Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138362e3233372e33322e302f32302d3234203d3e203238363538.roa
File:                     3138362e3233372e33322e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          P1qGjHwUBdXITGp14RoR3n4IT4zLD5fen5/W8uG0zJ4=
Subject key identifier:   D2:E4:6A:A5:55:F0:C1:66:B0:A9:76:DD:8D:1E:7F:81:81:8A:9D:8A
Certificate issuer:       /CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
Certificate serial:       568CCCC185C66FEB2DB2E6E395DA886A4A8AD367
Authority key identifier: E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138362e3233372e33322e302f32302d3234203d3e203238363538.roa
Signing time:             Tue 28 Nov 2023 02:56:21 +0000
ROA not before:           Tue 28 Nov 2023 02:51:21 +0000
ROA not after:            Tue 26 Nov 2024 02:56:21 +0000
asID:                     28658
IP address blocks:        186.237.32.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8c:cc:c1:85:c6:6f:eb:2d:b2:e6:e3:95:da:88:6a:4a:8a:d3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
        Validity
            Not Before: Nov 28 02:51:21 2023 GMT
            Not After : Nov 26 02:56:21 2024 GMT
        Subject: CN=D2E46AA555F0C166B0A976DD8D1E7F81818A9D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:e6:d9:6f:ca:e3:76:55:df:b9:ef:50:20:
                    f1:0a:44:6c:c5:d9:2f:05:75:ba:ab:04:9e:d4:57:
                    f1:e0:74:ff:bb:67:41:7a:bc:b7:b5:35:e0:6e:ab:
                    52:44:07:7b:6f:cb:4c:ba:92:e3:5d:1a:18:ee:fc:
                    03:95:65:f0:e4:9a:66:5d:bb:de:2e:33:b0:5a:c0:
                    0b:ce:3a:43:0e:0d:be:28:bc:f8:9e:a3:69:ea:23:
                    93:d0:8f:b5:e1:2f:09:6f:04:bf:14:d4:85:60:1e:
                    ca:9c:8f:9a:f6:60:c1:4c:16:88:73:f3:8f:b8:74:
                    cd:86:43:86:a7:35:2b:80:f6:96:17:a5:4c:85:6b:
                    ab:bd:8a:e7:f2:02:ca:3b:e6:3e:1e:8b:de:2a:e0:
                    07:36:f3:c6:e8:cb:61:b4:45:48:ea:24:2c:b3:e3:
                    41:ec:47:64:16:03:8d:ac:ed:da:41:19:bd:a4:d7:
                    32:3a:82:37:e6:da:a7:eb:6b:c5:44:a5:00:35:40:
                    45:86:24:8a:8b:ed:0b:c9:19:2d:3e:61:08:79:2f:
                    9c:d6:b1:af:d0:03:65:bf:1d:71:d4:c5:c1:0a:6d:
                    9c:e7:80:5e:b8:7a:46:79:5c:f0:ea:c3:2c:1c:39:
                    29:b1:27:42:3d:9c:0b:c1:3b:ab:aa:00:d9:82:27:
                    3f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E4:6A:A5:55:F0:C1:66:B0:A9:76:DD:8D:1E:7F:81:81:8A:9D:8A
            X509v3 Authority Key Identifier:
                keyid:E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138362e3233372e33322e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:55:e3:b4:f0:df:c7:b5:14:23:83:74:f5:af:30:90:59:f5:
         32:fb:72:07:12:d0:43:6c:a1:c0:26:ff:51:c2:80:c0:18:ca:
         9c:d4:0b:95:a6:ad:5d:36:a1:0c:79:3c:22:fd:bc:15:10:77:
         4c:e3:63:5c:fa:e8:b7:53:01:ef:58:e8:d3:d7:f1:c5:e9:10:
         e9:42:c1:ea:87:18:8a:0a:f0:1a:3c:ee:8c:65:92:ce:12:47:
         aa:e6:59:7c:b1:16:c3:f0:8f:bc:82:67:fa:a6:8e:52:2b:91:
         a2:05:84:67:a7:b1:f7:ac:21:ee:56:4f:5c:ff:37:71:87:ca:
         a6:6d:cc:55:af:8e:3f:86:e5:d1:7e:52:86:19:a0:09:72:e0:
         50:bf:07:a3:68:40:6c:38:10:96:e4:15:75:44:e3:13:72:e4:
         b8:c7:15:13:91:84:d1:98:05:c0:62:04:2f:6a:56:ce:e4:f4:
         ed:55:8b:cb:45:b0:a8:44:2f:f8:ea:c5:b4:4b:0d:0b:88:35:
         6e:a8:e0:c3:f6:55:7b:2f:d2:42:0d:f5:13:8a:c0:80:a4:84:
         3c:6a:29:9c:b5:a3:c0:61:78:19:bc:9d:1b:66:ed:b8:d3:48:
         45:1d:66:51:c6:8a:4f:52:91:fe:a7:10:ec:87:80:dd:92:38:
         ff:d5:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org