Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e31332e302f32342d3234203d3e203238313335.roa
File:                     3138372e38362e31332e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          KUXRrgc3F+MkqxH8Pl7qVs0FJtB0ggLGEM2Ua9dWuXE=
Subject key identifier:   12:22:14:F8:4A:1D:36:63:B7:C4:37:6D:83:D1:7E:E2:CB:B0:32:58
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       341CDA128A36BDC762ECE319B24F99AEC55E9804
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e31332e302f32342d3234203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:17 +0000
ROA not before:           Wed 13 Mar 2024 11:58:17 +0000
ROA not after:            Wed 12 Mar 2025 12:03:17 +0000
asID:                     28135
IP address blocks:        187.86.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:1c:da:12:8a:36:bd:c7:62:ec:e3:19:b2:4f:99:ae:c5:5e:98:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:17 2024 GMT
            Not After : Mar 12 12:03:17 2025 GMT
        Subject: CN=122214F84A1D3663B7C4376D83D17EE2CBB03258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:64:58:ae:3e:ef:48:50:de:b5:f4:27:39:13:
                    04:68:2f:46:94:1d:d7:67:71:bf:66:c1:e7:ef:be:
                    02:df:08:70:c5:bc:15:1c:d4:84:8d:ab:cd:7b:71:
                    eb:e9:73:45:ad:6e:4f:82:b8:05:3f:bb:24:04:1e:
                    31:4a:2a:6e:6b:ef:1c:ea:1e:95:e5:95:ca:15:02:
                    b0:f8:11:5a:00:03:61:1f:02:47:bd:08:dc:72:e3:
                    e5:00:ef:5d:95:3e:31:67:1d:83:43:18:6d:d6:f9:
                    91:14:c6:b7:53:66:cb:01:cb:67:56:e9:92:90:6c:
                    2b:90:e1:19:28:ea:d3:8a:14:32:93:39:c4:02:f2:
                    a6:0c:a9:e4:01:90:76:ec:e1:6f:7b:e9:a1:07:09:
                    62:81:3a:a4:b6:9c:b9:21:34:84:05:8e:d5:cd:11:
                    35:cd:d3:1b:0a:a1:b9:76:96:2e:01:c5:c9:83:3a:
                    a7:f0:6b:b7:be:1f:d7:36:68:5c:e5:5d:f3:ed:f0:
                    4a:cb:14:62:27:8d:9e:c2:0b:4d:31:1f:7e:91:cb:
                    3d:0b:16:17:f9:b0:93:33:df:db:90:84:90:31:2d:
                    df:bb:9f:ec:d3:95:e6:aa:9b:58:19:18:38:6c:8b:
                    e5:29:17:8b:cc:3b:92:ed:0b:34:c2:27:b1:2e:a5:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:22:14:F8:4A:1D:36:63:B7:C4:37:6D:83:D1:7E:E2:CB:B0:32:58
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e31332e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:80:e0:50:6c:49:33:48:1c:7a:a7:fd:2a:fc:fc:5b:2b:8f:
         6e:02:0e:b4:15:cf:1a:6c:b9:31:95:86:2b:8f:58:2d:3a:b8:
         4b:0e:15:2b:b0:b8:f7:9d:55:12:f9:22:9f:dc:26:e4:14:ae:
         11:8c:94:10:fe:d0:40:0c:25:a1:37:83:29:1e:6e:d0:72:6a:
         8d:74:99:ad:09:5e:a9:6f:81:ed:f7:f6:f1:28:e0:f9:38:45:
         6a:c1:8e:bb:c5:c7:11:83:c4:be:1f:b5:c5:23:ae:30:cb:be:
         d9:6e:1d:41:dd:18:4d:d7:28:0b:43:ee:69:4a:6c:3f:7d:b6:
         1e:ad:d8:79:0f:9a:cc:6d:f8:ce:ba:26:b0:4a:8c:48:89:a3:
         07:8e:c7:21:e3:70:ce:3e:08:56:b4:b4:9c:23:a3:d3:8c:ef:
         3c:c2:3b:32:0a:a9:70:50:18:5d:3a:7d:85:5e:0d:07:1c:71:
         73:69:09:3a:3a:4c:5a:33:13:dc:10:ce:6f:30:a1:9a:ec:37:
         2a:6c:f7:b2:c8:63:fc:af:14:db:31:ba:eb:5d:95:0c:77:ff:
         06:a3:62:51:dd:ff:d2:17:a2:a2:3a:3b:f0:d4:09:6b:6e:3f:
         ec:dc:5e:2f:16:44:af:32:50:20:f6:7b:f3:99:80:f7:ad:32:
         9d:fc:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org