Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38362e302f32342d3234203d3e20323731313131.roa
File:                     3139322e3134302e38362e302f32342d3234203d3e20323731313131.roa (raw, json)
Hash identifier:          8NUi89VzcmdQIgqM5flW/lfryZkqbtIqZ47XlZWJUdo=
Subject key identifier:   3A:25:B9:3F:FF:EC:67:D4:44:63:BE:0C:84:19:2B:42:D2:5D:64:74
Certificate issuer:       /CN=3AD5972290586B5BEB9106DC1754301150A63C87
Certificate serial:       08C6ED0E14E1AB355B091990293E29263D41D833
Authority key identifier: 3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38362e302f32342d3234203d3e20323731313131.roa
Signing time:             Wed 20 Mar 2024 19:28:57 +0000
ROA not before:           Wed 20 Mar 2024 19:23:57 +0000
ROA not after:            Wed 19 Mar 2025 19:28:57 +0000
asID:                     271111
IP address blocks:        192.140.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c6:ed:0e:14:e1:ab:35:5b:09:19:90:29:3e:29:26:3d:41:d8:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD5972290586B5BEB9106DC1754301150A63C87
        Validity
            Not Before: Mar 20 19:23:57 2024 GMT
            Not After : Mar 19 19:28:57 2025 GMT
        Subject: CN=3A25B93FFFEC67D44463BE0C84192B42D25D6474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:50:42:66:43:5d:3a:d1:8d:48:52:25:b1:c0:
                    21:bb:b9:6c:d8:d0:c5:3e:27:29:14:9b:ec:d2:0b:
                    1c:bf:9f:44:85:16:e4:98:a9:88:58:a4:5a:e0:05:
                    ed:c1:88:af:41:d9:8f:53:d9:49:0a:25:6e:97:6c:
                    e1:66:58:46:b9:a9:95:d2:61:88:6b:39:68:b1:ff:
                    49:83:39:5b:47:69:9d:4b:c3:83:b2:68:9c:4d:41:
                    3f:e4:fa:73:f7:97:30:91:35:dd:28:5f:6a:df:01:
                    84:53:55:a4:4a:1e:6d:d0:b4:7f:94:80:7d:89:c2:
                    9f:d7:02:5a:92:e2:11:0d:00:b9:3e:82:52:45:bb:
                    81:e6:d3:a1:a5:e4:9d:1e:a9:14:c8:59:70:41:f9:
                    c4:12:24:84:50:33:50:cf:0d:50:e6:b5:65:e3:60:
                    e1:b4:92:cb:79:4d:ae:f1:ed:56:01:11:83:ff:0e:
                    e5:28:c2:9a:d1:19:b6:11:d2:bc:a7:be:da:2e:ec:
                    cf:15:4d:09:13:6f:69:f3:b0:2e:4c:c9:a5:7f:d5:
                    ee:bd:7f:85:09:8d:4e:9d:71:33:cf:0f:08:25:5a:
                    3f:50:f5:76:64:b6:b1:4a:0e:21:27:c8:59:9d:aa:
                    bc:3e:7d:c2:3d:80:4f:49:c2:89:f2:ac:ce:af:d5:
                    5e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:25:B9:3F:FF:EC:67:D4:44:63:BE:0C:84:19:2B:42:D2:5D:64:74
            X509v3 Authority Key Identifier:
                keyid:3A:D5:97:22:90:58:6B:5B:EB:91:06:DC:17:54:30:11:50:A6:3C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3AD5972290586B5BEB9106DC1754301150A63C87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AD5972290586B5BEB9106DC1754301150A63C87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38362e302f32342d3234203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:89:42:01:b0:e9:0f:0a:30:ea:9e:db:d5:78:58:9f:12:ae:
         12:5a:f8:02:eb:6b:80:f6:3f:d7:f7:b7:f6:34:fb:c5:a8:c0:
         99:41:24:a6:d7:37:47:97:e3:48:31:7b:27:92:11:b5:9b:65:
         eb:bf:65:a6:7d:78:e3:09:4a:ca:26:0b:4d:ae:17:6f:3b:7f:
         42:75:88:ea:89:06:aa:5c:d6:ae:e0:ea:08:63:c9:b1:78:18:
         a9:38:0f:74:bd:f2:c6:c0:83:bb:3b:d8:08:86:0f:d0:26:bd:
         ab:85:a4:98:6d:bf:3f:d9:f3:a1:7e:a4:af:de:a6:c1:37:cd:
         6a:61:2d:1a:df:89:74:89:be:c3:e8:82:64:fc:2b:c5:a4:bb:
         ce:b1:b6:08:ea:dc:f3:33:b0:71:85:7a:1f:6d:0d:05:ae:e5:
         98:25:e2:6a:ba:39:17:f0:91:09:0a:3c:54:24:26:1b:67:6a:
         cc:52:79:57:1d:27:26:9d:9e:b6:40:7d:24:17:d4:8d:3b:07:
         67:b8:97:3e:ce:75:e8:a6:8f:45:99:e4:c3:cc:e1:94:49:0c:
         32:26:53:48:9d:6f:7a:a8:2e:6c:fa:64:4d:67:ea:80:8c:ce:
         68:1f:72:5a:e6:76:60:58:ea:e5:48:44:93:b7:9d:eb:d1:af:
         36:70:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org