Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134342e302f32302d3234203d3e20323632373239.roa
File:                     3138362e3139332e3134342e302f32302d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          zXzcXT5w99tOqHnumGyRssuKw7dMrO+mlq9OgI5vzXE=
Subject key identifier:   A6:E6:57:7C:3A:1D:55:C8:2F:6A:A8:F4:F6:AD:2D:C6:E2:94:18:67
Certificate issuer:       /CN=588EE00910FA303185B2D60E297C4C76D993A8E1
Certificate serial:       1074EE5CF59FC93E1EA55E6BBF2FD2F101829170
Authority key identifier: 58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134342e302f32302d3234203d3e20323632373239.roa
Signing time:             Tue 25 Jul 2023 15:00:00 +0000
ROA not before:           Tue 25 Jul 2023 14:55:00 +0000
ROA not after:            Tue 23 Jul 2024 15:00:00 +0000
asID:                     262729
IP address blocks:        186.193.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:74:ee:5c:f5:9f:c9:3e:1e:a5:5e:6b:bf:2f:d2:f1:01:82:91:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588EE00910FA303185B2D60E297C4C76D993A8E1
        Validity
            Not Before: Jul 25 14:55:00 2023 GMT
            Not After : Jul 23 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:53:06:cd:c5:17:50:4a:a4:df:a8:26:1c:
                    9f:8f:51:72:1d:e4:2b:dd:76:bf:b7:d1:d1:c8:15:
                    b2:cd:b2:61:dc:16:fa:ae:ee:de:da:a1:c1:9c:ca:
                    20:be:d0:38:50:4f:7b:7c:5c:60:c8:8a:74:34:69:
                    9e:2b:bb:ba:9a:6f:f3:69:aa:93:bd:2e:30:f5:70:
                    ff:57:82:b8:ca:e9:a7:6c:64:3b:a3:8f:9c:f3:43:
                    10:55:f2:3e:0e:ef:92:bc:f6:59:34:2e:f9:f9:3c:
                    9a:74:61:4c:ff:a8:10:fd:42:5e:c0:17:47:b1:38:
                    00:ee:0b:b0:d5:4d:4d:e5:bf:b5:e3:c5:34:f9:cf:
                    33:dd:58:82:f7:33:c3:f0:7b:ae:34:47:71:85:3e:
                    f9:f5:68:38:bb:bb:68:d9:fd:cd:3b:a1:fa:3a:58:
                    9a:f1:83:08:ef:75:b4:d9:0c:c7:15:76:7e:46:d4:
                    df:36:18:36:a2:41:e4:7c:f9:2c:51:df:12:8a:ab:
                    54:b5:64:d3:d9:81:87:f2:0f:1a:72:6b:15:e9:7e:
                    00:5e:80:e5:a9:3a:b7:54:2b:6f:99:e3:7d:0b:78:
                    48:9d:5a:82:a1:1b:75:5f:0a:6a:63:72:6a:cf:78:
                    d8:16:a8:6f:29:36:11:83:72:bb:57:9f:a1:32:df:
                    9e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E6:57:7C:3A:1D:55:C8:2F:6A:A8:F4:F6:AD:2D:C6:E2:94:18:67
            X509v3 Authority Key Identifier:
                keyid:58:8E:E0:09:10:FA:30:31:85:B2:D6:0E:29:7C:4C:76:D9:93:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/588EE00910FA303185B2D60E297C4C76D993A8E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/588EE00910FA303185B2D60E297C4C76D993A8E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3134342e302f32302d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:20:40:91:44:ee:41:0a:ea:ef:2f:ba:1a:20:b9:0c:28:ac:
         64:5d:5b:5a:1c:ee:c1:7e:2e:e8:a7:84:da:8f:76:ce:a0:dd:
         b3:e3:10:ca:6a:fe:f3:7d:c5:43:22:e6:38:65:45:09:a2:79:
         37:ab:0c:e2:d6:69:bc:8c:30:4d:6f:a9:b0:71:ed:58:3c:df:
         fb:db:13:9c:a1:89:d5:f1:55:59:c5:44:a9:14:42:4b:6c:05:
         e6:b1:5c:13:5c:86:f0:f3:89:c7:c2:8a:38:8d:51:dc:6f:45:
         e7:d0:d3:61:39:61:17:6a:15:3e:50:de:d1:a2:07:b5:d1:ce:
         b0:bf:5b:df:b8:f1:92:b9:98:c7:f5:cf:b6:78:3c:a9:cc:72:
         51:ff:ff:dc:63:ca:2f:ad:7f:cc:74:91:10:7d:30:83:58:ae:
         aa:eb:8e:97:37:ce:81:92:ab:0f:47:f1:ee:ef:99:50:51:7a:
         0b:80:c5:86:8b:2f:ae:f2:50:56:b7:ce:6b:6c:a5:1e:d9:4c:
         54:e6:85:2c:d6:39:22:b3:3f:e7:5b:0d:36:fc:38:8a:0b:8a:
         c2:0a:91:38:26:e0:97:21:c8:48:48:bd:da:84:a6:b4:d5:5d:
         46:5f:20:6a:cf:d7:93:71:2f:21:1e:d4:92:85:47:5c:44:e1:
         03:16:43:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org