Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38362e302f32332d3233203d3e20323633383535.roa
File:                     3133382e3138362e38362e302f32332d3233203d3e20323633383535.roa (raw, json)
Hash identifier:          igZJXeBwoofelAkbwWYY1lLhVC3yqsSOAz95L3pQ9qg=
Subject key identifier:   3C:9A:E6:2E:AB:E6:35:39:B8:28:86:28:BD:48:8B:50:69:38:F6:6D
Certificate issuer:       /CN=CB79DFC1DF1822D301F97D5B20B19091DB3700ED
Certificate serial:       7302DFCD2ADA6DE60F99FD88069898D30AA26776
Authority key identifier: CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38362e302f32332d3233203d3e20323633383535.roa
Signing time:             Fri 20 Jan 2023 15:32:50 +0000
ROA not before:           Fri 20 Jan 2023 15:27:50 +0000
ROA not after:            Fri 19 Jan 2024 15:32:50 +0000
asID:                     263855
IP address blocks:        138.186.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:02:df:cd:2a:da:6d:e6:0f:99:fd:88:06:98:98:d3:0a:a2:67:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB79DFC1DF1822D301F97D5B20B19091DB3700ED
        Validity
            Not Before: Jan 20 15:27:50 2023 GMT
            Not After : Jan 19 15:32:50 2024 GMT
        Subject: CN=3C9AE62EABE63539B8288628BD488B506938F66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:3a:b4:5e:5d:4c:8d:ce:5a:c8:63:90:91:
                    c9:e8:d4:f4:0b:6b:e8:12:22:5e:f1:0a:15:e6:22:
                    b9:fd:73:f7:16:de:c1:f1:2a:c1:30:8c:fc:fe:bd:
                    06:ea:54:d7:0c:be:26:f4:4f:bc:3a:f8:c8:84:5e:
                    58:b3:dc:70:f3:cb:76:34:46:4e:af:d5:14:f6:4e:
                    4d:2e:92:21:74:71:2a:c8:e7:94:f6:d7:b8:2b:e6:
                    43:64:5f:7f:db:55:9b:3c:b9:91:2d:b3:68:25:79:
                    eb:1a:f8:bd:bf:36:19:ac:31:31:99:0a:11:bc:9d:
                    0d:ff:a2:2b:54:37:de:f7:00:52:1f:54:74:44:09:
                    76:c2:67:6f:09:21:af:94:da:68:95:81:af:2b:80:
                    99:96:13:f4:e2:68:84:ef:2c:8c:7f:2f:67:4c:c0:
                    0d:a9:6d:97:80:4c:99:5c:34:c0:7a:43:4c:56:7e:
                    f3:e1:78:7e:c9:ba:02:d2:65:d8:0d:76:84:65:d0:
                    29:b9:7e:29:ec:c4:66:93:78:c4:8e:dd:3e:8d:ae:
                    02:61:60:ad:e2:c6:9a:23:9d:0c:cc:17:3b:78:75:
                    5d:56:6d:98:10:18:a1:b1:1b:96:8e:02:4d:ef:df:
                    09:1d:dc:f3:90:78:ed:49:6a:be:35:a1:19:6b:48:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9A:E6:2E:AB:E6:35:39:B8:28:86:28:BD:48:8B:50:69:38:F6:6D
            X509v3 Authority Key Identifier:
                keyid:CB:79:DF:C1:DF:18:22:D3:01:F9:7D:5B:20:B1:90:91:DB:37:00:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB79DFC1DF1822D301F97D5B20B19091DB3700ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38362e302f32332d3233203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:03:7b:ac:ac:63:f3:d5:e0:7a:7f:e9:15:e3:5b:10:f8:63:
         7b:96:a8:10:aa:35:10:96:0e:9b:bb:f0:bd:3c:25:08:65:0e:
         26:73:7f:f6:04:ea:aa:25:3e:cc:d6:15:a0:ac:e1:ad:ab:7f:
         75:0b:c5:23:7a:28:e0:32:e0:cf:5a:22:de:3b:6a:28:a7:b0:
         44:b5:b7:85:83:39:0b:1a:92:94:a6:1c:12:88:c3:b3:9c:a1:
         16:ec:85:fc:fe:f6:87:cb:b9:c2:b7:6f:55:8d:aa:a1:34:44:
         b0:e8:67:64:bd:76:f2:a0:0c:ff:8d:47:23:8d:b1:60:49:e3:
         d8:87:fa:94:3a:9f:60:b7:c3:e9:f8:e5:e7:3b:bd:c7:af:c7:
         48:9f:03:fe:f4:19:1c:f0:e7:79:39:50:0a:51:83:58:ff:cc:
         30:05:d0:23:09:a1:32:6f:a6:bf:11:5f:d1:86:51:fa:39:1a:
         b0:97:24:09:99:ee:69:39:00:0d:11:0b:cd:1e:8e:3e:b9:c3:
         62:55:14:cf:8a:df:95:91:89:fc:79:3c:1f:f4:5a:89:d8:5f:
         e4:1d:ea:3e:33:12:89:f7:c7:a0:f6:51:2d:19:5e:fd:50:a0:
         58:3c:be:14:dd:2d:dd:16:d3:a0:71:a5:71:87:d5:7b:20:74:
         40:ed:74:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org