Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3138362e3233352e3132302e302f32312d3234203d3e20323634303735.roa
File:                     3138362e3233352e3132302e302f32312d3234203d3e20323634303735.roa (raw, json)
Hash identifier:          dwBDqMx/eDJ1sDf948xTmMGn7E7/q167aXIyi0RA2ak=
Subject key identifier:   F8:3F:11:65:0A:B6:09:FA:21:03:AF:39:C7:B9:71:1F:35:D3:5D:84
Certificate issuer:       /CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
Certificate serial:       5FB51533925459F0DE98FE3A33FD35ACEA660388
Authority key identifier: 8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3138362e3233352e3132302e302f32312d3234203d3e20323634303735.roa
Signing time:             Tue 02 Jan 2024 20:32:18 +0000
ROA not before:           Tue 02 Jan 2024 20:27:18 +0000
ROA not after:            Tue 31 Dec 2024 20:32:18 +0000
asID:                     264075
IP address blocks:        186.235.120.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b5:15:33:92:54:59:f0:de:98:fe:3a:33:fd:35:ac:ea:66:03:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228
        Validity
            Not Before: Jan  2 20:27:18 2024 GMT
            Not After : Dec 31 20:32:18 2024 GMT
        Subject: CN=F83F11650AB609FA2103AF39C7B9711F35D35D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:ab:fb:f4:b0:f5:53:f2:8c:86:45:89:0a:
                    ba:67:e5:04:9d:31:1c:ff:39:81:20:a4:5c:14:63:
                    0c:aa:a4:b2:b7:fb:5c:6b:b5:2e:af:b1:5d:5a:2a:
                    55:d3:39:5d:78:b5:bf:d8:a1:ec:ee:35:ec:3c:74:
                    68:99:49:b2:6d:e6:22:14:7b:37:88:65:f0:bd:23:
                    8c:ae:a0:27:f8:03:27:3b:ad:00:db:80:b6:b6:e1:
                    74:d1:4e:a0:9e:d0:ea:30:16:76:72:b6:9f:cb:1a:
                    f7:12:c4:9f:0c:68:96:64:79:e9:0a:ab:7f:75:c5:
                    42:c1:14:ce:f2:2c:47:87:87:64:db:1e:41:f1:45:
                    a5:62:2f:bc:a2:27:dc:ed:fe:f2:6a:ce:1e:a9:76:
                    28:54:36:df:28:c0:70:2f:95:de:59:0a:41:08:22:
                    ff:7a:0e:14:ec:3a:2f:1e:8f:55:61:7b:7b:a5:6e:
                    9f:66:85:3e:d2:b2:04:7d:52:87:27:d9:d6:ae:19:
                    87:60:6d:7f:60:2f:b5:3f:3e:d7:36:00:a4:dc:83:
                    f6:14:ef:97:62:49:59:ee:19:57:b2:02:f9:b4:94:
                    c8:13:e4:7b:8b:bf:f1:ec:d5:95:07:f7:ed:80:17:
                    97:88:30:92:1e:f5:ee:0c:76:1d:80:93:b1:e7:82:
                    dd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3F:11:65:0A:B6:09:FA:21:03:AF:39:C7:B9:71:1F:35:D3:5D:84
            X509v3 Authority Key Identifier:
                keyid:8A:63:C0:EE:68:D7:14:FD:6E:B5:F1:73:9C:7F:D0:04:5C:4C:12:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A63C0EE68D714FD6EB5F1739C7FD0045C4C1228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3138362e3233352e3132302e302f32312d3234203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:39:e1:66:8a:7e:1a:02:44:1f:b4:5a:e2:cd:0c:5d:c1:aa:
         c8:a4:05:73:2e:95:5b:9c:48:6d:17:55:b4:c6:de:39:90:24:
         32:67:dd:67:6b:b8:f8:ae:df:8e:0d:7d:40:77:a1:b2:c8:e9:
         92:45:ef:e1:79:e7:7f:d4:46:2d:2e:63:07:f5:2d:89:8b:40:
         04:76:b1:d7:2f:d8:d3:68:76:39:f3:5a:2a:65:b7:85:3c:53:
         c9:fc:77:18:81:f1:8e:ce:8b:8b:95:f2:1d:07:d9:27:22:6a:
         1c:95:a1:3a:78:0f:b7:4a:70:dc:42:45:bb:50:b5:48:a0:26:
         61:52:95:b9:37:ec:4d:f2:f1:f7:6d:d3:ec:da:d1:17:45:01:
         3d:12:24:29:3d:6d:84:79:08:b7:99:03:e4:01:43:e4:75:1f:
         9a:28:b9:ad:74:17:bd:5d:3e:2a:72:3a:b8:e4:e8:ad:cc:e7:
         97:fb:a2:3a:b7:de:2e:43:40:4d:7e:f3:9c:8d:ba:16:2d:6a:
         97:87:76:3a:8f:e2:b9:8a:f3:58:5e:9c:60:76:45:c9:7d:c4:
         93:a6:fc:5a:d9:b7:5d:c0:ef:11:a3:1f:10:1a:8b:ec:20:fc:
         13:87:b6:ec:f6:dd:ae:31:1c:b4:3e:af:5a:20:8c:e3:5e:61:
         7f:a4:1a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:46 2024 by rpki-client on console-fra.rpki-client.org