Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32322d3232203d3e203238363130.roa
File:                     3138362e3230392e38382e302f32322d3232203d3e203238363130.roa (raw, json)
Hash identifier:          UZkDwQjrEw9CCxSJvThyyHmapvEKNb3G/KhxPLS4Kxs=
Subject key identifier:   62:37:A8:34:A9:24:EF:04:C5:1A:E5:F3:F6:38:55:EF:77:4A:42:67
Certificate issuer:       /CN=97417F3E236E218F6CACD83DB7C3A791582C6461
Certificate serial:       15CD6213E38D1B2A494380D139FC1D7DE1DA8A71
Authority key identifier: 97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32322d3232203d3e203238363130.roa
Signing time:             Mon 11 Mar 2024 17:16:01 +0000
ROA not before:           Mon 11 Mar 2024 17:11:01 +0000
ROA not after:            Mon 10 Mar 2025 17:16:01 +0000
asID:                     28610
IP address blocks:        186.209.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cd:62:13:e3:8d:1b:2a:49:43:80:d1:39:fc:1d:7d:e1:da:8a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97417F3E236E218F6CACD83DB7C3A791582C6461
        Validity
            Not Before: Mar 11 17:11:01 2024 GMT
            Not After : Mar 10 17:16:01 2025 GMT
        Subject: CN=6237A834A924EF04C51AE5F3F63855EF774A4267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:2f:f8:45:19:cb:84:25:a9:59:72:23:4b:
                    99:d6:25:8e:89:7a:ff:e9:bb:d5:42:d1:31:43:a5:
                    a6:f7:5a:19:31:67:6b:e3:b9:14:c1:ed:b8:83:b1:
                    c9:f8:19:cb:e9:4e:6b:cb:88:28:80:ff:1c:c4:3d:
                    84:d8:9c:a7:c9:e4:01:43:66:42:76:65:10:26:36:
                    9f:0b:0d:11:ce:fd:a0:70:54:f3:82:f4:d9:e6:99:
                    0c:5b:0a:5f:3c:08:d7:26:30:1c:62:7d:e9:23:0f:
                    72:3a:5a:61:dc:0e:64:b9:f6:5f:d4:26:7e:e4:e0:
                    20:86:16:68:4d:bc:73:65:15:b1:f8:77:97:0d:e0:
                    fc:9c:34:4c:6b:f1:16:f2:b0:65:a7:21:20:7f:60:
                    d5:0d:d5:d4:47:51:40:90:fb:09:a1:70:f8:ed:25:
                    19:b0:58:5e:d8:f6:8c:cc:a0:5c:cc:2d:77:b1:f3:
                    be:95:17:f5:38:b7:f1:5a:5a:18:3f:af:b6:e4:86:
                    6c:17:32:f0:1c:b3:64:fb:0c:c8:dd:12:98:76:0a:
                    cb:dc:71:96:97:30:67:a2:4e:e8:e5:70:35:cf:12:
                    e2:1a:71:79:72:6b:2d:2f:c9:0a:7f:f1:74:b6:a4:
                    c3:fc:22:24:85:27:9b:57:77:80:98:e3:76:e4:7e:
                    64:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:37:A8:34:A9:24:EF:04:C5:1A:E5:F3:F6:38:55:EF:77:4A:42:67
            X509v3 Authority Key Identifier:
                keyid:97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/97417F3E236E218F6CACD83DB7C3A791582C6461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32322d3232203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:83:63:a2:72:68:81:b9:8b:6e:02:24:66:f5:81:8c:8f:d1:
         9f:bf:cb:67:a0:6c:1c:b0:a6:a2:64:8e:cf:f0:7c:0e:a6:11:
         ae:27:b0:8d:d9:ba:cd:f2:84:da:20:12:2c:e3:cf:98:04:54:
         76:19:a1:2d:41:a6:53:ba:ba:67:02:ec:9d:bc:94:65:d9:b3:
         08:e2:8c:57:75:d4:5b:01:2d:b7:3f:5e:51:0f:54:39:22:c4:
         5c:16:ef:56:f9:44:22:99:80:c5:7e:b0:91:44:ae:6e:66:1b:
         bd:e8:df:16:ad:68:12:20:e8:2d:8c:86:29:94:84:f6:bb:53:
         c4:d6:4e:c0:7e:65:88:cd:e9:c1:27:c6:89:bb:42:7e:2a:da:
         f8:e6:fa:f0:d4:b2:94:03:24:07:9a:77:02:42:30:63:e1:9c:
         d7:4f:84:cc:af:ed:fe:c2:5e:3d:1b:2c:5b:76:63:5d:27:9e:
         79:71:c4:e6:ba:37:e0:23:9e:99:bd:7e:9e:76:62:03:c5:20:
         43:78:e3:ff:ba:2c:ca:31:a5:0c:a4:46:39:22:d2:65:44:8c:
         8e:66:5a:72:c1:35:45:1d:09:7d:bb:50:bf:e2:57:e8:d5:86:
         83:99:66:35:be:23:df:89:28:51:3d:43:c3:7b:ed:38:65:64:
         fd:d7:ef:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org