Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3234382e302f32322d3234203d3e203631373435.roa
File:                     3138362e3231392e3234382e302f32322d3234203d3e203631373435.roa (raw, json)
Hash identifier:          X59gq+7tu+EVzpkFI5KPQKmo03apmcxa+bnaZKwipCw=
Subject key identifier:   35:43:7B:19:BE:BA:DC:82:F2:CB:BA:F9:17:2E:21:EC:0A:FC:3E:61
Certificate issuer:       /CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
Certificate serial:       0B82FFE2F58F902BD3A179866C346F54B661D8B9
Authority key identifier: CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3234382e302f32322d3234203d3e203631373435.roa
Signing time:             Mon 25 Nov 2024 13:58:00 +0000
ROA not before:           Mon 25 Nov 2024 13:53:00 +0000
ROA not after:            Mon 24 Nov 2025 13:58:00 +0000
asID:                     61745
IP address blocks:        186.219.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:82:ff:e2:f5:8f:90:2b:d3:a1:79:86:6c:34:6f:54:b6:61:d8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CECEE953A375AC085E59078AAB4DC678DA6D7A20
        Validity
            Not Before: Nov 25 13:53:00 2024 GMT
            Not After : Nov 24 13:58:00 2025 GMT
        Subject: CN=35437B19BEBADC82F2CBBAF9172E21EC0AFC3E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:6d:2c:e1:a0:0a:f7:b8:ba:03:f9:f9:9b:
                    ad:ae:80:f6:72:1f:b7:f8:9a:a7:36:8b:d8:37:f0:
                    eb:93:54:65:87:ae:28:dd:e6:b5:ae:57:16:a0:ad:
                    7e:b7:4b:14:99:63:5b:bd:4c:73:c5:96:67:4b:d0:
                    d3:78:cb:0e:f8:50:cd:77:a7:72:5a:ff:e2:a8:58:
                    c1:e0:0a:cb:02:c3:e9:3d:40:b0:9c:65:8a:61:d4:
                    33:4c:7e:ea:17:68:89:e7:4c:d2:b8:67:21:96:6f:
                    45:f0:ef:75:12:31:fe:24:81:1d:e8:9c:e4:61:4f:
                    cb:2f:55:d1:e9:9a:01:a2:f0:4b:bf:b5:21:d7:ee:
                    f6:0e:5e:68:6d:0c:12:2a:d8:d8:b7:bd:58:83:1d:
                    98:22:bb:4c:c3:e0:e9:bf:f8:77:5e:64:f6:b9:e7:
                    8f:90:ba:6d:5b:9b:d3:ef:1b:94:76:0c:5e:22:dd:
                    9a:3e:c9:a3:3e:cb:13:9e:4f:c1:ef:55:bc:d5:52:
                    56:b0:62:76:5b:4f:9f:b3:95:0c:9a:88:79:81:b4:
                    f5:fb:ea:65:9d:03:39:a1:9f:ef:66:f8:0f:43:d2:
                    20:05:0f:f0:a5:42:2e:0f:d8:27:7d:8a:8f:28:bd:
                    33:1c:9c:f2:18:03:ee:ed:9c:df:55:c7:31:50:5d:
                    c8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:43:7B:19:BE:BA:DC:82:F2:CB:BA:F9:17:2E:21:EC:0A:FC:3E:61
            X509v3 Authority Key Identifier:
                keyid:CE:CE:E9:53:A3:75:AC:08:5E:59:07:8A:AB:4D:C6:78:DA:6D:7A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CECEE953A375AC085E59078AAB4DC678DA6D7A20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/1/3138362e3231392e3234382e302f32322d3234203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:1a:38:24:2a:42:5a:dd:3b:46:df:1c:97:7f:a9:c2:c2:9c:
         6c:f3:0a:28:bc:8a:16:bc:5a:ff:20:69:68:d6:b1:bc:e3:18:
         72:33:7d:3c:76:42:c5:1a:9e:0b:eb:ff:1e:2f:d0:bc:df:2b:
         af:8e:9a:97:e5:8b:3f:5d:02:87:77:23:eb:47:cc:b3:17:a8:
         5f:3b:a7:a2:71:5f:44:42:70:67:f6:45:ef:6b:17:43:59:29:
         83:0f:90:bb:00:95:86:2c:f6:13:f2:37:56:35:39:9b:a6:4d:
         57:90:ec:22:57:3a:16:48:97:90:55:b6:25:37:03:57:30:32:
         f7:c8:f8:df:86:ee:c9:0f:52:c1:2a:a6:74:34:1d:fb:c0:d5:
         08:4b:ca:f1:ea:3a:b9:2d:2d:6f:f8:99:15:a1:f4:10:b5:20:
         f2:dc:b8:02:eb:ab:4a:03:b1:2e:47:18:af:3c:aa:25:b7:4d:
         64:da:07:e9:29:b5:c1:f3:ed:4a:b6:75:a4:32:a2:bb:f3:2e:
         a8:a3:d4:f3:ad:4a:02:10:2e:7d:5c:32:e7:89:19:d8:a9:a6:
         5b:f2:ed:73:e8:da:2e:ca:fc:3e:15:bd:96:c0:d8:3b:96:7b:
         f7:96:05:ef:9d:69:11:c8:8d:f1:4b:e0:19:75:4a:5b:cb:55:
         16:d6:10:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:53:09 2024 by rpki-client on console-fra.rpki-client.org