Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32322d3232203d3e203238323338.roa
File:                     3138362e3231362e3232342e302f32322d3232203d3e203238323338.roa (raw, json)
Hash identifier:          3yXgzclh5kg4ylkhaohJwVoysITu4KUTpkh7OYeQJYg=
Subject key identifier:   4B:95:3A:C5:FB:E3:05:32:04:04:0D:BE:A0:C0:3F:C8:0B:69:A5:CE
Certificate issuer:       /CN=729B4CD9A37F20431C93A42826003C836E39EB20
Certificate serial:       43DA1F052468665503624FBFA46B29B1A184925E
Authority key identifier: 72:9B:4C:D9:A3:7F:20:43:1C:93:A4:28:26:00:3C:83:6E:39:EB:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/729B4CD9A37F20431C93A42826003C836E39EB20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32322d3232203d3e203238323338.roa
Signing time:             Sun 10 Jul 2022 07:20:19 +0000
ROA not before:           Sun 10 Jul 2022 07:15:19 +0000
ROA not after:            Sun 09 Jul 2023 07:20:19 +0000
asID:                     28238
IP address blocks:        186.216.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:da:1f:05:24:68:66:55:03:62:4f:bf:a4:6b:29:b1:a1:84:92:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729B4CD9A37F20431C93A42826003C836E39EB20
        Validity
            Not Before: Jul 10 07:15:19 2022 GMT
            Not After : Jul  9 07:20:19 2023 GMT
        Subject: CN=4B953AC5FBE3053204040DBEA0C03FC80B69A5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:22:d8:86:ee:93:d5:35:ea:b7:f5:f8:48:
                    07:87:1e:27:fe:b7:d3:46:81:fd:19:5c:b1:4c:2b:
                    f2:0f:22:68:97:7a:63:4c:98:38:3b:a9:88:19:40:
                    22:d5:80:49:8c:4e:79:66:37:30:0c:ca:25:33:03:
                    ef:4f:a5:a7:1d:47:e1:ac:9b:04:53:9a:67:cc:03:
                    fc:b3:d8:39:a4:b8:13:03:f4:f3:b8:a3:25:5a:77:
                    83:4a:3c:10:82:50:b0:d1:fe:e1:b6:a0:80:7c:f1:
                    57:96:85:01:31:5a:53:94:87:ff:35:57:bd:f0:3e:
                    a1:ce:35:88:6c:80:7d:6d:3d:67:65:52:08:74:6d:
                    16:c4:09:15:5f:89:31:77:3f:1c:4d:58:36:01:9d:
                    6a:ba:55:36:ef:fd:66:70:1b:f7:42:56:a2:d0:24:
                    37:d0:44:53:89:f1:ba:1b:92:05:1a:1a:fa:60:8b:
                    3b:ba:c9:fc:13:95:da:c0:c2:4d:f4:2a:be:b9:cb:
                    cc:7b:bd:9c:87:5c:07:f8:d0:dc:4d:80:41:47:f9:
                    3a:60:fa:e8:56:67:fa:75:e8:c8:3b:57:d3:a1:85:
                    9f:d3:6c:a9:df:5b:eb:20:b6:e1:20:08:d2:60:92:
                    3f:84:c4:77:64:1e:0d:71:e9:f7:7a:a5:15:0e:75:
                    05:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:95:3A:C5:FB:E3:05:32:04:04:0D:BE:A0:C0:3F:C8:0B:69:A5:CE
            X509v3 Authority Key Identifier:
                keyid:72:9B:4C:D9:A3:7F:20:43:1C:93:A4:28:26:00:3C:83:6E:39:EB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/729B4CD9A37F20431C93A42826003C836E39EB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/729B4CD9A37F20431C93A42826003C836E39EB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232342e302f32322d3232203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:db:b3:16:a7:e1:95:b9:73:dd:ee:49:bf:db:28:bc:e4:95:
         a3:c4:b2:6b:ab:24:ea:66:86:69:48:cb:fd:c5:9f:14:e5:7c:
         14:64:56:f5:84:65:4d:96:a0:80:d6:07:ca:6f:43:96:98:02:
         57:43:fa:82:e9:82:0d:ab:c1:dd:53:3f:93:81:64:04:f5:a8:
         1c:df:bd:ab:26:3a:46:5b:86:b5:ec:bc:ce:2a:5e:f8:50:43:
         20:3a:31:7c:ac:4a:42:84:d2:ff:2b:b5:5b:c6:c6:ff:05:6c:
         86:9a:10:56:d9:71:1b:60:c0:07:de:b8:c3:b1:1b:bf:b0:bf:
         7e:ad:95:a1:35:b9:58:90:44:82:03:48:62:af:28:2c:89:73:
         95:35:aa:bf:04:20:1c:18:3e:e7:d4:72:e7:7e:c2:42:d3:b9:
         22:c7:a0:eb:49:f7:7b:a0:4a:dc:a5:c1:1b:50:e9:cf:e9:31:
         b0:c8:37:a7:a5:d4:fa:79:df:e4:6b:d4:d3:46:65:5e:42:54:
         f6:01:45:3c:9d:34:db:44:4f:14:1c:f1:06:ef:b3:8a:73:47:
         06:18:f4:d6:04:85:1b:b2:06:a4:0f:e4:db:82:dd:3c:e8:8a:
         2a:be:1f:15:5f:fc:8b:60:b6:7f:75:cc:8e:55:87:ae:78:e5:
         71:da:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org