Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/3138362e3233322e3138382e302f32322d3234203d3e20323633303731.roa
File:                     3138362e3233322e3138382e302f32322d3234203d3e20323633303731.roa (raw, json)
Hash identifier:          yccRn2sYgIynXl1clarTO39mi6d0xjTWFl9d3hfA9y4=
Subject key identifier:   9E:5D:05:FC:EA:AE:82:2F:3F:3A:84:84:15:93:2C:57:51:AA:CF:05
Certificate issuer:       /CN=2CB826CB06C695182F68FD4CB91D342C0DF2FB6C
Certificate serial:       606F63DA0B9AF91C1793D7C664D9D061F087F0D6
Authority key identifier: 2C:B8:26:CB:06:C6:95:18:2F:68:FD:4C:B9:1D:34:2C:0D:F2:FB:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/3138362e3233322e3138382e302f32322d3234203d3e20323633303731.roa
Signing time:             Tue 25 Jul 2023 20:43:04 +0000
ROA not before:           Tue 25 Jul 2023 20:38:04 +0000
ROA not after:            Tue 23 Jul 2024 20:43:04 +0000
asID:                     263071
IP address blocks:        186.232.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6f:63:da:0b:9a:f9:1c:17:93:d7:c6:64:d9:d0:61:f0:87:f0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CB826CB06C695182F68FD4CB91D342C0DF2FB6C
        Validity
            Not Before: Jul 25 20:38:04 2023 GMT
            Not After : Jul 23 20:43:04 2024 GMT
        Subject: CN=9E5D05FCEAAE822F3F3A848415932C5751AACF05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:c8:e6:95:bb:ff:56:a0:ec:45:a5:9e:70:
                    24:9c:4e:a3:ca:b1:f5:83:f1:a4:fe:50:cc:42:43:
                    f6:81:33:44:fb:a3:37:f7:58:58:f0:0a:e3:ba:6b:
                    3b:3a:95:8f:4a:48:be:74:a5:ca:d2:45:58:ae:aa:
                    4c:0d:86:a8:24:ce:62:b2:fa:8a:c8:9a:cc:a5:c4:
                    76:3b:6c:49:d3:c4:3f:fe:86:2b:a3:be:40:61:21:
                    17:be:e7:f6:5d:b2:e0:cb:28:48:7b:d2:11:7e:de:
                    c3:c2:af:7e:54:f4:35:de:19:15:72:5c:a4:83:78:
                    4d:de:5e:26:05:94:8d:8f:e8:85:7a:5f:bc:7b:35:
                    84:e2:ec:aa:5c:ad:9a:93:10:b4:62:69:70:39:e2:
                    21:28:da:93:c6:e3:08:13:2c:9b:60:9b:c6:cf:53:
                    c1:af:40:e5:51:29:9b:19:86:fd:65:ab:2c:a7:7f:
                    0d:6d:06:9c:9e:90:95:e7:4c:d9:50:1b:56:30:b9:
                    05:44:1b:bc:4b:33:b3:68:29:d5:f6:45:33:3c:ae:
                    1d:bf:33:28:46:ab:f5:4d:f4:2d:88:70:63:d2:db:
                    d3:2a:48:ee:21:67:66:a6:23:c8:a0:1d:0d:f2:17:
                    9a:e9:60:90:36:ba:74:aa:36:1a:88:c3:06:53:00:
                    f5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5D:05:FC:EA:AE:82:2F:3F:3A:84:84:15:93:2C:57:51:AA:CF:05
            X509v3 Authority Key Identifier:
                keyid:2C:B8:26:CB:06:C6:95:18:2F:68:FD:4C:B9:1D:34:2C:0D:F2:FB:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CB826CB06C695182F68FD4CB91D342C0DF2FB6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/0/3138362e3233322e3138382e302f32322d3234203d3e20323633303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:7e:d0:7b:97:e1:73:a0:ae:93:38:9b:1c:f5:37:1e:3a:
         45:60:a0:db:1b:cd:4d:97:a4:b0:a9:64:dd:60:10:5e:d5:a0:
         a8:7f:5f:82:b4:5c:17:36:91:6c:00:9a:50:d3:f9:0b:7d:6c:
         37:69:89:da:e0:fb:13:2f:32:3f:39:47:33:8b:bd:c5:c4:25:
         48:99:4e:65:0d:c3:a0:ad:79:f0:4f:30:48:03:07:07:d7:c7:
         5e:a0:ae:5d:6b:1d:d0:5f:ef:75:66:ef:89:8d:d2:f9:cb:7c:
         4f:66:e5:61:93:15:6d:b7:5f:97:80:5f:66:ba:b7:6d:e2:c3:
         4a:c1:01:10:1f:e7:6e:f8:29:cf:09:0a:e4:8a:54:2e:82:a9:
         9f:a2:80:5c:e7:55:a6:29:da:8f:69:9e:cb:4c:f3:7c:dd:c1:
         53:54:0b:f4:0a:6e:23:81:c7:09:eb:67:fb:43:76:78:11:84:
         54:0a:98:b0:d3:ec:56:d7:c6:e3:79:b6:1e:db:de:a5:35:0b:
         a5:56:a9:9d:29:74:6b:e2:4a:57:d6:95:13:34:33:c2:4e:6c:
         4b:a7:95:a8:a2:eb:a9:e2:c9:be:50:01:76:3a:0e:3f:95:df:
         45:c8:ce:58:2e:f1:fd:c0:39:67:c1:b3:e9:e2:fe:5b:e7:04:
         84:77:51:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org