Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e342e302f32322d3232203d3e20323632373039.roa
File:                     3138372e3131312e342e302f32322d3232203d3e20323632373039.roa (raw, json)
Hash identifier:          trlqYfHDqHHcLzfyUpp7BBlyj1XOGN48l+Yx56bikhE=
Subject key identifier:   B3:E0:DF:23:5A:01:2E:9A:50:25:42:4E:BC:55:61:AB:6D:67:2C:3A
Certificate issuer:       /CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
Certificate serial:       59C717F3857FE79536C5E0C314C98F4AE80E1DD0
Authority key identifier: 48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e342e302f32322d3232203d3e20323632373039.roa
Signing time:             Thu 20 Apr 2023 14:42:56 +0000
ROA not before:           Thu 20 Apr 2023 14:37:56 +0000
ROA not after:            Thu 18 Apr 2024 14:42:56 +0000
asID:                     262709
IP address blocks:        187.111.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c7:17:f3:85:7f:e7:95:36:c5:e0:c3:14:c9:8f:4a:e8:0e:1d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Validity
            Not Before: Apr 20 14:37:56 2023 GMT
            Not After : Apr 18 14:42:56 2024 GMT
        Subject: CN=B3E0DF235A012E9A5025424EBC5561AB6D672C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:f5:09:82:86:d5:b0:7e:75:d1:97:6b:57:
                    e0:b1:46:2c:2a:ae:c9:e3:17:b6:d2:de:f2:ca:9c:
                    75:4f:5d:b7:00:a3:b4:3c:8a:20:db:26:d2:60:58:
                    66:26:3a:e8:c9:bc:50:0b:2a:64:40:59:72:5e:52:
                    68:e4:80:91:42:98:dc:22:d7:5e:c5:f1:3b:93:e1:
                    0c:d9:ca:62:9d:0e:9e:56:51:b2:9c:c0:d3:a1:72:
                    6b:6c:19:c5:2d:6e:a0:25:4f:b7:72:ad:85:85:3f:
                    98:eb:f8:8b:ac:7c:74:4d:5f:68:dd:fd:46:1a:60:
                    84:c0:ce:1a:d4:cc:da:6f:23:ea:0b:5a:03:64:21:
                    b3:bb:70:f5:05:0b:2c:52:95:da:88:d9:99:d2:cd:
                    e3:af:a7:1b:10:b7:aa:3d:13:64:4c:f6:70:25:db:
                    9b:f5:01:c1:1d:4e:b9:a8:c0:b8:b2:34:49:47:d4:
                    0e:f0:c1:90:6d:c4:0c:48:73:62:11:d3:b1:8c:97:
                    f7:52:99:43:34:69:20:2d:5e:95:51:a6:21:60:c5:
                    e6:27:63:e8:82:28:bc:82:a4:de:c3:bd:af:67:4e:
                    0e:42:5f:04:b2:2c:cf:51:f7:2b:9e:71:40:88:eb:
                    98:bb:bd:f3:ed:da:9d:61:fe:d2:7a:08:9c:92:b5:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E0:DF:23:5A:01:2E:9A:50:25:42:4E:BC:55:61:AB:6D:67:2C:3A
            X509v3 Authority Key Identifier:
                keyid:48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/3138372e3131312e342e302f32322d3232203d3e20323632373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:93:99:80:8f:20:4c:4c:f9:c1:77:1b:80:7a:fb:6e:2c:af:
         78:74:e6:64:ca:2f:8e:e2:72:c0:c8:a6:0e:87:23:68:ea:26:
         b5:0d:03:d2:11:49:3a:90:6d:6d:11:2d:a3:e0:74:1e:a1:f4:
         d6:92:d0:c3:66:70:5e:db:e3:18:b1:4b:32:63:d0:21:3b:fb:
         bd:18:70:24:e8:df:4e:64:59:13:36:1f:79:97:f4:47:f1:07:
         11:25:1f:94:89:f1:dd:a6:14:88:ed:9b:cb:f0:96:7b:06:7f:
         c5:7e:a6:b2:dd:bb:62:21:bb:18:60:e2:e8:70:1b:e4:5b:44:
         13:ae:04:e6:24:88:cb:62:84:03:3d:94:82:73:57:08:e0:89:
         81:b1:75:83:0c:77:a8:87:f7:20:c1:fe:c5:ec:2d:dd:3c:5d:
         16:b2:31:58:9a:c9:39:0e:3f:0c:8e:3a:55:29:19:69:8f:aa:
         09:34:09:1b:d9:eb:f9:aa:5f:cc:5d:2e:6d:0c:1c:2c:8e:20:
         97:77:5d:b0:be:32:2a:a5:ca:6d:84:f2:a6:b0:f7:2c:22:9e:
         e3:2d:0e:fe:a1:e9:8b:d3:a7:67:3a:f2:bc:b8:35:15:a3:f1:
         cf:72:e9:c4:f3:31:0a:3d:4d:71:e1:8a:5d:85:2d:8e:2c:07:
         ea:96:bc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org