Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3138362e3139322e3234302e302f32302d3234203d3e203533313338.roa
File:                     3138362e3139322e3234302e302f32302d3234203d3e203533313338.roa (raw, json)
Hash identifier:          tt0l24veJ2ALP5qrdgl+a2YTMlOfOfX6HUlSuOHuOM8=
Subject key identifier:   8A:BC:E6:81:71:A1:75:C0:3F:3C:59:F9:E0:84:20:4B:D3:36:26:0A
Certificate issuer:       /CN=9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3
Certificate serial:       5B418575A1B4E192E9479D0B6C4BC3FEC489780D
Authority key identifier: 9F:7B:B8:1C:7C:61:11:73:1D:1A:97:D3:C8:F3:93:5E:48:48:C3:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3138362e3139322e3234302e302f32302d3234203d3e203533313338.roa
Signing time:             Mon 23 May 2022 18:22:52 +0000
ROA not before:           Mon 23 May 2022 18:17:52 +0000
ROA not after:            Mon 22 May 2023 18:22:52 +0000
asID:                     53138
IP address blocks:        186.192.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:41:85:75:a1:b4:e1:92:e9:47:9d:0b:6c:4b:c3:fe:c4:89:78:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3
        Validity
            Not Before: May 23 18:17:52 2022 GMT
            Not After : May 22 18:22:52 2023 GMT
        Subject: CN=8ABCE68171A175C03F3C59F9E084204BD336260A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:bd:68:0e:7b:da:96:13:f6:f4:bc:48:c9:
                    cc:a2:07:22:1a:4b:1a:d5:74:fe:7a:cf:d5:26:40:
                    69:16:f8:69:cf:3e:c9:8e:40:d4:f8:1e:07:29:eb:
                    21:b0:bb:50:04:f2:cf:ad:25:b5:7a:b1:c3:4e:03:
                    b5:7b:09:88:8e:81:d0:88:66:68:d6:ed:3b:5a:72:
                    3a:2b:ec:f4:6c:fe:28:a7:10:dd:84:99:bd:0d:90:
                    3b:8b:10:be:d8:f2:28:35:fa:e0:d3:b5:0b:c7:41:
                    b6:c0:48:cc:99:d9:07:31:6d:b5:bb:0c:d7:da:7a:
                    23:11:73:a2:c0:b4:c5:9a:85:5e:dd:d4:8c:41:fa:
                    c7:e1:bf:cc:a5:ca:6f:16:48:a5:33:6d:7d:6f:af:
                    8f:23:24:d0:c2:34:bd:d9:3e:e3:71:a5:fe:2e:51:
                    e6:4a:d4:5b:a3:4c:da:16:6b:ff:6b:ab:c1:90:90:
                    d0:db:a4:67:77:e3:a2:e8:6d:4b:58:c0:05:7d:e6:
                    cb:13:24:27:fb:f2:d9:ba:db:d9:3a:d3:5b:27:eb:
                    f5:08:b6:c2:4b:5a:ba:ae:08:ca:7e:cb:69:1e:82:
                    a2:e4:0c:5c:27:03:e9:88:7f:c6:18:07:9f:ad:dc:
                    43:10:d0:f4:b7:1d:3c:73:2d:99:a4:5a:89:72:27:
                    5a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BC:E6:81:71:A1:75:C0:3F:3C:59:F9:E0:84:20:4B:D3:36:26:0A
            X509v3 Authority Key Identifier:
                keyid:9F:7B:B8:1C:7C:61:11:73:1D:1A:97:D3:C8:F3:93:5E:48:48:C3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F7BB81C7C6111731D1A97D3C8F3935E4848C3E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3138362e3139322e3234302e302f32302d3234203d3e203533313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:0c:25:5d:7d:59:8d:e2:ba:6c:1d:b9:89:9c:aa:26:52:6f:
         ba:72:68:e4:68:39:e0:b1:69:55:8f:41:49:2c:e8:3a:06:7e:
         90:59:0a:f9:7d:41:67:87:6d:4d:75:5f:d1:ea:d4:4c:71:6c:
         5a:87:3c:cb:23:2d:e3:2a:76:c1:3f:6e:34:50:2c:80:f5:79:
         26:50:2c:92:32:45:aa:7d:21:59:24:5f:f9:f7:41:5d:53:07:
         4d:1e:37:2b:73:83:cf:5e:26:55:35:36:49:42:c6:00:1e:22:
         14:7c:42:05:ec:1a:0f:2f:85:b7:fb:b8:43:9b:33:59:b2:f3:
         7c:d5:bf:1b:53:b2:f4:60:72:5a:29:e5:1f:a8:4e:ad:6d:5a:
         ff:34:f8:27:72:40:8a:05:8b:a1:bc:15:16:13:93:57:09:26:
         64:1b:18:3e:8b:a1:5b:fd:b4:a3:4a:3f:8b:d9:77:00:4e:b8:
         a2:b9:6f:84:70:c4:39:ee:c0:87:16:2f:94:96:8c:60:3d:a9:
         0d:d9:61:26:eb:c5:90:c5:e6:86:ca:d3:08:ca:25:30:bb:88:
         cb:b0:bb:fb:fa:8c:0d:6d:e4:97:c5:10:e5:56:4b:4c:bc:b3:
         6e:59:f4:2c:c7:6f:6d:45:0e:87:bd:06:d0:5b:04:ef:95:80:
         bf:d9:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org