Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3233332e39322e302f32322d3234203d3e20323633303938.roa
File:                     3138362e3233332e39322e302f32322d3234203d3e20323633303938.roa (raw, json)
Hash identifier:          q4U6GjtKVamL/S5P0GWUCdXeHXfiD6FqkRSz4dEOd/I=
Subject key identifier:   53:42:99:52:54:17:59:6B:A2:26:21:BA:BE:74:60:00:A6:FF:CB:F5
Certificate issuer:       /CN=3C4C3C3027D89C77D47071FA8A930915BA89BC2C
Certificate serial:       1250953AC75953306311F1E7C0243FA14CC0E094
Authority key identifier: 3C:4C:3C:30:27:D8:9C:77:D4:70:71:FA:8A:93:09:15:BA:89:BC:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4C3C3027D89C77D47071FA8A930915BA89BC2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3233332e39322e302f32322d3234203d3e20323633303938.roa
Signing time:             Fri 22 Sep 2023 03:00:10 +0000
ROA not before:           Fri 22 Sep 2023 02:55:10 +0000
ROA not after:            Fri 20 Sep 2024 03:00:10 +0000
asID:                     263098
IP address blocks:        186.233.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:50:95:3a:c7:59:53:30:63:11:f1:e7:c0:24:3f:a1:4c:c0:e0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C4C3C3027D89C77D47071FA8A930915BA89BC2C
        Validity
            Not Before: Sep 22 02:55:10 2023 GMT
            Not After : Sep 20 03:00:10 2024 GMT
        Subject: CN=534299525417596BA22621BABE746000A6FFCBF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:32:93:72:49:d8:5b:30:44:8a:63:2b:f3:
                    93:34:11:79:2f:fb:93:c0:69:80:5e:35:ee:ea:5a:
                    27:b6:dc:83:3c:ac:61:44:e6:1f:81:d3:94:56:d6:
                    d4:a2:eb:39:05:9b:cc:2c:b2:ec:89:45:68:f2:82:
                    7a:be:40:34:0d:68:a3:6c:8e:ba:ab:14:8b:84:40:
                    dc:6e:96:2a:20:51:ca:a3:38:d9:05:43:8a:2e:65:
                    6a:c3:9b:e3:17:3d:b4:db:e3:0a:44:f3:e9:fb:cd:
                    43:7d:69:2c:f9:5c:00:be:a8:48:43:eb:c4:88:96:
                    f1:5c:52:53:98:85:5d:f3:99:47:09:d9:f6:e6:78:
                    13:c8:d7:59:b5:1d:f0:bc:81:f4:98:f5:6d:35:da:
                    61:03:55:50:b6:40:05:bb:b2:7e:5f:6c:06:7c:fc:
                    3b:f8:fa:f8:26:64:24:be:c1:21:0f:a2:1f:a3:21:
                    d6:c8:c0:78:25:75:b1:68:08:65:dc:b2:42:35:51:
                    57:51:1f:da:4a:c3:b5:66:64:cb:4e:98:45:3e:f3:
                    b9:ab:a5:87:3e:a5:46:03:2c:98:7b:8e:8e:0e:68:
                    02:e2:2c:7d:b5:e1:0c:9e:57:a0:ff:89:7e:90:d1:
                    c8:dc:1e:38:21:a2:01:a0:05:e8:a1:bd:d3:c3:e2:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:42:99:52:54:17:59:6B:A2:26:21:BA:BE:74:60:00:A6:FF:CB:F5
            X509v3 Authority Key Identifier:
                keyid:3C:4C:3C:30:27:D8:9C:77:D4:70:71:FA:8A:93:09:15:BA:89:BC:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3C4C3C3027D89C77D47071FA8A930915BA89BC2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C4C3C3027D89C77D47071FA8A930915BA89BC2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3233332e39322e302f32322d3234203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:9f:31:17:a5:9f:19:2d:dd:66:35:83:ec:34:8c:11:24:d3:
         fc:d3:d8:73:4f:6c:00:31:5b:bd:ba:c8:ca:b8:4c:32:1a:02:
         34:6f:c0:a8:4d:82:31:43:b6:87:f8:68:2d:98:f7:cc:d4:ef:
         dd:23:d1:d4:fd:93:96:18:69:b4:e5:96:9b:ca:fe:2a:d3:7b:
         f2:e9:82:87:61:61:27:e6:6a:b7:bb:78:4a:10:94:32:d9:47:
         5f:ae:dc:ab:7f:45:bc:bc:10:a6:00:59:8b:6d:40:5a:66:ea:
         80:b3:45:e0:b1:93:12:ab:7a:48:52:23:a2:54:65:e5:28:55:
         0f:db:04:81:33:b8:c5:06:14:5c:75:5e:0a:0c:6d:c6:78:84:
         ee:a0:1d:03:b3:26:73:47:39:0f:04:f6:ab:29:93:25:dc:84:
         08:22:e8:2c:28:6c:16:ef:97:d1:b8:d1:7b:70:e1:97:ed:57:
         6e:bc:48:88:9b:bf:52:62:b8:4d:8d:57:78:12:40:d7:bc:b4:
         41:d3:00:38:e2:3e:81:03:31:a6:1b:49:61:c7:2d:0b:13:de:
         08:74:87:56:d7:40:32:13:d7:6f:cf:16:b0:72:c5:9c:fb:12:
         78:06:00:fb:f2:7d:df:2c:c9:71:55:5b:51:2e:29:04:9b:99:
         d0:ba:a5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org