Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3138362e3232342e31362e302f32312d3234203d3e20323632373535.roa
File:                     3138362e3232342e31362e302f32312d3234203d3e20323632373535.roa (raw, json)
Hash identifier:          8TKUewwoh1qFKr/LoMqWhRAHta8Gi5S/OoKuHONqPqo=
Subject key identifier:   2D:6F:7B:D1:AB:8A:6B:3C:F6:41:9F:DB:0F:73:E1:70:E9:85:F1:6C
Certificate issuer:       /CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
Certificate serial:       4E4783220AB25638CF73705AC1C902741D412DCE
Authority key identifier: 81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3138362e3232342e31362e302f32312d3234203d3e20323632373535.roa
Signing time:             Wed 31 Jan 2024 18:00:00 +0000
ROA not before:           Wed 31 Jan 2024 17:55:00 +0000
ROA not after:            Wed 29 Jan 2025 18:00:00 +0000
asID:                     262755
IP address blocks:        186.224.16.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:47:83:22:0a:b2:56:38:cf:73:70:5a:c1:c9:02:74:1d:41:2d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
        Validity
            Not Before: Jan 31 17:55:00 2024 GMT
            Not After : Jan 29 18:00:00 2025 GMT
        Subject: CN=2D6F7BD1AB8A6B3CF6419FDB0F73E170E985F16C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d2:e7:5d:17:68:96:73:1b:7c:1a:69:8d:b5:
                    e2:41:9e:59:e3:5d:ce:c7:e3:36:7a:b9:a3:94:a2:
                    38:99:42:8b:66:d9:c5:9b:1a:83:cb:1f:d2:0b:aa:
                    e8:20:dc:be:ad:b4:e8:d4:eb:d5:93:b8:cd:84:29:
                    97:61:98:5a:50:3c:59:03:cd:07:48:02:53:ab:4a:
                    f2:bb:70:ee:76:7e:37:63:28:6f:6f:e1:bd:ab:97:
                    22:6d:75:f7:d0:18:43:f6:02:ac:8c:9b:23:0e:fc:
                    2c:0f:11:19:5e:53:25:d9:bf:12:67:42:c6:2d:86:
                    71:ce:b9:07:d1:77:cf:4b:79:f3:9b:a5:09:01:2b:
                    64:ac:25:c8:7d:2c:80:c2:ea:fa:fb:ee:95:44:bb:
                    49:5d:fe:46:30:aa:df:52:6d:1f:e7:87:d8:97:bb:
                    e9:94:48:bc:73:bd:cf:39:44:13:61:1d:57:89:d0:
                    88:c4:fd:e2:0c:98:de:12:fb:06:82:fa:f9:69:00:
                    d5:4d:83:f4:83:41:b2:ba:e1:3d:c6:b2:29:85:77:
                    ba:11:50:c0:b0:51:e8:bc:f7:aa:30:f7:f6:71:29:
                    ba:63:fd:68:35:3b:e4:42:3f:5c:5d:d3:cb:da:73:
                    a6:a5:7d:3e:50:a0:5e:65:6b:6f:ca:7d:4f:81:ba:
                    2d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6F:7B:D1:AB:8A:6B:3C:F6:41:9F:DB:0F:73:E1:70:E9:85:F1:6C
            X509v3 Authority Key Identifier:
                keyid:81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/3138362e3232342e31362e302f32312d3234203d3e20323632373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:29:eb:d7:a3:0b:a4:a4:72:31:bd:8c:b1:4a:7c:4c:d8:b8:
         dc:32:a1:d3:6c:24:19:dc:40:39:8a:9e:5d:e5:fa:0d:51:b7:
         87:66:4a:87:fd:dc:56:7d:63:c0:cf:87:28:14:1b:69:d1:df:
         bd:64:2b:1c:c7:bf:d8:96:e8:1f:fa:ca:19:56:2d:6b:a3:e5:
         61:58:db:4e:bc:be:ca:95:a3:bc:5c:aa:e2:1c:31:f0:5a:85:
         3e:ed:56:de:35:80:27:14:ce:47:d9:62:77:fb:41:ee:72:22:
         e2:c1:6c:ce:e4:5b:06:fe:79:87:5b:37:92:12:6f:73:85:7d:
         28:43:38:fa:4d:3f:60:7c:3a:85:e0:e3:45:66:7f:d6:8a:04:
         06:3d:06:5f:b9:ca:cc:99:23:49:61:14:55:98:4b:a8:93:93:
         86:9b:e8:a7:a2:c1:ab:80:1a:2e:99:f9:02:4e:66:f8:ad:26:
         56:f6:de:5f:65:88:99:7e:25:61:e3:3e:23:58:5e:69:12:9d:
         ea:a3:48:1c:9b:12:32:7d:8b:90:5b:62:05:6a:d5:f8:b8:2c:
         fd:2e:b3:ab:d3:37:fc:e2:ee:6e:cc:93:15:24:ed:13:5b:a4:
         41:08:2c:2b:3c:61:8c:3b:b0:1c:6b:62:8d:13:6f:33:bf:d8:
         af:fa:87:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org