Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3138362e3231392e3232302e302f32322d3332203d3e203631353838.roa
File:                     3138362e3231392e3232302e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          I1yZVXqsgW6PWdLcqGmPO9IUkPi0sl76lfINW2/e6EI=
Subject key identifier:   3F:A5:20:83:14:34:24:98:71:E0:D5:4D:B9:A4:94:DB:5B:D8:D5:AA
Certificate issuer:       /CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
Certificate serial:       3DD0D28E42C4A6EABD13BBAFDEB5CCA6FBBA3EAC
Authority key identifier: 75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3138362e3231392e3232302e302f32322d3332203d3e203631353838.roa
Signing time:             Wed 27 Sep 2023 19:58:19 +0000
ROA not before:           Wed 27 Sep 2023 19:53:19 +0000
ROA not after:            Wed 25 Sep 2024 19:58:19 +0000
asID:                     61588
IP address blocks:        186.219.220.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d0:d2:8e:42:c4:a6:ea:bd:13:bb:af:de:b5:cc:a6:fb:ba:3e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Validity
            Not Before: Sep 27 19:53:19 2023 GMT
            Not After : Sep 25 19:58:19 2024 GMT
        Subject: CN=3FA520831434249871E0D54DB9A494DB5BD8D5AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:9e:95:c4:f1:7d:3b:13:8d:a0:7a:94:6d:
                    b2:fb:ed:9d:4b:97:32:a0:06:e0:83:2f:f9:a2:9d:
                    4b:93:9d:2c:31:36:de:53:ca:16:b4:cc:21:30:74:
                    9e:c2:2f:56:9d:d5:c8:3e:26:2b:47:f7:2c:b1:a8:
                    88:d3:b4:59:ef:86:90:5b:2e:d4:e0:9b:f9:47:bd:
                    4d:58:b8:3e:57:44:5e:e3:ec:b5:65:d9:fd:08:97:
                    69:92:5c:6d:20:9a:aa:f3:1c:a0:53:e9:62:83:13:
                    e6:29:fe:3c:27:72:41:eb:33:34:d5:1f:ea:d2:25:
                    ea:60:ed:4f:f4:31:1d:cb:55:2d:cb:ea:85:c2:8b:
                    25:1a:a3:23:35:65:d8:b8:29:01:8a:2c:e3:23:c8:
                    96:9f:fe:cf:b2:76:64:3e:ce:69:63:cc:17:c0:52:
                    cf:6c:e5:e7:f8:6c:e2:fb:f0:b9:ee:85:70:54:0c:
                    91:36:09:54:0d:38:6e:39:a8:d8:5d:12:1e:b5:61:
                    a7:c2:4a:19:c2:f3:25:31:87:b3:6e:1d:62:5e:ee:
                    aa:62:4c:fa:dd:87:70:d4:3a:b8:e6:ad:23:e2:d4:
                    b9:24:8e:9a:75:f8:cc:75:3b:b2:02:a0:31:fa:aa:
                    08:a7:65:c1:db:be:7d:0a:3a:b2:9c:87:1d:0f:32:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A5:20:83:14:34:24:98:71:E0:D5:4D:B9:A4:94:DB:5B:D8:D5:AA
            X509v3 Authority Key Identifier:
                keyid:75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3138362e3231392e3232302e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:f7:b9:ef:7b:2d:3a:21:8c:3f:bf:60:bc:1d:da:7f:36:b9:
         4d:58:16:59:b2:cf:6e:01:4d:e6:aa:67:cc:c0:4c:c2:0a:7c:
         a3:71:f1:09:65:40:04:6e:37:90:98:47:03:ce:5f:a5:4e:df:
         6b:19:ed:e9:50:a1:0c:08:9b:cc:e1:a3:ec:40:29:0a:8a:e2:
         e7:05:a7:52:ec:11:a9:c0:20:41:33:88:db:67:de:58:88:9a:
         40:da:45:26:85:18:b5:86:b7:8d:25:f0:30:a6:9b:fd:a7:f0:
         45:5f:7e:f7:b5:fd:b0:d3:01:01:f2:1e:46:b1:88:b8:00:cd:
         73:a4:10:ce:81:b2:79:cd:ec:03:b1:8c:99:57:8c:59:11:14:
         d2:05:54:5d:64:b5:93:0f:6b:7d:f6:4c:62:95:0d:0f:a0:22:
         1e:1b:09:ba:b0:3e:d2:ee:ef:94:89:b3:3e:7b:3c:da:9a:0c:
         e2:05:af:a6:5c:90:0d:b3:ba:82:42:75:16:7a:fb:b1:c6:54:
         8a:a6:67:cd:7b:cf:1c:3b:ef:f8:0b:4c:58:c1:0f:88:ad:31:
         7b:a7:6d:ac:a6:71:fc:ec:79:ea:e8:07:65:f5:8d:03:cc:04:
         02:57:d8:29:05:ae:79:4c:57:ee:37:bf:75:f8:5f:17:3a:ff:
         de:c1:fd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org