Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e332e302f32342d3234203d3e20323632373039.roa
File:                     3138372e3131312e332e302f32342d3234203d3e20323632373039.roa (raw, json)
Hash identifier:          VeAiHo5mY9Doagu9Lr1XNJZ9oko0mmZOkOXG3QLmn8M=
Subject key identifier:   A7:05:A3:CF:2A:FF:9A:7D:EB:8F:75:33:AA:66:07:69:77:F8:1E:9B
Certificate issuer:       /CN=36614F42717E12040199B59CE8FFFD30F0784B36
Certificate serial:       219A4A3B3A5BC036053F3200E4132E89476D2918
Authority key identifier: 36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e332e302f32342d3234203d3e20323632373039.roa
Signing time:             Thu 10 Nov 2022 18:30:46 +0000
ROA not before:           Thu 10 Nov 2022 18:25:46 +0000
ROA not after:            Thu 09 Nov 2023 18:30:46 +0000
asID:                     262709
IP address blocks:        187.111.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9a:4a:3b:3a:5b:c0:36:05:3f:32:00:e4:13:2e:89:47:6d:29:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36614F42717E12040199B59CE8FFFD30F0784B36
        Validity
            Not Before: Nov 10 18:25:46 2022 GMT
            Not After : Nov  9 18:30:46 2023 GMT
        Subject: CN=A705A3CF2AFF9A7DEB8F7533AA66076977F81E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:e4:c2:aa:95:8b:59:b7:26:4f:c4:40:f4:
                    d2:16:36:ed:d2:de:34:9c:f1:ad:2e:0a:a1:3a:be:
                    39:16:37:fc:64:1b:2f:5e:f6:17:b5:68:3a:a5:fd:
                    f1:07:b9:e3:7e:75:c5:32:c6:af:d0:e7:75:1a:92:
                    d8:56:c2:bf:33:58:91:fa:69:1e:42:1d:47:8b:d5:
                    7b:4e:34:85:c2:f4:07:89:5a:1a:f6:40:5d:9d:01:
                    50:4c:2e:f4:34:3a:2b:1f:60:1f:72:0a:d2:bf:b9:
                    09:3c:2e:16:22:fe:2b:c6:15:47:3f:89:26:c9:be:
                    e7:36:af:64:93:49:44:80:b3:8e:b0:72:47:e5:8e:
                    9c:c9:ac:26:54:9f:98:50:96:2c:35:9e:08:53:c0:
                    2a:ac:b0:46:5f:0c:62:b2:06:7c:8c:eb:40:f1:e9:
                    d8:c7:ec:51:2d:67:5e:6e:e4:7d:b3:17:96:10:7e:
                    98:48:61:4a:8e:96:9d:5f:95:87:3c:f8:6e:8e:38:
                    f4:93:c6:5c:86:84:a6:f2:32:2a:a0:61:70:7b:98:
                    67:4a:5f:c4:74:d6:3c:63:a3:78:14:97:f4:76:fa:
                    9b:6a:46:ee:56:51:7f:0b:4d:6d:8f:34:6c:a2:c5:
                    9d:c1:be:82:7a:85:a0:94:d2:99:93:96:fe:99:0d:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:05:A3:CF:2A:FF:9A:7D:EB:8F:75:33:AA:66:07:69:77:F8:1E:9B
            X509v3 Authority Key Identifier:
                keyid:36:61:4F:42:71:7E:12:04:01:99:B5:9C:E8:FF:FD:30:F0:78:4B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/36614F42717E12040199B59CE8FFFD30F0784B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36614F42717E12040199B59CE8FFFD30F0784B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/0/3138372e3131312e332e302f32342d3234203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:08:ce:e5:4a:14:4c:62:d1:22:e3:9e:a9:e6:57:e5:f0:
         b9:72:97:e4:78:5b:fa:9e:8d:d4:96:0f:c4:53:ce:75:b7:d1:
         64:bb:5d:3a:32:23:50:44:b0:bf:ed:99:58:f7:b1:eb:e3:74:
         92:8e:5e:91:6e:b5:c4:91:b5:60:c6:0b:3f:f7:7a:8f:4c:c7:
         e2:26:6a:32:0c:40:62:c8:e6:0f:20:f5:1e:2b:04:b1:44:49:
         e0:6d:6b:a7:be:27:0b:e5:6c:9f:9d:f5:3a:c0:9e:fc:f6:19:
         86:8d:26:25:52:98:a6:0e:79:a6:e5:f6:7f:3b:75:89:4c:97:
         4b:86:d5:ee:40:ab:3c:23:97:e3:a4:60:6d:61:4d:01:c6:b0:
         d0:f8:c1:49:75:a6:d3:fb:48:52:a8:fe:a8:5c:e3:ec:ff:e1:
         e4:95:22:b2:09:f4:d8:f4:24:29:61:8f:c7:75:65:fc:67:fd:
         31:54:87:f3:b4:02:31:fe:41:34:7e:7f:6e:d3:9c:8f:e7:b3:
         9c:36:cf:ae:08:19:57:87:3f:95:d4:53:81:5f:b4:ac:c5:08:
         a4:bb:73:b9:b1:d7:1d:18:51:76:32:c1:37:06:b3:e6:41:90:
         0b:4f:60:2c:85:fc:25:74:4f:ec:29:ff:6f:3c:c8:89:47:5e:
         56:20:65:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org