Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32302d3232203d3e203238323338.roa
File:                     3138362e3231362e3232342e302f32302d3232203d3e203238323338.roa (raw, json)
Hash identifier:          mwty+tqsYErBzJ/1vzdDI2KLoQvUYgZkLLMzXm6qp8w=
Subject key identifier:   4F:2A:73:C9:D8:A2:ED:AA:3F:B4:DD:9B:DA:7B:37:55:0D:B2:63:BF
Certificate issuer:       /CN=729B4CD9A37F20431C93A42826003C836E39EB20
Certificate serial:       2C9D25DC9F700C1D557529D24A81E135D555AAD5
Authority key identifier: 72:9B:4C:D9:A3:7F:20:43:1C:93:A4:28:26:00:3C:83:6E:39:EB:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/729B4CD9A37F20431C93A42826003C836E39EB20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32302d3232203d3e203238323338.roa
Signing time:             Mon 11 Jul 2022 19:03:47 +0000
ROA not before:           Mon 11 Jul 2022 18:58:47 +0000
ROA not after:            Mon 10 Jul 2023 19:03:47 +0000
asID:                     28238
IP address blocks:        186.216.224.0/20 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9d:25:dc:9f:70:0c:1d:55:75:29:d2:4a:81:e1:35:d5:55:aa:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729B4CD9A37F20431C93A42826003C836E39EB20
        Validity
            Not Before: Jul 11 18:58:47 2022 GMT
            Not After : Jul 10 19:03:47 2023 GMT
        Subject: CN=4F2A73C9D8A2EDAA3FB4DD9BDA7B37550DB263BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:46:51:5d:84:bb:d8:23:ba:80:96:a4:44:
                    c2:4c:b8:d9:af:db:90:98:69:20:f1:25:42:3b:ad:
                    43:f4:59:93:90:6d:e5:74:13:34:c5:13:97:7d:8e:
                    dd:6b:d1:32:c1:09:b1:7e:d6:6f:e7:e7:e3:ff:24:
                    ce:c6:e8:f8:0b:72:19:24:20:8d:fa:07:b3:26:7b:
                    67:42:2e:58:4e:a4:de:a7:df:db:99:aa:f9:87:96:
                    8f:98:9a:75:b9:f3:c9:ed:5b:c6:67:f0:a3:8a:32:
                    a7:ff:ef:fe:ea:dd:08:9c:dd:0d:c4:57:fc:f4:86:
                    57:0c:8c:92:e4:55:73:29:fb:c0:27:6d:5b:df:37:
                    5f:fe:59:c7:f1:ef:1d:60:56:ef:74:53:b2:c7:b0:
                    34:66:af:b7:68:5a:77:ae:a4:1a:88:b5:b7:65:31:
                    96:f3:87:c5:a6:d3:7c:98:cf:8b:53:a7:6c:d0:78:
                    ce:ec:f7:09:1e:b6:47:ab:f5:bb:e2:8f:33:fa:a6:
                    81:0a:21:a2:95:3d:cb:eb:81:67:bd:76:f2:c0:04:
                    23:8e:ac:f1:43:b0:47:4a:72:2d:d9:d9:c0:35:22:
                    55:84:7e:ea:d5:8d:6d:99:95:76:16:c4:24:5b:e6:
                    d8:46:60:80:db:4e:7c:cd:26:cf:a1:62:3b:f5:0f:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2A:73:C9:D8:A2:ED:AA:3F:B4:DD:9B:DA:7B:37:55:0D:B2:63:BF
            X509v3 Authority Key Identifier:
                keyid:72:9B:4C:D9:A3:7F:20:43:1C:93:A4:28:26:00:3C:83:6E:39:EB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/729B4CD9A37F20431C93A42826003C836E39EB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/729B4CD9A37F20431C93A42826003C836E39EB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32302d3232203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:ee:5a:ff:6b:ee:84:c9:fc:ca:e3:c1:79:5e:ab:39:7a:fb:
         53:4d:9c:e9:ef:66:a9:f8:f8:2a:6b:b0:71:e5:9b:9a:07:78:
         10:bd:a4:ee:8a:55:57:b3:9e:68:17:b0:da:ed:af:bd:e0:1a:
         37:63:00:7e:42:c9:fc:a5:c7:c6:83:db:c4:a2:2b:f0:b7:e1:
         5d:2e:1a:e3:87:11:96:f5:6f:a8:d2:8d:eb:50:f3:83:44:c9:
         04:4d:28:e1:ff:ee:ea:94:59:a3:13:db:a6:ab:74:c5:8b:40:
         84:0b:54:c2:6c:9b:1d:5e:1b:95:71:64:4f:70:1c:5d:0e:d3:
         dc:2a:c1:8e:01:92:e4:32:ea:eb:5c:a7:90:5b:52:2b:c1:e8:
         b2:19:c6:9e:10:fe:a8:a8:5e:55:bf:b8:1e:b3:9c:3c:3b:8e:
         ef:d1:8a:42:66:0d:c6:55:be:17:be:f9:53:39:91:6e:12:c2:
         68:9b:8d:16:a3:78:2e:e7:2e:9b:42:a7:ad:d5:d8:fb:a7:1e:
         7a:dd:11:ac:92:96:18:ea:ee:e2:3e:0b:01:e1:b8:56:ea:65:
         1e:4f:8d:41:c2:2b:e9:9d:7b:c5:70:22:85:0b:29:86:5f:a6:
         bf:b7:2e:90:f0:49:55:fc:5b:70:c9:4f:8d:b0:7b:23:10:24:
         dc:28:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org