Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138362e302f32342d3234203d3e203631373834.roa
File:                     3133382e3138362e3138362e302f32342d3234203d3e203631373834.roa (raw, json)
Hash identifier:          Ks2askSmf0dZwbK8qx2o9X/u9XrE7HK81rHdFdpQnAg=
Subject key identifier:   FC:5D:06:67:ED:7B:2C:1D:C4:49:E0:C6:89:68:BC:54:2F:BE:3E:FA
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       6F873D82FD9D6F140A81F731ACFB827FDE838514
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138362e302f32342d3234203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:49 +0000
ROA not before:           Wed 03 Apr 2024 23:48:49 +0000
ROA not after:            Wed 02 Apr 2025 23:53:49 +0000
asID:                     61784
IP address blocks:        138.186.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:87:3d:82:fd:9d:6f:14:0a:81:f7:31:ac:fb:82:7f:de:83:85:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:49 2024 GMT
            Not After : Apr  2 23:53:49 2025 GMT
        Subject: CN=FC5D0667ED7B2C1DC449E0C68968BC542FBE3EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:a0:16:01:63:62:0e:7f:47:19:c1:22:83:
                    d5:84:9e:d7:29:a0:00:28:ea:f3:0d:aa:05:7b:b3:
                    8a:08:af:75:6b:e9:1b:65:c5:1e:e4:ef:27:77:a5:
                    a6:bd:0e:3a:ca:4c:32:f1:4a:98:0c:14:3c:6d:8b:
                    f1:34:63:2f:a5:f4:0c:80:e0:93:40:6c:2f:19:61:
                    21:89:fc:e1:19:81:12:2c:2f:ec:84:74:5a:06:62:
                    0c:f4:5c:59:52:44:e0:0b:17:eb:02:0f:f8:92:1d:
                    ae:d7:f8:6c:76:e4:73:eb:41:14:1b:cb:8d:44:68:
                    13:fb:43:f5:98:99:c4:48:30:fd:f7:6f:cd:c9:58:
                    b1:c3:67:25:b8:9e:08:ae:ea:6e:9f:fb:0f:b3:40:
                    9b:d2:b5:44:e0:ad:14:b4:74:e0:d5:86:aa:43:87:
                    ae:ff:a2:de:9f:76:a7:ab:7f:61:d7:55:5d:0d:b5:
                    30:de:e6:46:f6:4f:5c:28:2f:8a:2b:8c:0f:02:34:
                    9f:7b:4f:ce:37:a9:c9:2a:31:01:4f:cd:c4:2b:94:
                    4e:4f:4f:ff:a1:65:31:15:18:dd:d9:e0:7c:80:89:
                    0f:0a:41:25:62:17:05:55:da:b6:02:43:61:92:e3:
                    99:a4:ab:d6:18:c8:97:71:eb:7d:20:02:ac:0a:d7:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5D:06:67:ED:7B:2C:1D:C4:49:E0:C6:89:68:BC:54:2F:BE:3E:FA
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138362e302f32342d3234203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:b6:68:d4:4f:c6:23:14:2c:d8:18:1b:b8:6a:9d:b2:47:80:
         18:b5:6c:81:99:1e:3f:57:a7:9a:46:60:7d:33:15:53:a1:04:
         3f:c4:f1:74:e2:81:41:74:11:92:66:7b:08:a2:66:d1:1e:cd:
         5a:86:55:c6:7c:d7:40:90:04:1e:60:72:aa:f1:7f:41:ef:75:
         ac:4d:5e:62:4d:db:27:a7:53:9f:fd:4e:28:5d:a4:9e:f3:46:
         f5:e5:5f:6f:38:08:86:a8:fc:99:af:97:fd:10:12:b2:5d:c9:
         f5:99:ec:a2:a9:46:d7:ad:b0:43:96:52:d7:5e:f8:cb:14:b2:
         37:9f:fc:32:54:05:a1:7d:48:34:17:0e:57:b6:c2:2c:4a:29:
         1c:d6:de:0b:ca:f5:08:5d:46:41:61:15:04:75:7e:1a:90:a3:
         99:61:ea:57:dd:70:e3:aa:f0:32:ba:b3:69:d5:19:fc:d3:45:
         31:7e:2f:6c:53:48:3e:10:fa:01:1e:ca:b4:8c:62:30:7c:d5:
         4c:89:b5:b1:0d:09:be:74:e0:4c:be:f1:8d:37:a2:e4:5c:e3:
         ee:c4:42:f5:9e:13:db:5c:49:98:a5:7a:49:5a:6c:e9:58:68:
         55:29:50:93:58:36:3c:5a:65:98:e5:18:da:8a:5f:41:06:cc:
         9f:b2:68:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org