Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3231312e302f32342d3234203d3e20323633313031.roa
File:                     3138362e3232352e3231312e302f32342d3234203d3e20323633313031.roa (raw, json)
Hash identifier:          9rD9aLXN0RznahW+1d93OKIk1ZvG4XcyMnCNwDpMytg=
Subject key identifier:   57:84:2D:F6:AB:D8:9E:31:E6:30:93:96:48:65:EF:D1:BF:19:A5:2B
Certificate issuer:       /CN=895319749718933407E89602C41B7343E53F19D4
Certificate serial:       1313DAC0C1B0A5AD066642D8B0FE704C39D21989
Authority key identifier: 89:53:19:74:97:18:93:34:07:E8:96:02:C4:1B:73:43:E5:3F:19:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895319749718933407E89602C41B7343E53F19D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3231312e302f32342d3234203d3e20323633313031.roa
Signing time:             Wed 17 May 2023 14:26:26 +0000
ROA not before:           Wed 17 May 2023 14:21:26 +0000
ROA not after:            Wed 15 May 2024 14:26:26 +0000
asID:                     263101
IP address blocks:        186.225.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:13:da:c0:c1:b0:a5:ad:06:66:42:d8:b0:fe:70:4c:39:d2:19:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895319749718933407E89602C41B7343E53F19D4
        Validity
            Not Before: May 17 14:21:26 2023 GMT
            Not After : May 15 14:26:26 2024 GMT
        Subject: CN=57842DF6ABD89E31E63093964865EFD1BF19A52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:0e:08:76:26:b7:fb:3e:de:80:83:ab:16:
                    ed:3d:97:ca:52:4b:02:b7:e9:16:d0:65:57:54:16:
                    af:75:62:1b:2a:20:72:d1:9a:79:2d:d7:6a:de:26:
                    0d:28:8d:ec:ce:49:24:bf:89:cb:60:c1:cd:95:e9:
                    ee:24:58:e8:37:af:7a:d9:df:24:a0:c4:a2:82:31:
                    65:24:ad:68:b3:91:61:f9:a2:81:01:10:c3:82:41:
                    3d:75:6d:74:e5:64:b3:d3:d0:bd:86:1c:0b:16:09:
                    fa:64:93:8a:e9:b1:0b:1b:28:78:72:f2:84:5c:0c:
                    d0:1f:f0:2f:53:84:14:08:d6:e2:46:e0:de:98:40:
                    08:ea:7a:51:1f:18:5a:69:48:0f:b9:43:6b:99:26:
                    a8:2c:77:eb:ca:70:f7:52:ad:4f:44:29:e2:cb:55:
                    74:5b:0f:71:e8:70:f2:f3:38:c2:6e:5c:c6:c2:dc:
                    73:75:16:7f:34:c9:db:cd:40:ea:a8:09:70:d9:80:
                    ae:4f:c9:6d:a9:5e:40:12:f6:72:4e:5b:0a:bf:47:
                    c2:dc:97:ec:88:4b:57:4b:3e:20:9d:29:d7:2f:85:
                    29:23:50:73:95:89:61:e2:c4:02:73:ad:fa:dc:b8:
                    0e:75:bc:1a:75:51:09:e8:e0:b4:22:2c:4f:2e:c5:
                    94:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:84:2D:F6:AB:D8:9E:31:E6:30:93:96:48:65:EF:D1:BF:19:A5:2B
            X509v3 Authority Key Identifier:
                keyid:89:53:19:74:97:18:93:34:07:E8:96:02:C4:1B:73:43:E5:3F:19:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/895319749718933407E89602C41B7343E53F19D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/895319749718933407E89602C41B7343E53F19D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/3138362e3232352e3231312e302f32342d3234203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:d8:13:69:cb:41:b3:99:9b:ef:dd:75:aa:30:81:09:a1:b8:
         4c:9e:72:49:68:c8:a1:23:84:5b:3d:62:30:da:78:95:28:63:
         55:0c:10:d3:b8:94:4b:e4:77:28:74:d3:21:e5:a3:9e:d9:8e:
         7f:01:b4:29:22:5f:cf:9b:f0:81:e8:ae:3f:de:f6:ce:75:a9:
         c4:74:89:30:e5:0d:ac:52:a7:57:02:9b:73:07:ac:09:32:e1:
         28:c9:5f:e7:42:12:85:5d:40:6d:d7:e6:41:d6:94:21:7a:3e:
         bd:98:3e:50:94:a4:3c:49:49:0d:e8:59:82:f4:ac:e3:a8:cc:
         eb:39:85:02:f3:ed:7c:f9:fd:aa:65:37:cc:c8:93:64:36:81:
         3a:76:d5:ec:9b:a2:d2:28:01:ac:79:ec:51:1b:91:24:27:48:
         54:82:95:88:5d:2b:28:76:0a:e7:13:e8:80:5d:96:2a:00:36:
         76:74:3e:aa:8f:0b:35:b0:2b:60:90:ba:52:85:be:3c:a2:86:
         1e:d3:59:32:fe:3e:c3:e5:74:11:8e:71:d5:15:b1:d4:f4:cc:
         12:d2:4a:d6:8f:b3:3e:5e:b8:a7:9b:4a:a6:e0:25:99:d4:74:
         b6:a9:64:98:19:a5:0b:24:93:32:59:e5:7a:19:eb:a7:19:1c:
         dd:38:db:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org