Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3138362e3231392e3134342e302f32302d3230203d3e20323632393932.roa
File:                     3138362e3231392e3134342e302f32302d3230203d3e20323632393932.roa (raw, json)
Hash identifier:          SHCKIZ/+mflgAUwRnks5sm3iHEPocDmJZj+1Sf838pI=
Subject key identifier:   6E:24:B5:E7:D6:B8:7A:13:BA:DA:91:57:95:64:EE:E8:38:F3:03:54
Certificate issuer:       /CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
Certificate serial:       14829CAD0A1860104F672133DA22F4906336CB4B
Authority key identifier: 45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3138362e3231392e3134342e302f32302d3230203d3e20323632393932.roa
Signing time:             Mon 23 Jan 2023 21:42:14 +0000
ROA not before:           Mon 23 Jan 2023 21:37:14 +0000
ROA not after:            Mon 22 Jan 2024 21:42:14 +0000
asID:                     262992
IP address blocks:        186.219.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:82:9c:ad:0a:18:60:10:4f:67:21:33:da:22:f4:90:63:36:cb:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
        Validity
            Not Before: Jan 23 21:37:14 2023 GMT
            Not After : Jan 22 21:42:14 2024 GMT
        Subject: CN=6E24B5E7D6B87A13BADA91579564EEE838F30354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:46:9f:ef:a3:be:58:89:bd:99:63:78:03:
                    67:86:45:72:b0:a2:6f:48:fe:12:a4:ce:a8:0a:25:
                    9c:fd:92:04:f6:40:1b:15:fa:c4:c8:2b:6d:e9:2f:
                    18:b7:ce:07:9c:a7:76:b2:42:05:d1:55:c4:58:9c:
                    9e:3d:41:32:be:2b:09:6e:c3:c0:07:a7:b9:5a:13:
                    6d:9d:2f:37:42:72:21:5c:a4:43:f4:e6:aa:67:c7:
                    7b:37:a7:f5:29:96:4c:ae:fd:30:ea:97:3f:cc:8d:
                    87:b4:ed:4d:56:8b:d4:b6:fc:74:94:89:63:c7:47:
                    d0:3d:2e:ab:57:d7:56:07:4b:f9:fb:5b:7e:78:cf:
                    e5:38:93:9e:f3:ed:74:40:b8:34:39:9e:e6:e7:58:
                    f6:77:a6:fc:79:09:b4:56:eb:b6:68:ae:23:f0:f9:
                    4e:32:01:ad:df:40:2b:0c:8e:b9:18:60:ef:c7:ba:
                    05:a4:d3:38:e9:fd:64:17:d5:65:0c:f4:53:e7:03:
                    da:83:4a:14:00:4b:74:ad:aa:74:70:94:66:6c:bb:
                    a2:53:1a:d0:21:d9:12:a6:22:83:6c:b3:8b:cc:a8:
                    91:ad:5b:af:b9:ea:37:f9:55:68:cd:6c:04:e1:ed:
                    92:83:bd:95:9c:fd:d8:8e:9d:0c:2c:c2:0f:4e:d2:
                    bd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:24:B5:E7:D6:B8:7A:13:BA:DA:91:57:95:64:EE:E8:38:F3:03:54
            X509v3 Authority Key Identifier:
                keyid:45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/4579E09F6F46B73500F1877C7F7BC8F0F677E607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3138362e3231392e3134342e302f32302d3230203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:57:8f:8b:0e:9b:d0:78:6a:20:89:a9:5c:45:b7:6e:84:79:
         7f:99:9b:5b:a8:ae:2d:5e:14:df:a1:86:3c:da:3b:4a:11:6d:
         00:ab:4c:c8:f3:bf:73:d7:bf:c2:31:05:2b:11:54:ea:f3:8f:
         a4:15:16:23:f9:5e:16:71:fa:b8:ca:6e:9d:70:bf:ef:63:88:
         2c:6c:56:58:60:18:3a:42:b5:a4:f7:40:23:d3:72:b7:22:87:
         7e:04:5a:3d:89:e2:69:2b:d1:37:0a:98:53:60:74:f0:82:dd:
         51:3c:7f:28:8c:b4:37:05:67:14:63:fd:e3:7b:e7:de:f2:03:
         45:f7:aa:59:cd:5f:7c:a1:f8:e9:5a:03:38:b7:9f:0a:39:82:
         2b:7c:ab:3a:c7:e2:29:72:3b:98:ae:2a:d2:29:1a:e3:83:b6:
         4e:83:d2:90:3b:69:c0:00:f9:09:1d:09:62:88:60:f6:11:1c:
         81:51:f1:0f:46:4a:ea:d2:dd:2a:99:95:00:69:a1:6a:b2:0d:
         04:0f:e3:b6:b6:2c:38:df:f3:bb:24:18:8b:50:9c:3f:8f:f4:
         d8:b7:a7:cc:b7:c2:36:4d:09:d8:e9:14:d0:f9:21:04:08:f1:
         87:15:a2:2f:11:07:89:ff:3f:11:b8:66:58:36:77:16:3f:1b:
         8e:91:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org