Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3233362e302f32322d3232203d3e203238323338.roa
File:                     3138362e3231362e3233362e302f32322d3232203d3e203238323338.roa (raw, json)
Hash identifier:          kZ2NFGE4aB7RkinBNF8xRgy0TeQ4xSYcKzpetZPipWI=
Subject key identifier:   A9:C7:49:34:72:56:27:12:58:FE:A3:D8:10:05:2C:11:D3:A3:30:1C
Certificate issuer:       /CN=729B4CD9A37F20431C93A42826003C836E39EB20
Certificate serial:       7C9CFA6D0C8AFA179793E95618B58444C331E30F
Authority key identifier: 72:9B:4C:D9:A3:7F:20:43:1C:93:A4:28:26:00:3C:83:6E:39:EB:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/729B4CD9A37F20431C93A42826003C836E39EB20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3233362e302f32322d3232203d3e203238323338.roa
Signing time:             Sun 10 Jul 2022 07:20:20 +0000
ROA not before:           Sun 10 Jul 2022 07:15:20 +0000
ROA not after:            Sun 09 Jul 2023 07:20:20 +0000
asID:                     28238
IP address blocks:        186.216.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9c:fa:6d:0c:8a:fa:17:97:93:e9:56:18:b5:84:44:c3:31:e3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729B4CD9A37F20431C93A42826003C836E39EB20
        Validity
            Not Before: Jul 10 07:15:20 2022 GMT
            Not After : Jul  9 07:20:20 2023 GMT
        Subject: CN=A9C749347256271258FEA3D810052C11D3A3301C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:58:e2:74:ed:94:4e:22:34:e8:8c:b8:8a:08:
                    ee:d8:5e:aa:43:6d:72:68:c2:36:42:e4:ff:9e:db:
                    b3:72:f7:d3:c8:25:10:c0:9c:47:62:96:24:6c:d5:
                    57:cb:fb:e4:7a:54:9a:6d:ae:09:5a:1c:93:b8:b5:
                    ab:03:92:0e:d1:fb:e9:0f:d2:af:be:e8:b1:64:d7:
                    fa:11:bb:9c:61:78:07:dc:35:80:d7:6d:af:c0:59:
                    e7:0b:9a:fb:9d:95:b5:14:9b:cd:95:b4:1c:77:11:
                    43:7c:b2:68:21:76:59:35:fb:7a:86:80:3d:42:c1:
                    80:d9:0d:35:7b:4e:55:3b:66:55:09:7d:4a:18:7e:
                    85:a9:bc:b6:49:47:b5:d0:0f:a8:64:1f:4d:88:91:
                    fb:32:04:09:4f:36:18:5a:c6:01:68:5b:97:1b:9c:
                    7a:81:c0:b0:cd:2f:00:3e:39:83:64:f2:f7:69:ec:
                    f5:6a:73:72:c0:e0:4b:3e:b1:1a:53:fb:9c:1a:e1:
                    ca:41:19:fd:98:36:1d:89:0d:17:5d:3f:dc:59:c1:
                    fd:1a:b0:23:e6:4e:1e:82:c3:92:36:67:8d:53:8a:
                    30:e8:8d:97:db:5d:7e:85:ff:49:2b:27:cf:c8:d1:
                    92:e5:01:89:32:b9:71:ec:c9:7c:5d:58:5f:d0:82:
                    15:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C7:49:34:72:56:27:12:58:FE:A3:D8:10:05:2C:11:D3:A3:30:1C
            X509v3 Authority Key Identifier:
                keyid:72:9B:4C:D9:A3:7F:20:43:1C:93:A4:28:26:00:3C:83:6E:39:EB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/729B4CD9A37F20431C93A42826003C836E39EB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/729B4CD9A37F20431C93A42826003C836E39EB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/0/3138362e3231362e3233362e302f32322d3232203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:60:59:3d:64:79:8d:e4:0e:8e:41:62:c0:fc:aa:af:b1:7d:
         0d:12:2b:67:51:f8:f4:99:76:80:3f:36:d6:e6:e3:1e:1d:ed:
         84:6a:20:92:70:df:de:01:51:7f:cc:44:cb:fc:66:2c:03:30:
         ac:d9:49:23:2c:d2:1c:6b:6a:e1:4a:06:0a:e5:05:66:04:62:
         5b:a4:ad:fa:99:d1:01:24:95:2e:1c:76:91:c4:33:4c:c5:80:
         cf:46:3a:7e:6e:10:37:6e:2a:48:63:d5:70:8b:9b:a9:44:a8:
         48:d7:df:4a:fa:93:20:e3:99:6d:aa:98:4f:1f:db:46:80:fb:
         11:7c:ed:7e:f6:92:d1:d3:d9:72:c1:13:31:f1:67:69:26:cb:
         3b:a7:1d:95:81:e6:00:9e:73:94:1f:1e:a9:63:d6:48:bb:ca:
         f2:28:bf:6e:22:3c:55:26:ae:1e:28:fa:3a:86:8a:10:be:d8:
         b8:e7:eb:98:0a:2f:0b:14:9d:59:d8:00:92:c0:b2:f5:2a:0b:
         1a:6c:99:da:23:b8:2d:4e:2c:3d:38:73:64:71:c5:60:3f:df:
         f2:d9:96:f0:da:db:79:af:8f:10:6c:c8:ab:67:63:8e:af:fb:
         5e:c8:82:88:0b:fd:95:85:95:9c:14:3e:86:2e:c5:31:49:78:
         cf:26:22:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org