Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa
File:                     3138362e3233362e39362e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier:          GA89HcI3ndixknMpdRUPEYGtSEQl5qtEoFtxcP2AgxI=
Subject key identifier:   D6:25:29:37:DF:14:9C:28:32:66:39:B1:DC:92:04:2B:D5:3F:48:DB
Certificate issuer:       /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial:       032BA46A8AF9FCB5B51FB91365F1671D5EACEA93
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa
Signing time:             Tue 23 Jul 2024 11:51:18 +0000
ROA not before:           Tue 23 Jul 2024 11:46:18 +0000
ROA not after:            Tue 22 Jul 2025 11:51:18 +0000
asID:                     28667
IP address blocks:        186.236.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2b:a4:6a:8a:f9:fc:b5:b5:1f:b9:13:65:f1:67:1d:5e:ac:ea:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
        Validity
            Not Before: Jul 23 11:46:18 2024 GMT
            Not After : Jul 22 11:51:18 2025 GMT
        Subject: CN=D6252937DF149C28326639B1DC92042BD53F48DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d1:7e:0c:45:27:37:1f:5d:81:27:71:b5:a5:
                    b7:c4:d9:a5:1f:3e:87:61:33:0f:1d:fd:07:17:d4:
                    02:c3:9e:ba:93:1c:12:5b:bc:d5:87:65:b9:fa:6f:
                    4e:91:5e:6e:25:20:3b:d6:d3:ca:ba:a5:e1:88:0c:
                    99:c9:24:af:0e:3f:40:92:5d:32:23:1b:b4:3f:d9:
                    f3:f8:3e:f6:2a:4a:9d:fb:84:96:c9:11:0a:65:cb:
                    15:2e:b8:a4:56:5b:06:29:c4:9c:02:99:1e:f8:ac:
                    3e:79:45:15:1f:2b:2a:3f:7f:ab:2d:f8:3c:3b:a7:
                    d9:75:d1:16:f8:bf:47:f9:21:62:8d:7b:0e:6b:a3:
                    06:e7:77:14:50:e5:74:9f:b3:dc:a2:cb:cf:a0:36:
                    b8:7b:af:ff:ff:5d:d9:bd:ee:bb:b8:f9:c8:b3:a2:
                    04:3c:24:76:a0:d3:bd:a2:9a:eb:5b:c1:e8:3b:b5:
                    1e:03:59:cc:bc:cf:04:dc:ca:81:b3:ba:49:72:68:
                    1d:e3:54:01:61:be:a1:1b:6e:14:4a:63:bf:5b:cc:
                    ae:9d:fa:af:5b:e1:71:b9:a4:03:9d:cf:cb:60:37:
                    d4:90:70:a7:40:9d:55:d5:61:21:ba:1b:16:ea:31:
                    7f:21:61:12:43:ab:89:ac:55:74:ae:d7:c2:b1:89:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:25:29:37:DF:14:9C:28:32:66:39:B1:DC:92:04:2B:D5:3F:48:DB
            X509v3 Authority Key Identifier:
                keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         aa:f9:ed:18:3b:c2:4e:af:0f:42:ff:4a:17:25:0e:a6:87:3c:
         4f:3c:e0:77:fd:e2:0c:54:a7:dc:44:1a:b5:cb:c6:f7:18:36:
         a7:bd:56:a8:7e:77:5d:56:f0:2f:bd:b1:53:83:a4:71:99:25:
         6c:43:7d:4e:d9:64:cf:85:e2:f8:81:f8:46:c5:5e:00:fa:e4:
         4b:21:a5:ac:6d:a2:2e:05:2d:e2:7f:c2:37:5b:d6:db:cc:67:
         ed:7b:dd:9b:ec:ff:36:0b:ab:42:f9:7d:4c:1d:4a:c2:d1:0d:
         cb:f8:13:ff:88:b1:3e:24:39:3b:33:83:80:58:99:66:5f:61:
         2d:42:79:40:b0:cd:b8:5c:c7:43:17:74:b3:1e:6b:ed:e5:a6:
         43:b7:4e:c6:6c:f4:b2:df:3c:06:36:7a:6d:f1:32:33:7c:f9:
         04:37:31:a3:d1:99:cf:e1:ca:d6:fe:1d:b0:1b:11:57:0c:88:
         80:c1:82:29:7a:5d:76:50:51:cf:2f:43:e5:e5:85:c9:1b:f8:
         da:13:34:4e:2e:a7:b8:66:75:cd:b8:c6:6c:4c:67:77:ec:f9:
         73:cf:18:cf:6a:dd:cf:2d:5d:08:d7:c7:46:2d:6b:18:66:51:
         45:d5:8a:71:2f:be:6a:5e:83:bd:a1:b5:1e:6a:c8:e7:cf:01:
         be:a9:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:31 2024 by rpki-client on console-ams.rpki-client.org