Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3138362e3233332e3132382e302f32312d3234203d3e20323639353733.roa
File:                     3138362e3233332e3132382e302f32312d3234203d3e20323639353733.roa (raw, json)
Hash identifier:          jZ8fpxhBtGwCfnp8QzmaUTS0BrvSViHKgqzYmNjCtTU=
Subject key identifier:   D4:2C:A5:E9:EC:FD:97:C7:B3:7C:4D:57:33:25:6A:0E:90:F7:19:5A
Certificate issuer:       /CN=29A3D0D0AC255182E4AEA9CA17963370CD63B2CE
Certificate serial:       3E2DAFF9BF400E88AEA000421B22FD1118A2E1BB
Authority key identifier: 29:A3:D0:D0:AC:25:51:82:E4:AE:A9:CA:17:96:33:70:CD:63:B2:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A3D0D0AC255182E4AEA9CA17963370CD63B2CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3138362e3233332e3132382e302f32312d3234203d3e20323639353733.roa
Signing time:             Wed 28 Aug 2024 12:20:12 +0000
ROA not before:           Wed 28 Aug 2024 12:15:12 +0000
ROA not after:            Wed 27 Aug 2025 12:20:12 +0000
asID:                     269573
IP address blocks:        186.233.128.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2d:af:f9:bf:40:0e:88:ae:a0:00:42:1b:22:fd:11:18:a2:e1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A3D0D0AC255182E4AEA9CA17963370CD63B2CE
        Validity
            Not Before: Aug 28 12:15:12 2024 GMT
            Not After : Aug 27 12:20:12 2025 GMT
        Subject: CN=D42CA5E9ECFD97C7B37C4D5733256A0E90F7195A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b5:66:13:78:a9:c1:1e:b2:aa:a4:a7:ca:22:
                    96:6d:ec:fe:40:c3:65:19:20:4c:10:47:d9:1f:16:
                    ac:85:01:5f:38:2e:35:7d:1c:3c:c9:97:bd:7c:21:
                    fd:24:38:32:f8:2e:bd:d7:3d:72:dc:61:43:9c:40:
                    30:95:f2:a9:67:ce:3a:12:6b:b4:69:81:69:6a:99:
                    f2:92:19:1e:0d:db:31:92:e6:9a:76:60:1d:a4:65:
                    a1:1c:7f:ee:46:4f:2e:63:eb:04:f5:f9:2e:b3:86:
                    99:30:9e:43:1f:83:83:26:1c:75:61:a6:f8:24:66:
                    db:8f:47:3b:88:9b:54:c1:d4:19:e3:5b:b6:79:b3:
                    16:a4:c0:ac:48:0a:89:81:78:3d:68:38:89:5d:31:
                    2b:f2:d1:d5:4c:ed:a4:97:f8:84:0b:76:a3:b6:50:
                    a6:b4:02:73:79:a8:81:c8:e7:29:0b:a8:28:11:22:
                    d4:1a:aa:ff:e8:26:c6:e1:f5:1c:aa:ef:c2:06:61:
                    59:85:56:7a:57:a1:b9:a7:43:4b:ce:56:92:08:74:
                    20:4a:af:47:4c:bb:47:fd:01:87:72:7b:f6:f4:31:
                    36:c1:f2:48:79:32:45:8c:f6:47:72:1f:d2:ba:48:
                    5d:fe:60:10:fe:a1:45:81:0b:4a:9c:be:30:36:c5:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2C:A5:E9:EC:FD:97:C7:B3:7C:4D:57:33:25:6A:0E:90:F7:19:5A
            X509v3 Authority Key Identifier:
                keyid:29:A3:D0:D0:AC:25:51:82:E4:AE:A9:CA:17:96:33:70:CD:63:B2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/29A3D0D0AC255182E4AEA9CA17963370CD63B2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A3D0D0AC255182E4AEA9CA17963370CD63B2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3138362e3233332e3132382e302f32312d3234203d3e20323639353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:90:35:81:35:60:97:15:26:ff:3b:2f:9f:f4:03:23:4e:19:
         57:90:32:f8:fd:51:c5:f7:71:19:bd:28:bf:c6:2d:ad:e6:46:
         72:42:fa:9f:ab:66:51:ec:71:64:43:0b:c1:ee:7b:a9:9a:34:
         5b:75:6a:81:69:2e:ff:71:48:e1:6e:78:6a:ff:c2:8f:ac:0b:
         41:1b:af:2c:b9:44:fc:95:18:6b:a4:89:f7:36:a6:2d:aa:7a:
         98:c2:b1:1f:c9:d7:b2:a6:b8:4c:5e:c8:26:38:b8:87:43:4d:
         22:3f:0b:ce:d3:ce:89:b2:d8:de:cf:03:35:83:bd:b3:15:b0:
         20:dc:d9:54:8d:60:67:7d:dd:f6:39:f8:ec:77:48:29:aa:79:
         d8:ce:60:9b:a8:57:c6:fd:5c:e1:5a:42:4c:50:9f:ec:cc:61:
         8c:4b:38:4a:c3:4e:b6:da:32:49:40:e5:2d:af:5a:92:f3:85:
         2c:84:83:f7:d1:17:a9:fe:18:75:42:1a:9a:68:51:d5:fb:be:
         50:78:ed:90:f7:ec:a9:78:ea:57:05:6a:65:12:56:0b:54:39:
         96:eb:40:e7:ab:bd:9c:23:6b:a6:7f:2e:b8:c5:2a:e5:69:c4:
         50:7e:15:65:ba:a9:76:1f:1a:a5:f1:16:96:da:da:94:48:1a:
         a1:83:eb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 17:23:41 2024 by rpki-client on console-ams.rpki-client.org