Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232382e302f32322d3232203d3e203238323338.roa
File:                     3138362e3231362e3232382e302f32322d3232203d3e203238323338.roa (raw, json)
Hash identifier:          DYlTKGCqOfx1pFBPKZlq0Re5t4kZfEfMxcw6FSfS3Xc=
Subject key identifier:   A9:1B:0C:C1:B7:5C:21:A1:EB:3D:87:75:FD:99:D7:C1:AC:F2:BE:DF
Certificate issuer:       /CN=729B4CD9A37F20431C93A42826003C836E39EB20
Certificate serial:       24EC7C0AF27D909A594C8835D2289E220BFC6855
Authority key identifier: 72:9B:4C:D9:A3:7F:20:43:1C:93:A4:28:26:00:3C:83:6E:39:EB:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/729B4CD9A37F20431C93A42826003C836E39EB20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232382e302f32322d3232203d3e203238323338.roa
Signing time:             Sun 10 Jul 2022 07:20:18 +0000
ROA not before:           Sun 10 Jul 2022 07:15:18 +0000
ROA not after:            Sun 09 Jul 2023 07:20:18 +0000
asID:                     28238
IP address blocks:        186.216.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ec:7c:0a:f2:7d:90:9a:59:4c:88:35:d2:28:9e:22:0b:fc:68:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729B4CD9A37F20431C93A42826003C836E39EB20
        Validity
            Not Before: Jul 10 07:15:18 2022 GMT
            Not After : Jul  9 07:20:18 2023 GMT
        Subject: CN=A91B0CC1B75C21A1EB3D8775FD99D7C1ACF2BEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:23:af:d6:d8:a7:41:2b:64:98:da:57:89:
                    a1:c3:96:a0:c8:fd:ba:bc:f9:d0:fa:2a:fb:5b:c7:
                    13:09:43:e1:e7:14:74:14:0e:f2:8e:44:f2:29:fa:
                    cd:29:9d:87:4f:83:df:4d:69:32:f7:68:5c:0e:51:
                    31:ab:fa:9f:e7:da:d7:65:84:c4:5f:17:81:d4:f6:
                    bd:94:84:a9:c0:8d:4d:2b:3a:ea:d3:77:c8:35:d7:
                    73:44:c1:27:5b:25:16:16:0c:f9:f4:87:96:a7:dd:
                    17:a1:4a:7a:db:d4:d1:6d:21:f1:9f:68:fb:13:5b:
                    bc:0f:33:da:d2:37:f5:8a:3f:48:a8:9b:a6:cc:43:
                    3e:41:8b:d4:5b:56:a7:a3:47:96:78:86:75:a1:09:
                    f6:e5:48:78:ab:e0:b9:65:8f:0e:76:ac:5f:82:e1:
                    02:49:65:7a:a9:80:46:93:41:06:88:c4:fb:50:ed:
                    1b:e4:0f:88:b2:3f:05:43:5a:8d:81:f5:16:a5:8f:
                    18:9a:4f:f8:2e:18:fa:19:f0:26:00:a0:ff:80:6e:
                    b2:11:78:3b:8c:8a:86:38:78:59:f1:a6:79:b8:23:
                    81:fc:f0:b9:01:13:92:d3:88:16:6c:2d:9a:70:58:
                    aa:49:ac:b7:f2:71:f1:04:74:6d:64:74:09:b0:3e:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1B:0C:C1:B7:5C:21:A1:EB:3D:87:75:FD:99:D7:C1:AC:F2:BE:DF
            X509v3 Authority Key Identifier:
                keyid:72:9B:4C:D9:A3:7F:20:43:1C:93:A4:28:26:00:3C:83:6E:39:EB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/729B4CD9A37F20431C93A42826003C836E39EB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/729B4CD9A37F20431C93A42826003C836E39EB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3232382e302f32322d3232203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:19:aa:b2:e7:a4:78:cc:35:72:f8:0d:ee:fe:ed:89:ed:57:
         a1:95:9d:05:4d:1f:97:87:9a:30:61:86:4a:cf:e0:fe:11:c9:
         5b:1e:64:54:fa:3d:a8:ba:1a:15:80:5a:e1:00:35:94:b3:5d:
         f0:d1:0d:b5:8b:33:86:87:d6:5b:1d:a6:f8:4c:41:ec:e9:81:
         04:6c:e8:b9:31:38:10:8a:88:ca:40:fa:b0:6d:ea:ad:b9:a2:
         37:da:61:22:33:6c:c4:44:f3:bb:91:bd:39:85:ae:e0:84:a1:
         0a:f9:46:fe:bc:0e:52:23:e6:df:6e:1d:36:10:38:f6:56:89:
         68:8e:6a:5d:ae:f6:ab:25:8f:2e:80:5b:4e:2e:33:5d:13:60:
         ea:d2:2d:00:f7:54:1b:79:25:47:9b:09:52:bc:30:5f:99:83:
         59:86:41:ac:43:00:d1:92:57:ee:3d:6e:4e:41:24:dd:48:82:
         df:ff:2e:79:20:86:99:08:64:77:10:f3:c4:d3:9e:da:e1:01:
         49:4b:74:0d:80:88:87:c1:0b:cf:65:15:c8:bc:db:9a:7e:79:
         b3:17:4d:42:42:d6:7b:73:cb:3e:3a:52:f4:21:31:d2:91:fb:
         e6:0c:c3:80:a5:f7:e4:ea:39:c0:c5:42:28:d3:3c:b9:6b:56:
         9c:4c:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org