:ca:25:aa:99:2b:ed:31:f3:86:8b:64:29:17:51:76:
         7e:9f:5d:06:f1:91:aa:d2:99:eb:3b:cd:c2:d8:44:46:5f:9d:
         ed:97:e3:dc:f0:ce:06:65:94:ac:c9:86:fc:bf:4c:b7:ee:bc:
         bd:e3:bc:d3:2f:1a:15:ff:d4:34:8e:79:dc:f9:34:68:32:b8:
         68:a8:51:e9:4b:2c:36:8a:39:da:46:33:48:03:d8:c8:e9:be:
         4e:a8:1d:f0:1d:a5:02:44:0f:81:c2:15:21:15:88:e4:52:e2:
         59:42:35:07:3d:d6:98:38:68:42:16:51:20:e1:2e:59:03:35:
         f8:26:47:c3:b2:de:66:38:7d:05:ce:12:0a:df:15:1e:7d:98:
         4a:9b:e7:b5:9e:a7:f6:99:b9:6f:01:cf:95:96:7e:e0:10:30:
         61:ce:a9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org