Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32302d3230203d3e203238323338.roa
File:                     3138362e3231362e3232342e302f32302d3230203d3e203238323338.roa (raw, json)
Hash identifier:          P+IivqpP7z61nvt2M10c5LsdtC4BOtrpMFdD8923U8U=
Subject key identifier:   F8:74:A0:A4:3A:9D:46:D7:FB:0F:B7:4D:45:F9:7B:C6:13:82:F6:4C
Certificate issuer:       /CN=B6C0FDD6595C6024AE01D3374C8F636E5537AAFC
Certificate serial:       3D5D98380E0CC40CEA203DD5E6D409495A8DE86E
Authority key identifier: B6:C0:FD:D6:59:5C:60:24:AE:01:D3:37:4C:8F:63:6E:55:37:AA:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6C0FDD6595C6024AE01D3374C8F636E5537AAFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32302d3230203d3e203238323338.roa
Signing time:             Tue 02 Jan 2024 16:10:20 +0000
ROA not before:           Tue 02 Jan 2024 16:05:20 +0000
ROA not after:            Tue 31 Dec 2024 16:10:20 +0000
asID:                     28238
IP address blocks:        186.216.224.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5d:98:38:0e:0c:c4:0c:ea:20:3d:d5:e6:d4:09:49:5a:8d:e8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C0FDD6595C6024AE01D3374C8F636E5537AAFC
        Validity
            Not Before: Jan  2 16:05:20 2024 GMT
            Not After : Dec 31 16:10:20 2024 GMT
        Subject: CN=F874A0A43A9D46D7FB0FB74D45F97BC61382F64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:53:92:de:95:1f:42:13:8b:72:bb:f3:e9:
                    76:82:e3:2e:22:c5:3c:bf:2d:25:54:2a:73:42:fe:
                    56:35:c3:56:26:52:33:74:c9:d1:3e:43:3f:6c:f7:
                    71:3a:7b:bc:16:62:62:8c:a5:d9:35:09:e2:e1:e3:
                    49:60:a4:81:cf:2d:61:e9:36:06:92:08:80:85:92:
                    cc:40:f3:8b:0e:d1:54:d3:4f:00:a7:f0:a2:43:2a:
                    c5:e4:df:ec:d8:4d:b6:4d:73:3f:de:f8:3a:79:74:
                    7e:3e:4f:46:7b:28:7d:aa:fd:20:70:0f:91:6c:b6:
                    72:ba:6b:77:d7:23:b4:a6:8d:e0:55:d9:58:7a:21:
                    d4:cf:2f:f3:62:c0:6e:68:a7:6c:d2:2b:91:11:cc:
                    4d:67:65:c2:00:7f:0e:eb:b6:4d:5d:3c:21:9d:93:
                    6a:f8:8f:3b:7a:b3:f1:4e:85:33:7b:90:6c:bf:f2:
                    3f:0a:d3:58:33:aa:ab:65:7c:82:3b:93:4a:9b:43:
                    10:91:90:4a:7a:72:59:b1:bd:b6:09:60:d5:cf:3f:
                    89:f8:0c:79:8e:ec:73:19:c5:bb:77:02:3d:ff:d2:
                    ee:76:ef:f0:d4:fd:7c:81:90:46:81:19:34:ac:35:
                    26:c4:74:18:3e:94:9d:0e:ea:2a:03:53:1e:dc:7d:
                    70:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:74:A0:A4:3A:9D:46:D7:FB:0F:B7:4D:45:F9:7B:C6:13:82:F6:4C
            X509v3 Authority Key Identifier:
                keyid:B6:C0:FD:D6:59:5C:60:24:AE:01:D3:37:4C:8F:63:6E:55:37:AA:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/B6C0FDD6595C6024AE01D3374C8F636E5537AAFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6C0FDD6595C6024AE01D3374C8F636E5537AAFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32302d3230203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:79:09:c0:7c:fd:94:a6:96:ec:4a:58:29:20:90:fc:7a:89:
         81:1f:71:bb:1c:05:22:fa:8b:91:8d:4f:20:b3:9c:a5:12:ae:
         05:cc:24:44:fc:3d:75:5b:e4:d1:cd:ed:10:d6:77:61:18:01:
         81:38:5c:6d:48:04:66:f3:c6:b3:24:5d:0a:f6:cf:4c:00:d4:
         95:4b:81:40:10:1d:fd:08:01:55:2c:12:dd:70:3d:7b:57:77:
         98:6b:96:99:90:fa:c9:f3:91:2c:aa:7c:d1:69:b2:7d:dc:74:
         7b:29:3a:70:78:65:f0:fc:96:19:72:13:f6:cd:2e:04:86:8f:
         19:dc:80:c8:6a:61:6b:b7:56:ab:94:78:be:cf:46:5d:6c:04:
         e1:fc:98:f6:93:11:d3:45:b1:8a:49:83:9a:01:af:c2:68:65:
         61:d2:28:93:b9:38:42:30:1a:3e:e5:35:99:dc:4b:0f:c9:35:
         36:95:d1:61:6d:fb:82:a0:5d:5b:ba:42:36:e1:35:2f:22:8d:
         f8:51:b9:79:62:31:3c:0e:50:cb:5f:88:9e:7f:6d:a2:44:24:
         6a:05:ad:d4:ce:c8:0e:18:d6:3b:27:a8:38:d9:17:c1:35:c3:
         17:f9:74:89:40:e5:07:a5:2f:7d:36:c3:c2:61:68:88:88:72:
         09:1c:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org