Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/3138362e3232342e3234302e302f32302d3230203d3e20323632373538.roa
File:                     3138362e3232342e3234302e302f32302d3230203d3e20323632373538.roa (raw, json)
Hash identifier:          8mQjAjpWZk+R6+adWWm4yI9xAG3tnyd4G0y45sybdZc=
Subject key identifier:   AE:04:00:8C:CF:C8:E8:D7:1A:25:6F:1A:4D:60:04:93:2C:A8:03:7E
Certificate issuer:       /CN=9BEEFE86BBCF5B8D6240292F992900A30190465D
Certificate serial:       74358D2CEE7F95CA658E580C154955DFF0EAC2E2
Authority key identifier: 9B:EE:FE:86:BB:CF:5B:8D:62:40:29:2F:99:29:00:A3:01:90:46:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BEEFE86BBCF5B8D6240292F992900A30190465D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/3138362e3232342e3234302e302f32302d3230203d3e20323632373538.roa
Signing time:             Mon 12 Feb 2024 13:10:46 +0000
ROA not before:           Mon 12 Feb 2024 13:05:46 +0000
ROA not after:            Mon 10 Feb 2025 13:10:46 +0000
asID:                     262758
IP address blocks:        186.224.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:35:8d:2c:ee:7f:95:ca:65:8e:58:0c:15:49:55:df:f0:ea:c2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BEEFE86BBCF5B8D6240292F992900A30190465D
        Validity
            Not Before: Feb 12 13:05:46 2024 GMT
            Not After : Feb 10 13:10:46 2025 GMT
        Subject: CN=AE04008CCFC8E8D71A256F1A4D6004932CA8037E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d5:ce:c0:45:c4:64:74:1a:46:a1:a4:5b:67:
                    96:7e:9d:d6:b2:88:2f:9e:43:d0:e6:02:20:f2:23:
                    24:89:5b:0f:86:a4:ef:79:d7:c6:a6:d6:f0:21:be:
                    36:12:21:2f:b6:2e:9d:1f:7b:d9:cb:5d:e7:6c:30:
                    05:aa:df:b8:03:04:ed:89:39:ef:ca:96:25:8e:6d:
                    05:ee:67:98:6c:b0:fa:37:e2:fc:f3:de:61:08:a8:
                    cd:23:91:c3:d9:9c:ce:74:bb:ed:e2:6d:78:ec:d4:
                    31:7e:49:6b:fd:17:03:2c:f1:38:f1:90:e8:06:6d:
                    eb:bb:d3:ed:f8:64:77:60:77:06:52:4a:fd:3f:89:
                    2a:06:25:4d:c2:ba:76:f4:83:a6:1e:82:bc:3c:fb:
                    fa:5b:15:36:a0:b0:8f:75:e4:76:5c:d5:4a:ae:91:
                    93:9f:6f:91:05:14:f0:43:2f:b1:50:b4:e2:76:95:
                    a3:0e:35:a6:b9:d3:1f:07:28:57:25:ca:ec:2c:91:
                    a6:03:d7:1b:da:60:d1:a4:85:6f:9b:13:ee:ac:f1:
                    ec:fd:8b:b3:de:d6:19:8f:d2:47:fa:35:cb:00:86:
                    be:a7:b4:21:63:ff:6d:12:68:14:14:2e:b7:e4:cc:
                    ef:c7:bf:00:6f:51:98:be:c7:9c:18:bf:87:0c:19:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:04:00:8C:CF:C8:E8:D7:1A:25:6F:1A:4D:60:04:93:2C:A8:03:7E
            X509v3 Authority Key Identifier:
                keyid:9B:EE:FE:86:BB:CF:5B:8D:62:40:29:2F:99:29:00:A3:01:90:46:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/9BEEFE86BBCF5B8D6240292F992900A30190465D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9BEEFE86BBCF5B8D6240292F992900A30190465D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/3138362e3232342e3234302e302f32302d3230203d3e20323632373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:bf:af:12:61:e5:a5:14:d3:89:68:41:70:7a:22:df:b0:e5:
         2d:7d:d0:e0:3c:bd:f8:82:43:16:97:74:7b:a6:77:0a:4c:a7:
         9b:63:c8:bd:7c:4a:68:3a:bf:35:53:a7:5c:a1:20:ef:42:e6:
         d7:91:b0:cb:29:eb:0b:b8:81:46:32:19:ae:eb:c8:ba:fe:f8:
         3a:3d:61:89:2c:67:e9:a4:bb:2d:1f:46:bd:a7:35:f0:5e:b5:
         54:08:e2:08:19:b6:e3:82:83:16:46:20:a3:cd:d7:53:bf:89:
         c1:f8:61:34:cd:96:07:5e:09:b5:10:1d:78:00:46:a0:fd:bb:
         96:1a:bd:ff:5e:c3:ca:d8:51:e1:11:d5:d4:86:6f:87:5f:62:
         73:b3:32:af:c4:a9:c4:56:38:32:87:8c:2a:35:12:1f:bb:05:
         41:5c:25:3a:5a:00:b7:ca:b9:46:fa:33:cb:a4:d9:36:5e:f8:
         09:30:a4:3e:0d:55:8c:2d:d8:aa:bc:45:a6:87:55:16:e0:15:
         4b:79:db:37:79:ca:70:57:e6:d1:97:84:8d:21:9c:8b:06:6d:
         d9:a3:e7:f5:17:24:df:2b:7a:f0:ad:e2:70:9b:82:5f:b8:a3:
         eb:4c:72:05:51:d2:32:0b:c7:17:79:f3:73:64:a9:bf:46:df:
         95:79:55:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:23 2024 by rpki-client on console-fra.rpki-client.org