Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e39312e302f32342d3234203d3e20323730393236.roa
File:                     3138362e32362e39312e302f32342d3234203d3e20323730393236.roa (raw, json)
Hash identifier:          7lYCQIe/0otaf3BGLw+c/LsFbJdYA5gv2KZ7JmakrP0=
Subject key identifier:   83:D2:8F:97:7E:63:71:AD:07:9B:B0:70:34:66:C3:49:CF:2F:0A:50
Certificate issuer:       /CN=4CC2A51129A554799F35AEF66889E0CA3BF4B1C0
Certificate serial:       10DADD5CD6D1E1C2817593DFDF35EFCE2E78F4EA
Authority key identifier: 4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e39312e302f32342d3234203d3e20323730393236.roa
Signing time:             Sat 09 Mar 2024 21:53:16 +0000
ROA not before:           Sat 09 Mar 2024 21:48:16 +0000
ROA not after:            Sat 08 Mar 2025 21:53:16 +0000
asID:                     270926
IP address blocks:        186.26.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:da:dd:5c:d6:d1:e1:c2:81:75:93:df:df:35:ef:ce:2e:78:f4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC2A51129A554799F35AEF66889E0CA3BF4B1C0
        Validity
            Not Before: Mar  9 21:48:16 2024 GMT
            Not After : Mar  8 21:53:16 2025 GMT
        Subject: CN=83D28F977E6371AD079BB0703466C349CF2F0A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:5f:32:3b:11:b0:ca:e0:c8:ca:2f:d8:6e:
                    92:d6:7a:8c:af:67:f2:34:0f:e0:d2:32:09:34:bc:
                    78:8e:30:24:64:65:a6:ed:83:07:c8:b6:57:52:be:
                    10:da:c6:42:5a:6f:a9:d5:bc:e8:b4:3a:15:4b:bd:
                    3a:69:da:12:85:0f:0d:15:9d:80:9d:63:af:46:73:
                    4e:17:5e:46:64:34:09:23:88:55:91:2a:3a:e6:0a:
                    55:cf:99:0c:1c:68:62:bf:0d:d5:fc:69:f8:92:d2:
                    6b:d4:24:42:20:5c:d4:49:3c:0d:f0:2a:0b:59:b4:
                    26:f0:f0:3b:9e:12:54:2d:a2:47:73:31:51:ca:65:
                    e4:0d:dc:9c:91:f0:ca:05:e6:92:36:28:52:6e:e0:
                    81:54:4e:b2:e7:a6:bf:ab:70:56:82:f0:d8:07:85:
                    a6:02:0e:2b:5e:4d:45:81:fc:52:71:79:da:ee:5f:
                    55:1a:9f:f1:68:25:24:05:38:2c:5d:36:f2:e2:29:
                    93:05:d7:ae:5c:e6:b0:67:0f:c2:5c:21:4c:78:32:
                    93:c1:38:d7:31:2c:12:97:88:9c:66:c0:ea:39:23:
                    47:c4:4c:c6:26:59:d2:bb:67:77:38:00:a8:f4:d6:
                    61:98:cc:e6:ac:ed:36:13:d9:2f:e8:6d:bf:a7:bd:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D2:8F:97:7E:63:71:AD:07:9B:B0:70:34:66:C3:49:CF:2F:0A:50
            X509v3 Authority Key Identifier:
                keyid:4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e39312e302f32342d3234203d3e20323730393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:97:bd:41:dc:ee:8d:a3:ac:cb:ef:52:e4:ff:2c:69:a3:96:
         56:3b:6b:4e:49:99:60:45:c0:da:83:d0:9e:ea:74:49:a3:d6:
         09:63:19:aa:e7:5f:10:a4:23:de:fc:69:7e:b3:df:0d:e2:14:
         ce:e3:5d:57:12:3c:d0:27:6b:ff:1b:67:1f:04:99:83:d3:c3:
         72:c5:45:a8:bb:23:75:1e:b8:c9:cc:6e:34:11:f7:a9:8d:9f:
         7f:15:d3:a2:93:78:a7:c7:2a:76:30:54:94:c3:d3:08:d2:2b:
         65:43:be:57:f6:a7:1b:fe:45:d1:54:5a:f6:1a:f5:61:19:09:
         87:0f:22:03:e5:59:90:5a:7f:32:dc:59:f2:ca:81:c2:bb:4b:
         ec:86:e8:6c:b7:b0:b6:a3:8e:dc:d9:d7:fc:e4:34:25:6a:45:
         4b:2f:2c:9d:cd:c4:41:62:b1:01:8e:62:90:70:d2:c9:dc:a3:
         16:f5:93:16:f7:70:dd:b0:0c:0c:e1:1d:98:50:39:2d:a0:9e:
         e2:e1:59:cd:84:e6:24:4a:3b:7b:18:8b:1a:47:67:46:ab:92:
         a0:69:a1:e6:78:6a:94:09:71:b8:58:5e:ad:b3:9a:3b:e2:04:
         e6:18:27:54:0a:24:1d:08:2e:f3:36:b6:67:ab:c0:75:49:ef:
         9f:1a:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org