Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/3138362e3232352e3132382e302f31392d3234203d3e20323632373631.roa
File:                     3138362e3232352e3132382e302f31392d3234203d3e20323632373631.roa (raw, json)
Hash identifier:          mox+ira1xNILDRbBDGkFt/lhpzuWWqE2wwH9HgniZjk=
Subject key identifier:   66:61:F3:2C:E2:C9:32:D7:6E:75:1B:57:77:5A:3F:08:02:6A:15:5C
Certificate issuer:       /CN=50DE94754136B9FEA0BC6F60B9C1AD054D25E337
Certificate serial:       05662A4B2D294AF8A378BA7584325C770860681B
Authority key identifier: 50:DE:94:75:41:36:B9:FE:A0:BC:6F:60:B9:C1:AD:05:4D:25:E3:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE94754136B9FEA0BC6F60B9C1AD054D25E337.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/3138362e3232352e3132382e302f31392d3234203d3e20323632373631.roa
Signing time:             Mon 27 Nov 2023 17:52:00 +0000
ROA not before:           Mon 27 Nov 2023 17:47:00 +0000
ROA not after:            Mon 25 Nov 2024 17:52:00 +0000
asID:                     262761
IP address blocks:        186.225.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:66:2a:4b:2d:29:4a:f8:a3:78:ba:75:84:32:5c:77:08:60:68:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50DE94754136B9FEA0BC6F60B9C1AD054D25E337
        Validity
            Not Before: Nov 27 17:47:00 2023 GMT
            Not After : Nov 25 17:52:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:b7:7c:c7:21:1b:41:93:2e:d2:0b:08:00:
                    d5:ee:1b:39:59:28:75:da:c1:db:1f:ae:fb:6a:81:
                    22:dd:87:b1:74:c4:b3:89:0c:23:75:ff:17:fd:93:
                    9d:93:c2:15:6e:63:a7:79:1c:2d:4d:65:b7:6d:96:
                    46:0a:33:53:60:53:84:1d:aa:75:f9:a7:5d:7e:f7:
                    bd:02:b6:48:18:13:ce:fd:2a:58:62:fb:9c:db:4b:
                    88:0d:f1:b6:ed:cc:49:57:d1:a8:78:87:f5:8f:a0:
                    5d:b5:2c:5e:ee:ac:ee:13:d6:f1:18:34:48:db:2e:
                    d5:fe:a7:95:24:8f:58:54:3f:03:0b:c4:6d:bb:9f:
                    c6:dd:52:42:79:30:66:c2:41:dd:6f:22:df:f3:45:
                    e4:f1:68:02:7b:d7:d3:6c:b8:c1:3e:07:df:92:34:
                    0f:3f:31:ed:f0:dd:84:48:05:bf:ac:ca:97:4b:ed:
                    e1:d6:40:22:a0:57:3d:bd:c6:dd:b9:5b:df:0f:a6:
                    04:7a:49:27:70:78:7f:99:b7:ef:87:09:d7:58:ee:
                    df:2b:ae:af:67:4a:b9:3e:fa:cf:ea:49:18:20:1b:
                    32:d6:55:9f:0a:fa:9e:eb:69:09:15:64:aa:7c:53:
                    04:ad:44:b9:e1:2e:37:7f:96:7c:59:28:44:16:04:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:61:F3:2C:E2:C9:32:D7:6E:75:1B:57:77:5A:3F:08:02:6A:15:5C
            X509v3 Authority Key Identifier:
                keyid:50:DE:94:75:41:36:B9:FE:A0:BC:6F:60:B9:C1:AD:05:4D:25:E3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/50DE94754136B9FEA0BC6F60B9C1AD054D25E337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50DE94754136B9FEA0BC6F60B9C1AD054D25E337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/0/3138362e3232352e3132382e302f31392d3234203d3e20323632373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c4:c7:37:79:e0:8d:1f:e7:db:42:ac:21:bf:0e:68:53:bb:7a:
         41:27:30:cc:5b:5a:9a:9d:77:af:1f:87:bc:bb:82:44:10:6e:
         e6:9f:ce:fe:8c:5c:5a:8d:e5:ac:09:64:ca:71:96:bf:b4:c9:
         87:62:ea:15:bb:6b:84:25:69:51:28:98:e0:f5:33:b0:ac:99:
         3e:f0:c1:63:1e:bc:b5:1c:19:71:0e:a5:a0:c8:3c:c2:00:d0:
         cc:65:58:c5:58:05:00:8e:f0:60:1a:9d:78:cd:bc:5e:e5:96:
         f3:ce:ac:82:5a:33:88:85:67:a6:f1:97:6c:3a:14:50:01:8f:
         5e:90:d3:66:41:0b:10:2c:ae:6e:e4:18:2f:38:83:f3:a0:69:
         3e:53:de:21:45:1c:4e:12:b9:bb:c2:69:aa:78:c0:38:fd:7b:
         a3:ea:82:95:86:a1:23:8c:b3:14:4a:64:27:a9:8b:be:af:95:
         bd:86:32:97:43:dc:d3:57:d3:0f:be:3d:d5:11:c4:36:a8:5d:
         04:df:ce:e7:4c:17:1d:85:d7:49:56:68:30:94:ea:f3:a0:77:
         ca:72:9b:eb:3c:fb:e3:1b:bc:8e:7f:35:63:e4:1a:e0:6e:a4:
         65:43:0d:d1:c2:fa:09:2f:83:ad:8b:d0:0a:37:33:49:d2:09:
         54:1f:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org