Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138362e3233352e3137362e302f32312d3231203d3e203238313339.roa
File:                     3138362e3233352e3137362e302f32312d3231203d3e203238313339.roa (raw, json)
Hash identifier:          ChV3zGhNlBUKdtOTt0q1CLs3qzOofMfAjMTCnbJn0es=
Subject key identifier:   54:9A:51:7C:CA:50:DE:F3:BD:F1:14:89:24:EB:AE:81:62:60:25:31
Certificate issuer:       /CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
Certificate serial:       387FAB4222584AA19815BEFFE4A74BE96601E751
Authority key identifier: FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138362e3233352e3137362e302f32312d3231203d3e203238313339.roa
Signing time:             Tue 09 Jan 2024 11:47:58 +0000
ROA not before:           Tue 09 Jan 2024 11:42:58 +0000
ROA not after:            Tue 07 Jan 2025 11:47:58 +0000
asID:                     28139
IP address blocks:        186.235.176.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7f:ab:42:22:58:4a:a1:98:15:be:ff:e4:a7:4b:e9:66:01:e7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
        Validity
            Not Before: Jan  9 11:42:58 2024 GMT
            Not After : Jan  7 11:47:58 2025 GMT
        Subject: CN=549A517CCA50DEF3BDF1148924EBAE8162602531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:67:d1:6f:7a:70:49:f5:c4:cb:12:fb:25:17:
                    93:ce:d1:06:9a:0c:92:5f:b8:2b:b5:d2:19:99:5b:
                    bd:a2:33:b6:60:c3:c2:01:8c:21:b3:ae:03:12:2b:
                    be:97:b5:36:88:4d:54:c0:4c:54:4a:71:c5:93:a9:
                    e5:e7:0e:05:74:42:2d:81:18:35:57:1f:45:a0:10:
                    5d:e0:50:3b:14:9f:a7:84:5f:ad:33:17:ca:52:9e:
                    6f:8e:0f:49:05:c2:d9:05:35:50:32:4c:11:f0:57:
                    45:1a:40:92:83:35:16:62:fd:c6:5c:f4:52:28:2c:
                    60:41:f6:36:ac:8f:b7:80:ba:c6:0e:84:da:e9:d5:
                    9c:b0:ba:84:52:9e:3b:11:6b:93:68:e0:e6:56:5c:
                    90:c8:ad:96:3c:3a:3d:da:89:59:69:82:60:cd:d0:
                    54:d3:d7:68:01:0f:a6:b8:59:7b:26:ad:cd:11:80:
                    62:69:a4:94:d3:2b:f4:2f:f4:a7:cf:2b:0b:4e:09:
                    b1:bf:f1:42:61:13:1a:1a:84:21:c0:cc:15:2e:e8:
                    82:89:39:66:99:d6:6b:07:93:cc:7c:fb:b0:6d:7e:
                    c6:5a:de:3f:8a:ce:4b:7a:6b:3a:29:d8:06:25:6e:
                    11:04:ed:03:83:98:8d:44:54:27:5e:f0:f9:a1:2f:
                    ec:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9A:51:7C:CA:50:DE:F3:BD:F1:14:89:24:EB:AE:81:62:60:25:31
            X509v3 Authority Key Identifier:
                keyid:FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138362e3233352e3137362e302f32312d3231203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:a7:b4:3c:95:d3:ef:7b:19:9b:f5:74:78:6d:82:22:fc:80:
         3a:de:fc:9d:cc:bc:f4:30:81:da:4c:1b:88:07:e3:47:13:a7:
         db:10:48:cc:f0:76:ed:f9:37:e3:4b:e8:81:3b:59:60:12:52:
         e3:0c:89:f3:a5:6b:7e:11:28:22:31:4e:5a:6f:af:4d:b9:a1:
         d2:36:bd:dd:fa:2f:09:64:70:be:f1:5b:eb:e7:2d:08:80:ee:
         64:e3:22:28:7b:3f:18:ab:b7:3d:32:80:21:8c:c9:d9:fc:0b:
         fd:56:a2:63:5a:b9:a4:36:33:2a:e4:47:8e:36:9f:2c:0f:06:
         be:71:b0:10:f6:82:5c:9f:bf:68:70:e1:02:f4:bf:2c:1b:c5:
         fa:d0:6e:12:b1:63:02:23:ef:80:cb:1d:8f:06:e3:5a:8a:80:
         70:35:48:93:59:02:cd:84:1b:6b:30:93:3e:f8:39:9b:23:66:
         7f:9d:f0:a8:5b:6f:d6:dc:e1:e1:d1:01:4c:23:9f:2a:58:18:
         97:05:0e:a2:ad:d6:04:97:ef:5d:5e:9b:f8:63:2c:af:92:c0:
         96:92:9d:b8:5e:c8:2e:dc:23:04:90:ab:44:65:bd:f8:00:c8:
         cf:97:f3:93:53:d1:4f:cd:28:aa:07:37:47:79:04:57:e2:e3:
         bb:57:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org