Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3138362e3233332e3235322e302f32322d3234203d3e20323632343931.roa
File:                     3138362e3233332e3235322e302f32322d3234203d3e20323632343931.roa (raw, json)
Hash identifier:          60ELRWNMLWrn/yCdwSctSFB0FG89XUgMp6JyoAaunyw=
Subject key identifier:   94:5D:DA:5F:F9:DD:D0:75:2A:6B:61:99:93:67:D5:17:6A:AD:1E:C1
Certificate issuer:       /CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
Certificate serial:       3515A3D5152962A99E2CEE0BBADCC5916E1A424A
Authority key identifier: DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3138362e3233332e3235322e302f32322d3234203d3e20323632343931.roa
Signing time:             Sat 30 Mar 2024 14:15:40 +0000
ROA not before:           Sat 30 Mar 2024 14:10:40 +0000
ROA not after:            Sat 29 Mar 2025 14:15:40 +0000
asID:                     262491
IP address blocks:        186.233.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:15:a3:d5:15:29:62:a9:9e:2c:ee:0b:ba:dc:c5:91:6e:1a:42:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA66142D6014A7DDF12783F088F14F7F1B3AC9DC
        Validity
            Not Before: Mar 30 14:10:40 2024 GMT
            Not After : Mar 29 14:15:40 2025 GMT
        Subject: CN=945DDA5FF9DDD0752A6B61999367D5176AAD1EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:81:ec:d5:d5:08:9f:50:89:c9:07:7f:ff:
                    91:ba:7a:2e:10:f2:bd:04:81:e2:d9:75:b9:e8:f1:
                    26:f6:bd:ac:2f:d8:c1:94:7a:90:4c:47:c3:32:ca:
                    2a:b0:ae:d7:70:be:d6:70:ae:5e:71:2f:67:65:aa:
                    5f:06:12:24:93:8a:fd:13:ea:57:57:59:92:44:e4:
                    c5:8f:36:47:00:22:a5:32:12:e0:18:90:b8:de:6f:
                    c9:87:d6:db:87:01:dc:78:ca:7a:8f:f0:4a:e5:40:
                    e4:6b:d8:81:9a:2a:2f:a9:e8:cc:a0:94:2a:5f:60:
                    65:6e:ef:5e:3e:84:09:3c:44:73:bf:37:70:a1:14:
                    4e:24:b8:3c:dc:7b:89:b4:0a:e9:42:95:9f:5a:9f:
                    d1:fb:d8:7a:c6:94:c6:d7:7f:5a:5a:1f:b0:20:45:
                    ec:bc:d5:39:d0:e1:96:28:cb:8a:fa:be:44:42:47:
                    35:1d:56:97:71:91:7b:91:7f:47:cf:50:75:e8:38:
                    ba:f7:0c:c2:11:b5:7c:6c:82:97:cb:3b:91:a1:21:
                    2e:d6:57:bd:5f:2a:07:c8:c8:d1:00:2f:1a:7a:e0:
                    8f:88:33:79:35:b1:88:94:20:71:2f:15:4a:30:f4:
                    59:de:ce:1d:95:c3:ee:76:d3:3d:8f:55:84:10:3a:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5D:DA:5F:F9:DD:D0:75:2A:6B:61:99:93:67:D5:17:6A:AD:1E:C1
            X509v3 Authority Key Identifier:
                keyid:DA:66:14:2D:60:14:A7:DD:F1:27:83:F0:88:F1:4F:7F:1B:3A:C9:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA66142D6014A7DDF12783F088F14F7F1B3AC9DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/0/3138362e3233332e3235322e302f32322d3234203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:8c:3b:02:d1:38:9d:62:bf:bf:5f:17:ef:c1:32:83:4c:c1:
         f6:7d:f2:d1:d7:d3:a1:44:7b:2f:da:64:22:5d:56:c5:1e:86:
         c3:e7:b1:c1:f4:71:be:35:6f:76:b0:47:2f:62:4d:9a:2d:d5:
         1a:46:37:39:88:59:45:e6:b4:10:44:a8:f3:ca:55:60:e7:14:
         23:6e:22:e7:57:89:3e:4c:7b:01:86:85:4a:86:c4:12:25:1f:
         34:8d:75:cc:04:88:58:72:f7:51:88:3a:9a:1d:d7:2f:16:ff:
         7c:b2:7c:a0:42:53:c4:43:c6:18:22:d1:ae:a7:4b:05:fd:69:
         72:17:3d:c2:59:fc:02:9c:6a:dc:72:55:ac:88:44:64:8e:d6:
         18:d8:dd:26:9f:db:38:5a:40:4c:75:c8:30:6b:37:77:f8:f5:
         aa:5e:17:b3:f7:ab:9b:e3:73:26:31:40:ac:6f:46:52:86:07:
         b5:2c:8b:90:6e:2c:79:22:15:62:6a:6d:d5:7f:3f:f6:12:1e:
         ac:6a:13:e4:01:5a:28:52:31:c2:35:d4:e6:00:e4:1a:93:f1:
         20:a7:01:c4:88:0b:39:66:2b:eb:1b:be:55:f7:26:91:d3:35:
         f2:31:8c:73:8e:a3:dc:6b:37:f9:ac:bb:94:3f:be:ff:ef:34:
         46:bc:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org