Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/0/3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa
File:                     3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (raw, json)
Hash identifier:          tLBKZSjRsyCeOstn2kbGtJ+X8mCDcA6pwnWY7gR3ox0=
Subject key identifier:   28:8D:23:03:48:5F:E8:9B:0F:40:14:D0:CE:13:C0:7F:F2:69:83:0F
Certificate issuer:       /CN=E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB
Certificate serial:       0ECF139B2295A2E6A12B860ED5745CC9C6B74FE8
Authority key identifier: E9:46:48:FC:D5:D3:A1:CD:B1:AC:08:10:C8:D2:7B:9E:8B:21:FF:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/0/3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa
Signing time:             Sun 31 Mar 2024 16:33:10 +0000
ROA not before:           Sun 31 Mar 2024 16:28:10 +0000
ROA not after:            Sun 30 Mar 2025 16:33:10 +0000
asID:                     53154
IP address blocks:        186.209.224.0/20 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:13:9b:22:95:a2:e6:a1:2b:86:0e:d5:74:5c:c9:c6:b7:4f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB
        Validity
            Not Before: Mar 31 16:28:10 2024 GMT
            Not After : Mar 30 16:33:10 2025 GMT
        Subject: CN=288D2303485FE89B0F4014D0CE13C07FF269830F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:dd:1e:1f:98:39:88:02:08:6e:c2:b8:01:
                    ea:a0:4a:f3:7b:43:6a:d4:fb:b4:43:90:2f:43:39:
                    1e:ca:b7:59:66:4a:88:f0:85:09:f0:df:fe:38:b8:
                    df:22:91:8c:65:ae:fd:2b:41:84:2c:18:00:bb:1c:
                    83:05:ea:2b:d5:3d:af:ba:8d:38:b7:fd:01:fd:aa:
                    91:ea:a3:b7:0d:63:2c:b9:f9:99:be:fd:f6:b3:58:
                    7d:e4:ef:c1:04:1e:97:45:2f:53:23:2d:66:02:7e:
                    72:15:ed:2e:db:9c:0e:d8:06:ac:f2:6b:87:36:e6:
                    a3:46:84:10:82:86:53:0c:d3:92:ce:ba:83:69:c0:
                    e5:b4:79:0a:0b:ff:de:4e:51:c7:7a:73:15:f5:80:
                    95:2c:f6:0e:38:e5:f2:9d:5a:eb:21:df:21:1c:00:
                    24:a8:8e:3d:30:78:de:a6:13:4c:76:c7:eb:7a:03:
                    c2:e7:9e:d4:64:cb:36:20:2c:02:be:85:7a:36:a2:
                    69:4b:14:2e:65:8f:e5:64:1b:86:28:48:64:b2:63:
                    26:26:d0:88:f7:dc:0a:89:50:58:16:9a:5b:08:bf:
                    2d:19:fe:db:65:96:17:1b:f6:0e:fc:89:7e:3f:4d:
                    89:fd:d3:56:54:be:2a:38:0d:40:f4:ea:dc:6a:34:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8D:23:03:48:5F:E8:9B:0F:40:14:D0:CE:13:C0:7F:F2:69:83:0F
            X509v3 Authority Key Identifier:
                keyid:E9:46:48:FC:D5:D3:A1:CD:B1:AC:08:10:C8:D2:7B:9E:8B:21:FF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/0/E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E94648FCD5D3A1CDB1AC0810C8D27B9E8B21FFAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/0/3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:a8:21:29:48:80:70:bd:a6:96:38:37:6d:74:ce:23:66:c1:
         dc:95:64:5f:bb:15:d8:2c:59:a8:e9:f2:f5:17:86:39:24:a8:
         f6:c9:98:07:03:b8:b6:a4:70:d7:40:69:5d:9a:2a:5b:a1:16:
         3d:d4:95:37:7f:b1:02:ba:e8:bf:fe:a7:8a:4d:38:2e:6f:58:
         8f:54:1a:29:4f:c2:0d:20:74:f1:29:0d:bf:6e:59:8d:3b:6d:
         a2:12:ae:a8:85:ce:8e:94:e7:b9:b7:58:4b:99:1c:11:4c:46:
         5c:db:50:94:06:be:93:19:3c:0a:ba:66:f7:db:e9:d1:3d:38:
         7a:00:20:2d:67:a8:d1:0f:76:59:45:11:a7:47:52:61:6e:e6:
         d5:68:3f:2b:64:d1:89:a7:27:bd:b9:c4:49:6c:1d:b3:de:00:
         69:52:55:e1:af:b4:09:92:da:1a:f5:0e:1a:46:3f:39:38:a7:
         4b:df:74:6b:03:98:2f:46:7b:80:74:74:ac:8a:36:bb:e1:33:
         7d:7e:59:6c:dd:f5:4b:d2:dc:98:39:f4:dc:fe:64:e2:7a:03:
         a1:b0:dd:eb:55:79:1e:44:08:08:6f:69:dc:10:83:0a:67:bc:
         70:34:c4:fe:84:35:04:50:dd:56:d7:9f:09:d6:cc:cc:bd:34:
         bb:7a:94:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org