Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e39302e302f32332d3233203d3e20323730393236.roa
File:                     3138362e32362e39302e302f32332d3233203d3e20323730393236.roa (raw, json)
Hash identifier:          WRoPwCKFqrw0k+mpbRT8VbDhBma1sCZOnA0b1Wk1ZLc=
Subject key identifier:   D7:B3:4A:4F:CA:C8:F2:3A:57:9B:36:4C:F3:DD:80:0E:11:80:29:53
Certificate issuer:       /CN=4CC2A51129A554799F35AEF66889E0CA3BF4B1C0
Certificate serial:       0E4A27E5CCF39ABB82D37BCE26C637B2C7668A21
Authority key identifier: 4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e39302e302f32332d3233203d3e20323730393236.roa
Signing time:             Sat 09 Mar 2024 21:53:16 +0000
ROA not before:           Sat 09 Mar 2024 21:48:16 +0000
ROA not after:            Sat 08 Mar 2025 21:53:16 +0000
asID:                     270926
IP address blocks:        186.26.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4a:27:e5:cc:f3:9a:bb:82:d3:7b:ce:26:c6:37:b2:c7:66:8a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC2A51129A554799F35AEF66889E0CA3BF4B1C0
        Validity
            Not Before: Mar  9 21:48:16 2024 GMT
            Not After : Mar  8 21:53:16 2025 GMT
        Subject: CN=D7B34A4FCAC8F23A579B364CF3DD800E11802953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:b3:f5:dc:86:6a:a2:88:f4:4b:f6:14:51:
                    5c:3b:96:df:6e:0d:3b:97:4f:02:89:82:18:e1:8d:
                    9c:c6:37:15:34:80:61:41:9c:ee:62:d1:d5:34:bf:
                    fa:b0:b2:ca:81:2c:67:60:ad:1c:dd:01:3a:ee:81:
                    2c:61:64:f6:7b:91:ba:5d:fb:38:0c:2d:7d:2e:39:
                    09:da:69:14:88:53:24:97:37:17:68:fe:70:87:65:
                    a8:eb:6d:5d:99:d4:bd:52:fc:66:0e:c5:d6:51:6a:
                    d6:8b:13:fd:3c:48:fc:45:25:27:99:87:8e:c9:8f:
                    25:70:ba:2a:5b:b8:c5:c8:8b:51:4d:0a:cb:34:10:
                    19:08:37:7f:a0:6a:b2:9b:05:82:d5:94:45:9f:13:
                    50:5c:e7:97:10:86:0e:86:55:52:e8:5c:6f:4c:a2:
                    82:ee:dc:ac:33:70:23:d9:17:73:fd:a8:1d:b4:e9:
                    a6:4a:ff:a2:75:06:15:c5:21:ae:82:90:60:34:67:
                    c4:bd:1d:75:0d:48:54:0a:71:39:84:f0:dd:bc:75:
                    a5:4b:c5:d0:cf:8c:28:92:0a:3f:cd:1c:16:9f:4e:
                    bb:1a:45:d1:c5:2e:94:b8:a1:1d:69:bf:cf:d5:fa:
                    66:e8:fb:b9:3c:62:2b:e2:48:44:01:c9:65:bf:15:
                    48:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B3:4A:4F:CA:C8:F2:3A:57:9B:36:4C:F3:DD:80:0E:11:80:29:53
            X509v3 Authority Key Identifier:
                keyid:4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e39302e302f32332d3233203d3e20323730393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:a1:53:82:f9:ae:bc:ca:c2:0c:50:0d:2e:a3:54:43:a7:50:
         d0:6f:2b:24:15:68:f5:b9:a3:8a:86:d2:40:43:65:57:cd:64:
         bb:1e:fc:ee:71:38:fa:dd:54:d6:dc:eb:c2:cc:ee:61:4d:4f:
         bc:0a:62:ee:9e:c7:33:12:6a:06:41:e7:89:09:f3:bd:be:8e:
         ea:9d:25:fa:b9:12:aa:f7:e6:90:87:18:e9:c5:4a:53:89:53:
         fe:ee:a6:1d:d3:b1:6b:c1:fd:87:b3:6a:71:19:62:5f:0b:ad:
         2f:dd:ba:5a:f4:15:06:e1:be:d1:f2:67:63:9d:c3:a8:a5:c6:
         5d:12:2b:84:21:5c:d1:4e:c8:a7:6b:91:79:05:97:45:a7:b2:
         d6:58:ff:4c:b3:1a:1c:13:09:b5:83:f5:f3:ab:02:6e:02:de:
         c9:26:c1:ea:ef:38:4a:fe:7d:48:96:21:c9:c1:76:4d:c2:08:
         57:c9:0a:a1:77:46:b5:cc:1d:a4:5a:b9:bc:95:5e:d5:69:a3:
         f1:20:a3:ec:3c:ea:88:44:a6:f7:d4:6b:b6:55:72:03:50:b2:
         86:5b:bd:59:2f:73:5b:51:9d:e0:a5:4b:4d:77:08:ae:3c:0f:
         5b:b6:b8:8e:0b:40:ca:50:63:d3:81:74:48:22:58:4b:18:59:
         05:13:d2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org