Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3235302e302f32332d3233203d3e20323633303836.roa
File:                     3138362e3230382e3235302e302f32332d3233203d3e20323633303836.roa (raw, json)
Hash identifier:          Hu0UrdIlVtcptdN+Gv/ur2bXCK+hxR6dqY5KSPpCQFg=
Subject key identifier:   80:DF:70:8E:B2:E3:AE:52:6D:7B:62:16:A7:F5:9C:AD:18:88:7D:FD
Certificate issuer:       /CN=1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549
Certificate serial:       7D3E47E18D12CCE8A55B91B7909EB784C0059CEB
Authority key identifier: 1F:2C:B2:3A:24:C7:AD:3E:5F:D9:43:A3:47:2E:7E:6A:9C:51:45:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3235302e302f32332d3233203d3e20323633303836.roa
Signing time:             Wed 20 Mar 2024 18:57:30 +0000
ROA not before:           Wed 20 Mar 2024 18:52:30 +0000
ROA not after:            Wed 19 Mar 2025 18:57:30 +0000
asID:                     263086
IP address blocks:        186.208.250.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3e:47:e1:8d:12:cc:e8:a5:5b:91:b7:90:9e:b7:84:c0:05:9c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549
        Validity
            Not Before: Mar 20 18:52:30 2024 GMT
            Not After : Mar 19 18:57:30 2025 GMT
        Subject: CN=80DF708EB2E3AE526D7B6216A7F59CAD18887DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:8b:4c:dd:4a:8d:da:9e:b4:6c:79:e1:4c:
                    58:48:19:13:04:c5:11:9e:98:b2:74:fc:c5:8d:cc:
                    03:d7:90:08:42:ac:70:38:34:07:3b:7d:e8:9a:a9:
                    de:c4:17:0a:63:57:ff:7e:4e:85:f6:c0:d6:f2:6a:
                    69:66:a2:19:6a:4e:37:78:89:78:66:3c:ff:8e:76:
                    ae:7f:26:5a:4f:09:15:11:24:88:52:2b:d2:b0:39:
                    b5:4e:9b:b7:d0:8c:c3:44:2e:cd:39:11:07:cf:8a:
                    27:3f:34:d4:48:9b:62:76:0a:12:5a:58:eb:33:c9:
                    88:ff:a5:73:a6:c1:09:df:5e:7b:6c:50:a7:6c:89:
                    ea:09:d0:57:a2:88:4c:2e:b8:67:dd:2b:3f:d6:5c:
                    1e:a7:cf:fa:2c:f6:f0:20:b3:24:66:09:7d:5a:df:
                    d9:09:05:4f:c6:06:96:b7:a2:a4:16:f7:cc:c3:a0:
                    19:3c:ef:45:1a:aa:00:23:44:84:c6:88:7e:3f:b9:
                    54:c1:91:57:9a:bf:01:04:1e:ff:1e:21:85:3b:5f:
                    0d:7a:d7:f7:76:09:5f:48:e1:72:6c:76:61:02:1e:
                    df:e4:73:c2:ca:b2:8b:19:59:19:85:08:0c:2e:46:
                    f9:d9:4f:57:0d:08:11:b8:b0:8f:56:f4:d2:dc:c6:
                    d5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DF:70:8E:B2:E3:AE:52:6D:7B:62:16:A7:F5:9C:AD:18:88:7D:FD
            X509v3 Authority Key Identifier:
                keyid:1F:2C:B2:3A:24:C7:AD:3E:5F:D9:43:A3:47:2E:7E:6A:9C:51:45:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F2CB23A24C7AD3E5FD943A3472E7E6A9C514549.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3138362e3230382e3235302e302f32332d3233203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:a0:6e:78:bd:73:b6:06:2a:f4:ef:80:29:2b:76:50:f7:5f:
         38:ac:f5:6e:c4:a3:4a:86:87:cf:3e:de:c1:59:70:66:d6:45:
         ad:d1:a3:fe:c8:28:70:4f:91:58:7c:2d:da:91:7f:bd:c2:46:
         f8:d8:96:a7:c3:42:cc:33:03:64:03:3e:49:83:57:b9:29:6d:
         2b:1d:00:40:b4:50:e7:1e:34:5b:53:16:8e:0d:71:23:2a:2c:
         7e:1d:d5:fb:db:6c:45:46:02:a6:b6:d7:00:28:f7:41:ff:df:
         69:dc:45:1b:36:b4:e9:ca:4e:c6:07:c2:0e:ce:88:a1:89:90:
         89:a6:a3:27:57:92:a0:6c:38:31:e4:11:72:44:b5:02:98:04:
         96:45:0e:7c:26:84:fd:57:32:0a:8e:91:bd:71:ea:70:ee:7a:
         69:59:cd:71:d3:bd:45:4a:95:91:53:d6:75:3c:63:04:17:40:
         3f:71:6a:41:fd:14:d7:fe:cd:8b:d0:fb:00:f6:28:d4:16:9a:
         28:07:2f:24:1c:e8:5a:7e:b5:66:eb:e1:26:d4:16:25:20:d3:
         e6:a3:e0:ed:68:06:8a:c3:bd:7d:a5:7d:81:98:3a:ff:7a:d0:
         d3:44:f5:e6:b3:b3:2a:2f:d6:91:2a:d6:84:c8:5c:df:cd:68:
         a0:21:34:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org