Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
File:                     3138362e3231312e39362e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          9+fKkKiNiL4ZENJX13NrcIfIWnyFw2y/vFtoSBMCLNY=
Subject key identifier:   EA:96:4D:D8:7C:F0:AE:54:FE:FA:FB:A1:C1:DA:AE:02:C1:EA:AD:D7
Certificate issuer:       /CN=FF8022FCD112C507FDC1D72A4931605EF74BC817
Certificate serial:       6AE4BEBF4EB2D64F06F6F640EEFAE01556AE81B9
Authority key identifier: FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
Signing time:             Thu 04 Apr 2024 11:47:44 +0000
ROA not before:           Thu 04 Apr 2024 11:42:44 +0000
ROA not after:            Thu 03 Apr 2025 11:47:44 +0000
asID:                     53062
IP address blocks:        186.211.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e4:be:bf:4e:b2:d6:4f:06:f6:f6:40:ee:fa:e0:15:56:ae:81:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8022FCD112C507FDC1D72A4931605EF74BC817
        Validity
            Not Before: Apr  4 11:42:44 2024 GMT
            Not After : Apr  3 11:47:44 2025 GMT
        Subject: CN=EA964DD87CF0AE54FEFAFBA1C1DAAE02C1EAADD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:ba:64:45:e8:18:33:13:8c:18:db:68:12:
                    96:53:81:93:45:4d:9e:0e:58:da:2f:77:17:99:3c:
                    cf:f3:cf:bb:b9:76:87:70:7f:8f:4a:43:b8:d4:84:
                    79:5d:d6:e5:ee:6d:05:6c:f4:84:93:2d:25:46:f8:
                    a0:3b:5d:16:c9:47:0c:69:ba:fd:83:e9:03:a6:99:
                    73:37:aa:c1:2c:b2:a7:ab:31:4f:fa:cf:36:43:0f:
                    c1:41:43:c4:ed:41:b1:43:72:0c:f9:43:e7:3f:04:
                    c8:5f:4f:b8:9e:b4:36:8d:4f:60:fb:d6:9e:06:96:
                    2d:08:9f:99:a4:95:c2:75:ab:41:7d:e0:57:44:e7:
                    b1:1e:79:6e:73:4a:95:9d:73:54:78:28:fd:1c:ad:
                    0c:c7:a1:f1:2d:d6:f2:26:1b:c3:c3:56:cc:3a:e3:
                    21:31:72:a8:5b:98:cf:f8:c6:ba:14:b9:09:e9:0b:
                    70:90:81:b2:fb:bc:88:b9:15:b7:50:63:7d:23:2c:
                    29:90:7d:2c:27:39:16:cc:68:f8:61:ce:94:99:50:
                    63:7b:e5:ea:f8:8e:62:2d:2a:fc:21:c1:75:26:7d:
                    bd:e5:cc:f5:6c:c5:9f:6a:4f:34:1b:ad:a7:ef:8a:
                    30:4e:4d:79:34:e8:84:dd:d7:7a:32:b6:05:4a:34:
                    cd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:96:4D:D8:7C:F0:AE:54:FE:FA:FB:A1:C1:DA:AE:02:C1:EA:AD:D7
            X509v3 Authority Key Identifier:
                keyid:FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/FF8022FCD112C507FDC1D72A4931605EF74BC817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:28:0d:82:45:3f:e9:c9:2b:3b:e7:65:1e:73:65:81:2f:4b:
         3b:fd:0e:fb:ff:0c:4c:d5:16:27:b4:2b:7f:c3:a8:58:21:ef:
         f7:d0:2c:40:44:d6:cc:e4:8a:2a:33:26:d1:f4:3c:3a:83:d3:
         65:88:42:87:94:60:90:59:ca:64:59:88:8b:72:ba:31:22:2c:
         d3:c6:e4:94:20:51:ef:5b:52:4d:19:a5:38:cf:ba:f4:6a:be:
         8c:3a:65:a5:d4:8c:60:c2:31:91:5a:d1:bf:d6:d5:5e:da:85:
         fb:c7:dc:dc:46:41:d2:83:f5:96:48:cf:ea:31:ca:e8:d4:d2:
         17:7c:e0:73:fb:91:8f:83:a2:be:ef:f8:0d:e8:1c:10:b7:c0:
         00:5b:2f:c6:df:bb:42:0d:4f:63:5c:70:83:9a:fa:ac:61:71:
         79:d2:98:60:5d:f3:17:a5:27:ac:e7:e2:9c:04:95:ef:c0:7f:
         43:f5:23:50:8d:3a:3a:7d:c4:ad:f8:40:93:b5:3f:c9:9f:68:
         be:df:84:8d:d8:02:34:67:56:c9:bf:93:b8:46:95:27:9a:09:
         b8:04:19:93:d3:5e:53:9d:f1:73:78:70:da:a0:4c:66:d5:d9:
         1f:fd:60:2c:8e:f4:d6:90:87:d4:1f:65:1c:30:ab:91:8a:03:
         94:f2:62:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 02:33:01 2024 by rpki-client on console-ams.rpki-client.org