Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e32342e302f32322d3232203d3e203238313335.roa
File:                     3138372e38362e32342e302f32322d3232203d3e203238313335.roa (raw, json)
Hash identifier:          2AX2u+wFZnY9JgcPvPx8q/clRyvCkm75b/cZrj2ODJE=
Subject key identifier:   7D:80:C5:3E:13:C6:50:2E:E9:9E:96:6B:A3:82:AF:32:DE:7F:81:46
Certificate issuer:       /CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
Certificate serial:       5D5FFA88BC6255FA3A57B156B48A5B445264D757
Authority key identifier: 10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e32342e302f32322d3232203d3e203238313335.roa
Signing time:             Wed 13 Mar 2024 12:03:15 +0000
ROA not before:           Wed 13 Mar 2024 11:58:15 +0000
ROA not after:            Wed 12 Mar 2025 12:03:15 +0000
asID:                     28135
IP address blocks:        187.86.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5f:fa:88:bc:62:55:fa:3a:57:b1:56:b4:8a:5b:44:52:64:d7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106C0018EAEC97B226036E9F42E3D4795FCBC714
        Validity
            Not Before: Mar 13 11:58:15 2024 GMT
            Not After : Mar 12 12:03:15 2025 GMT
        Subject: CN=7D80C53E13C6502EE99E966BA382AF32DE7F8146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:03:ab:d6:b3:6c:b9:24:5d:34:9c:a7:28:1c:
                    56:96:be:ac:10:23:43:dd:ce:de:ee:e2:f2:fb:cf:
                    52:9a:2f:2c:b8:26:70:8c:0b:3c:84:31:ab:58:39:
                    ad:cd:2c:3e:a4:32:c1:66:98:37:03:70:3d:c5:44:
                    f8:51:37:62:11:28:9e:29:50:09:e7:15:4d:da:2c:
                    1a:a4:a6:3c:2b:8c:e5:f8:bc:f3:35:a0:77:65:00:
                    8d:68:32:76:05:22:4d:95:f1:7a:a5:65:b0:cf:72:
                    fa:25:ec:d9:4c:23:cf:7b:3c:96:e0:08:63:30:0d:
                    8b:87:59:05:a1:a0:bb:a8:0b:e1:db:58:38:c0:c4:
                    80:82:96:3d:d9:29:90:80:c0:19:ae:49:0e:ca:47:
                    67:48:69:c2:b1:16:45:11:ec:5a:f4:d7:ac:fb:46:
                    8e:ac:87:ea:28:62:33:2b:b4:0a:18:e4:6e:20:d9:
                    5a:0d:eb:7e:1e:a9:eb:47:ed:d1:43:41:6c:df:ea:
                    19:90:79:26:ad:ba:cc:2a:9e:51:58:eb:a0:17:35:
                    73:84:04:82:9e:43:9c:4b:c4:17:5d:c2:73:e5:2e:
                    89:fc:da:67:c1:0b:68:28:ca:8d:81:0d:0c:19:71:
                    b5:40:98:d6:e4:1a:01:fc:e4:09:85:bc:bb:79:41:
                    0a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:80:C5:3E:13:C6:50:2E:E9:9E:96:6B:A3:82:AF:32:DE:7F:81:46
            X509v3 Authority Key Identifier:
                keyid:10:6C:00:18:EA:EC:97:B2:26:03:6E:9F:42:E3:D4:79:5F:CB:C7:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/106C0018EAEC97B226036E9F42E3D4795FCBC714.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/0/3138372e38362e32342e302f32322d3232203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:3a:65:b0:19:e5:49:6d:83:8b:f4:f4:e4:54:79:fc:9f:
         bc:e0:f4:b8:77:53:ff:59:86:8c:d4:cd:7d:d8:15:e5:a9:16:
         66:40:09:20:c5:2d:a3:87:62:c1:cf:4b:e9:e9:4c:26:7b:dc:
         cf:9a:02:30:ac:65:59:f2:a2:ad:8a:85:9c:95:47:e7:c6:ef:
         a1:24:22:f7:3a:fe:d8:6c:0e:78:fa:05:8c:c7:3d:5b:4d:29:
         b0:99:2c:0e:4a:9b:1d:e3:ba:9f:07:38:95:87:ea:8f:f8:55:
         ff:7a:2b:d9:2f:b3:24:87:83:69:46:ab:c1:e9:23:3c:7d:0f:
         6f:07:26:80:0e:80:1d:0c:ec:e6:aa:4a:89:b0:73:66:6b:59:
         7e:4b:2a:f3:72:b8:46:66:d4:5a:78:cc:69:3a:de:3b:f3:f0:
         34:5a:1d:c4:a8:6f:a3:8f:b2:25:17:26:6e:f5:df:1e:30:ca:
         55:f0:21:49:0d:7a:ff:21:72:d1:c2:9d:9f:9b:b6:6e:c7:4b:
         65:50:28:b1:24:b4:08:58:97:56:19:ee:34:85:bb:f3:26:cc:
         f7:3e:fa:56:2c:1b:d7:57:a2:95:77:d6:bb:2d:0f:7b:8b:dc:
         01:3e:18:44:9c:cf:38:e9:29:8a:60:ae:b5:e7:88:a0:f1:9c:
         db:9d:5e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org