Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BQx7AsG4MJF4qYCipc8YvXzP52151VHbGPYP7Wh7fFac/0/3138362e3139322e3232342e302f32302d3234203d3e203238313435.roa
File:                     3138362e3139322e3232342e302f32302d3234203d3e203238313435.roa (raw, json)
Hash identifier:          CAEj0U49tc0tWvuWRs8JUNUFtgWpQGlpFmUrQjPI5Jo=
Subject key identifier:   CB:4C:8E:6A:FB:20:07:30:98:88:A6:BA:C3:A6:8E:C1:2F:CE:74:E3
Certificate issuer:       /CN=39191597A25E742319780241FC2D1B7500DCCEDA
Certificate serial:       3D37346F1C5D071EEB734B97D0618D1E1B5B9FC5
Authority key identifier: 39:19:15:97:A2:5E:74:23:19:78:02:41:FC:2D:1B:75:00:DC:CE:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39191597A25E742319780241FC2D1B7500DCCEDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BQx7AsG4MJF4qYCipc8YvXzP52151VHbGPYP7Wh7fFac/0/3138362e3139322e3232342e302f32302d3234203d3e203238313435.roa
Signing time:             Wed 17 May 2023 14:00:00 +0000
ROA not before:           Wed 17 May 2023 13:55:00 +0000
ROA not after:            Wed 15 May 2024 14:00:00 +0000
asID:                     28145
IP address blocks:        186.192.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:37:34:6f:1c:5d:07:1e:eb:73:4b:97:d0:61:8d:1e:1b:5b:9f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39191597A25E742319780241FC2D1B7500DCCEDA
        Validity
            Not Before: May 17 13:55:00 2023 GMT
            Not After : May 15 14:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:04:f6:1d:a9:d7:59:58:c7:db:e0:a5:44:
                    a8:6b:8b:74:7a:ba:2e:28:e8:dd:12:59:b4:b9:ca:
                    a3:47:64:7b:be:0d:a8:a0:e8:6a:e4:cf:fd:65:09:
                    12:85:54:84:35:c3:ec:c3:3b:24:52:7a:8b:e8:48:
                    a3:b6:93:d9:45:c1:2d:f0:20:49:35:ea:c9:23:06:
                    68:2c:8e:de:b9:6d:1f:79:29:cc:60:82:2c:49:e5:
                    6d:b8:01:15:52:76:25:57:36:c4:2f:50:ee:a3:be:
                    d0:d8:f8:d8:14:bc:b5:01:f4:88:63:ba:2a:de:8c:
                    ff:e5:68:4d:1a:a2:d7:f2:1e:4c:73:e0:bf:72:b3:
                    b3:a8:1d:64:89:f5:07:84:b4:ae:94:4b:e8:3f:f1:
                    c0:c3:aa:a5:ae:9d:65:3e:ee:b4:8d:01:44:c7:17:
                    3a:55:21:ed:a0:5b:08:c3:91:a8:e8:0f:c5:ee:9e:
                    bf:b6:27:ca:59:12:ab:17:92:86:df:e0:e2:85:f5:
                    84:d4:40:0e:fd:ce:19:9b:2d:4b:bd:7b:ee:e1:4b:
                    d8:b2:fe:d7:f8:e2:bf:2c:a1:ec:70:60:81:7c:cb:
                    07:47:c3:41:e1:c8:8e:82:eb:b4:a0:57:33:78:64:
                    2c:1d:43:d5:c1:3b:c0:51:72:65:7b:8c:c5:e2:02:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4C:8E:6A:FB:20:07:30:98:88:A6:BA:C3:A6:8E:C1:2F:CE:74:E3
            X509v3 Authority Key Identifier:
                keyid:39:19:15:97:A2:5E:74:23:19:78:02:41:FC:2D:1B:75:00:DC:CE:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BQx7AsG4MJF4qYCipc8YvXzP52151VHbGPYP7Wh7fFac/0/39191597A25E742319780241FC2D1B7500DCCEDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/39191597A25E742319780241FC2D1B7500DCCEDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQx7AsG4MJF4qYCipc8YvXzP52151VHbGPYP7Wh7fFac/0/3138362e3139322e3232342e302f32302d3234203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:0c:97:d8:fa:b8:e5:f1:f2:e2:9d:d6:25:c4:e9:f3:26:
         9d:cb:e8:db:85:3c:e0:4d:1b:27:4e:1a:7f:b3:43:1a:c2:2d:
         6d:e7:b1:b3:c5:ea:a2:19:21:98:42:28:ab:09:a7:da:1d:ff:
         64:07:21:7d:4b:8c:af:48:4e:04:65:ac:28:61:44:6f:07:65:
         5d:8e:06:ed:8b:7a:9b:93:9e:1a:4b:23:51:cd:9c:9e:6e:cf:
         2d:66:17:7d:de:4d:df:57:44:f0:cb:bc:ba:9d:df:90:ef:c3:
         63:d4:4e:af:32:36:7b:d0:b9:a4:b4:a6:09:09:be:f0:54:08:
         2d:b8:ef:f8:b3:0f:95:19:f7:ec:5b:ce:e6:03:80:f2:df:76:
         9a:d6:b3:5c:78:d7:eb:16:5c:48:24:68:7a:72:14:d1:8c:20:
         33:d4:67:af:30:96:1c:e1:e7:51:13:ba:e3:75:2e:7a:8a:38:
         0a:3e:69:9a:e8:fb:5d:44:11:2a:79:5c:04:02:10:43:5b:ef:
         09:c2:1f:ba:71:e5:f9:3a:a6:3f:c1:3e:24:e0:ea:5c:14:59:
         a6:9f:ad:6b:1a:77:8c:10:8e:c2:b2:cf:81:c1:e8:93:eb:94:
         a8:ea:a3:6f:01:7b:11:26:f2:b3:d4:30:2c:50:6f:45:bc:c7:
         fa:e1:5a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org