Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3235332e302f32342d3234203d3e20323633343135.roa
File:                     3138372e3130382e3235332e302f32342d3234203d3e20323633343135.roa (raw, json)
Hash identifier:          Cj6nSMFuaZpTKK0F+Mu94sRNlia2hivOVZ4KDkrRwA8=
Subject key identifier:   CE:30:7C:AB:BD:2D:E9:4D:A9:84:ED:18:D2:85:CD:08:62:B1:C8:99
Certificate issuer:       /CN=55035838712C7386E139CC98D786476DBAB79648
Certificate serial:       3C0A7E6B1BB2A56126DD7690EFF150EADB0F1001
Authority key identifier: 55:03:58:38:71:2C:73:86:E1:39:CC:98:D7:86:47:6D:BA:B7:96:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55035838712C7386E139CC98D786476DBAB79648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3235332e302f32342d3234203d3e20323633343135.roa
Signing time:             Tue 06 Dec 2022 15:10:45 +0000
ROA not before:           Tue 06 Dec 2022 15:05:45 +0000
ROA not after:            Tue 05 Dec 2023 15:10:45 +0000
asID:                     263415
IP address blocks:        187.108.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0a:7e:6b:1b:b2:a5:61:26:dd:76:90:ef:f1:50:ea:db:0f:10:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55035838712C7386E139CC98D786476DBAB79648
        Validity
            Not Before: Dec  6 15:05:45 2022 GMT
            Not After : Dec  5 15:10:45 2023 GMT
        Subject: CN=CE307CABBD2DE94DA984ED18D285CD0862B1C899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:58:15:9c:00:c8:7e:df:ed:60:2b:0b:56:d1:
                    7d:3f:0c:8f:84:4b:ba:a7:de:01:76:77:a6:16:42:
                    f0:00:cd:be:bb:60:2a:63:42:f0:9b:1a:ce:6b:15:
                    22:17:a5:4a:81:1e:c7:5b:e4:36:8e:ad:80:7e:65:
                    47:fa:0f:cc:02:1a:0a:74:23:b7:64:40:4b:76:64:
                    ee:91:1a:2b:e1:0e:26:bc:7c:d4:2c:6f:2d:2f:ad:
                    65:e8:f0:7d:c8:aa:8e:7e:dc:39:c0:ca:48:52:49:
                    75:1f:c0:58:6c:53:a0:d1:11:f5:e1:83:91:75:70:
                    27:82:49:41:6d:94:ac:3e:b7:3e:06:2d:19:1d:28:
                    a7:a2:00:cf:fb:d5:14:e1:de:4d:7d:92:89:a3:0b:
                    9d:1c:74:12:85:5b:20:49:19:bd:f5:e7:41:ab:3f:
                    ed:34:6c:e2:1b:3e:4f:73:57:41:5b:1b:1b:11:47:
                    71:b9:c1:79:63:f9:14:04:8b:1e:c6:33:d0:eb:5d:
                    46:3f:1c:4c:98:f4:c1:0d:b6:7d:44:2c:d2:a0:d8:
                    0e:74:66:2f:b2:a7:d4:c6:55:44:85:68:b4:74:77:
                    95:43:94:29:6c:c2:87:e8:f9:ad:de:b2:ce:34:bc:
                    09:c5:f5:84:ca:d8:11:d0:1e:d2:aa:b1:b2:d3:66:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:30:7C:AB:BD:2D:E9:4D:A9:84:ED:18:D2:85:CD:08:62:B1:C8:99
            X509v3 Authority Key Identifier:
                keyid:55:03:58:38:71:2C:73:86:E1:39:CC:98:D7:86:47:6D:BA:B7:96:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/55035838712C7386E139CC98D786476DBAB79648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55035838712C7386E139CC98D786476DBAB79648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3138372e3130382e3235332e302f32342d3234203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:d4:32:7d:4c:31:01:ac:8f:33:4a:db:55:60:2a:d7:a2:5d:
         f7:7a:b0:f0:a0:56:97:28:96:28:e7:9a:0d:69:d7:3b:10:bb:
         14:1c:10:5c:62:36:c6:40:a9:5b:4b:92:95:ad:6d:8e:32:4d:
         2c:2f:8c:3a:f0:93:88:b7:a3:0b:7c:39:3d:d7:a0:ee:db:7f:
         19:9a:18:a1:a7:b8:e1:10:d2:c0:6a:82:de:3f:cf:c8:0d:44:
         0f:4b:d7:34:04:66:13:e1:81:63:b6:e4:18:81:a4:5f:8d:54:
         32:9f:0f:0b:90:1b:83:cd:75:8e:21:76:92:d2:c9:21:32:17:
         a4:87:78:3e:c9:53:37:6a:c8:26:7f:35:4b:eb:6b:3a:36:87:
         2f:e2:f0:24:46:27:32:58:1a:65:e0:ee:1b:de:13:67:34:e1:
         94:2d:de:0d:e7:1e:dd:52:92:39:a2:9f:45:f6:ef:0c:c6:3f:
         c0:23:44:0b:07:58:ae:73:68:20:5e:04:ab:3a:21:42:14:76:
         27:69:ba:10:38:3b:40:21:11:21:40:18:93:32:4b:07:65:0b:
         26:0f:24:48:fc:2b:c9:7b:d4:b8:9e:36:24:4f:4b:2c:a5:bb:
         bf:6e:32:f8:7f:db:64:71:0e:39:94:24:7d:70:a0:a8:be:53:
         c5:95:16:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:09 2023 by rpki-client on console-fra.rpki-client.org