Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138362e302f32332d3233203d3e203631373834.roa
File:                     3133382e3138362e3138362e302f32332d3233203d3e203631373834.roa (raw, json)
Hash identifier:          OQyP65BZHM9c4BXR/+0f3btDaU3pzJaW6OIHQfSylio=
Subject key identifier:   36:FA:61:ED:97:EB:6A:EE:48:2F:82:DE:17:F4:F9:9A:79:AB:5F:87
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       17C8282CDF0BE47569BE2161A6D70D16D4207A1C
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138362e302f32332d3233203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:50 +0000
ROA not before:           Wed 03 Apr 2024 23:48:50 +0000
ROA not after:            Wed 02 Apr 2025 23:53:50 +0000
asID:                     61784
IP address blocks:        138.186.186.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c8:28:2c:df:0b:e4:75:69:be:21:61:a6:d7:0d:16:d4:20:7a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:50 2024 GMT
            Not After : Apr  2 23:53:50 2025 GMT
        Subject: CN=36FA61ED97EB6AEE482F82DE17F4F99A79AB5F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:93:ef:c0:2e:fa:4c:2b:a2:28:ca:58:3e:
                    11:4e:69:b1:d5:ef:f2:a8:08:1b:0d:40:a4:3b:6f:
                    77:10:e8:88:a3:bf:d3:3f:4f:5a:d5:35:bb:d2:a3:
                    cc:8c:d7:09:ee:7c:a2:7f:54:e4:05:bd:4c:f8:84:
                    3c:5f:96:ef:b7:f0:f4:80:ab:b7:3d:c2:37:22:7d:
                    b1:c0:38:10:a4:7e:f7:1e:05:e0:3e:9e:81:f7:f7:
                    d9:5b:3d:3d:e6:82:59:da:23:a5:9a:4e:61:53:ba:
                    7f:e4:b5:02:6d:b7:7d:91:b2:19:84:99:0d:78:6e:
                    bf:62:50:49:0d:f4:df:aa:ef:f5:d4:f4:ac:a0:bb:
                    19:39:ed:c4:5e:04:0d:2a:e5:bf:02:0e:2f:c4:b1:
                    4a:c2:6d:a5:5a:a7:f3:66:36:76:e0:05:e6:4f:28:
                    39:5f:c3:e8:57:49:c6:87:f3:80:b8:1b:a2:47:65:
                    05:b0:f5:4d:67:e0:6e:0e:5c:0f:b2:42:64:63:d3:
                    33:b6:ba:f7:cc:9b:43:1d:a1:14:60:02:fe:6d:b0:
                    8c:5b:f2:9a:ff:72:65:2b:e1:6e:ad:a7:8b:9a:d1:
                    c9:85:95:d0:dd:dc:d4:8d:71:c2:d0:51:e0:12:c1:
                    69:b8:67:29:22:63:d5:6b:f0:8a:64:e2:7c:62:49:
                    ca:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FA:61:ED:97:EB:6A:EE:48:2F:82:DE:17:F4:F9:9A:79:AB:5F:87
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138362e302f32332d3233203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:77:90:e3:2d:65:0d:0b:03:a6:52:28:3e:32:0f:84:d0:14:
         a7:1e:bc:05:07:95:53:4b:14:db:4d:b2:9a:b3:6d:91:70:9f:
         ff:5b:74:8a:70:63:45:29:cc:81:9a:75:25:e7:33:b1:ed:ba:
         5a:8a:de:fd:9d:95:24:81:15:89:7f:df:78:4f:b3:66:22:9c:
         0c:e0:7a:49:32:ca:71:27:c5:b9:42:39:c7:12:7f:94:28:70:
         b3:14:fe:d0:ed:a2:ac:c9:b4:0b:12:e3:5a:a1:88:f8:f2:b4:
         ec:9c:8f:78:10:4d:68:3c:19:9e:3a:16:02:77:15:ee:5b:cc:
         9f:f8:cc:2f:0d:7c:dd:32:ec:90:18:66:87:b1:13:ec:14:39:
         22:65:c9:cb:9e:4d:d9:65:90:2b:96:ca:ab:be:74:42:cc:25:
         3e:82:40:cc:e7:50:b3:d6:19:79:d8:c5:b3:53:93:db:94:c9:
         b8:a2:c9:be:2d:3d:70:4e:b0:31:14:9d:62:c2:71:f0:bc:84:
         9d:0d:07:7c:f4:77:e9:b2:ff:4c:31:06:ea:60:1d:75:25:f5:
         f7:80:aa:cf:9b:1e:f2:d8:98:6e:89:9c:3d:74:2d:fc:b4:91:
         57:f6:5b:59:e2:84:d2:df:12:23:4a:cc:a8:ae:99:59:52:74:
         a4:58:6d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org