Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BP95tN8ZxLvso384R2aDFNP7Lw8GFWs7WuqfN9PqKqqo/0/3138362e3139332e3136302e302f32302d3234203d3e203533313337.roa
File:                     3138362e3139332e3136302e302f32302d3234203d3e203533313337.roa (raw, json)
Hash identifier:          c7Rp07baBz2us5WD+NgvR1k8yAdgjuLWoTRZHR+sFmA=
Subject key identifier:   3F:58:0F:04:33:34:C6:AC:59:88:2D:1A:6E:75:51:AD:70:C3:E2:BC
Certificate issuer:       /CN=075E1BDBC5BC129D6FD5D26458C64ECC9570E1AE
Certificate serial:       0183A18DB23DA37DD325154AEEB3AEABB8B09E60
Authority key identifier: 07:5E:1B:DB:C5:BC:12:9D:6F:D5:D2:64:58:C6:4E:CC:95:70:E1:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/075E1BDBC5BC129D6FD5D26458C64ECC9570E1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BP95tN8ZxLvso384R2aDFNP7Lw8GFWs7WuqfN9PqKqqo/0/3138362e3139332e3136302e302f32302d3234203d3e203533313337.roa
Signing time:             Sat 01 Apr 2023 20:00:00 +0000
ROA not before:           Sat 01 Apr 2023 19:55:00 +0000
ROA not after:            Mon 01 Apr 2024 20:00:00 +0000
asID:                     53137
IP address blocks:        186.193.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a1:8d:b2:3d:a3:7d:d3:25:15:4a:ee:b3:ae:ab:b8:b0:9e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075E1BDBC5BC129D6FD5D26458C64ECC9570E1AE
        Validity
            Not Before: Apr  1 19:55:00 2023 GMT
            Not After : Apr  1 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d2:c1:ab:09:35:16:d3:2d:41:09:89:25:aa:
                    7d:6a:ef:45:bf:e8:8b:e9:7f:bd:eb:9d:bb:81:d2:
                    96:84:f5:6a:10:df:7a:ac:73:a5:29:d8:d1:33:17:
                    67:f8:bc:04:2c:06:d0:38:dd:b3:e8:ca:80:ab:bf:
                    32:cf:82:49:20:12:93:14:48:65:cb:12:b8:7b:94:
                    3a:2b:7b:84:9c:8c:17:0f:76:8e:d9:ba:e2:85:6f:
                    87:24:a1:00:aa:60:d8:8e:cd:42:a8:d9:82:dd:78:
                    6f:a1:bf:8d:0b:ab:e2:b1:87:13:8a:db:6f:75:fc:
                    c1:86:75:c4:8b:c3:85:0e:3d:a2:8a:0e:e5:6d:d9:
                    d4:73:63:cb:45:76:25:94:83:ee:d7:29:c2:76:22:
                    aa:61:32:36:d9:1c:38:5f:b0:ef:2b:a0:5f:8c:e2:
                    d2:68:28:e3:90:00:da:e5:9e:f9:a2:c2:c5:70:d4:
                    28:86:21:4c:6f:6b:4d:e9:10:cb:61:d5:7e:ef:f0:
                    05:67:d7:11:ff:8b:f2:b3:40:ab:ee:08:f4:b9:e0:
                    2a:1f:52:bb:36:b4:f5:32:9f:2d:1d:d1:65:42:06:
                    b3:83:53:03:bf:89:bf:e9:2e:27:08:96:5a:ee:4b:
                    9d:48:e5:2d:65:90:6f:73:94:3c:db:96:d9:c0:12:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:58:0F:04:33:34:C6:AC:59:88:2D:1A:6E:75:51:AD:70:C3:E2:BC
            X509v3 Authority Key Identifier:
                keyid:07:5E:1B:DB:C5:BC:12:9D:6F:D5:D2:64:58:C6:4E:CC:95:70:E1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BP95tN8ZxLvso384R2aDFNP7Lw8GFWs7WuqfN9PqKqqo/0/075E1BDBC5BC129D6FD5D26458C64ECC9570E1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/075E1BDBC5BC129D6FD5D26458C64ECC9570E1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP95tN8ZxLvso384R2aDFNP7Lw8GFWs7WuqfN9PqKqqo/0/3138362e3139332e3136302e302f32302d3234203d3e203533313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c0:57:c2:2e:79:fd:0b:a9:c2:88:aa:30:31:0f:3e:a5:77:c5:
         c9:8c:d7:34:b7:57:df:da:08:38:89:2a:9f:fd:b1:83:25:45:
         27:7c:da:f7:e9:27:de:bd:a5:fa:fb:6a:26:98:7e:7f:7e:a2:
         0a:0f:73:16:db:c5:24:52:20:08:44:00:bc:04:63:46:83:a7:
         e8:2b:5c:f0:64:b1:84:76:28:52:de:ba:0a:e3:60:0e:e8:2d:
         3a:f7:05:df:c3:28:11:cc:01:c2:92:29:8b:35:b4:51:9b:ff:
         91:56:34:b7:4c:23:6e:bc:23:10:79:37:a1:52:20:9b:9e:4f:
         47:83:40:ff:ed:e6:79:8a:58:55:7d:48:5d:fb:9f:84:42:8b:
         8b:cf:52:9f:40:cd:80:2a:e7:d4:b1:78:2f:ce:36:af:11:de:
         ff:d5:4d:b0:9e:82:78:e1:39:fa:89:63:f1:81:27:df:b3:95:
         b1:40:65:72:a4:4b:8b:45:ee:64:17:ac:8f:5f:3d:17:e9:4b:
         b7:b9:4b:d3:c9:09:3d:18:9c:b4:69:f2:e9:0d:33:51:0e:74:
         46:dc:5a:e9:0c:14:cc:80:2b:73:92:ac:ed:a2:b5:ee:66:d7:
         55:e1:42:17:d3:43:6e:6f:c0:8f:60:bb:b5:e1:dd:6a:85:a7:
         f9:7b:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org