Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32332d3233203d3e203238363130.roa
File:                     3138362e3230392e38382e302f32332d3233203d3e203238363130.roa (raw, json)
Hash identifier:          KPjhNWYB3L/HMEj101or/KlK9phsi9FcPnm4izlb+ls=
Subject key identifier:   FB:5A:DE:10:C4:51:01:04:86:8E:7C:FC:54:A1:44:A8:08:5F:7C:96
Certificate issuer:       /CN=97417F3E236E218F6CACD83DB7C3A791582C6461
Certificate serial:       04F75209DCE48FA4DAD853FBBF7050CDF08633F8
Authority key identifier: 97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32332d3233203d3e203238363130.roa
Signing time:             Mon 11 Mar 2024 17:16:03 +0000
ROA not before:           Mon 11 Mar 2024 17:11:03 +0000
ROA not after:            Mon 10 Mar 2025 17:16:03 +0000
asID:                     28610
IP address blocks:        186.209.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f7:52:09:dc:e4:8f:a4:da:d8:53:fb:bf:70:50:cd:f0:86:33:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97417F3E236E218F6CACD83DB7C3A791582C6461
        Validity
            Not Before: Mar 11 17:11:03 2024 GMT
            Not After : Mar 10 17:16:03 2025 GMT
        Subject: CN=FB5ADE10C4510104868E7CFC54A144A8085F7C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:c4:a2:1e:47:03:0c:c1:aa:62:a0:11:47:
                    01:5b:75:56:bd:01:ee:02:4e:a3:5b:ad:ed:ae:d8:
                    a0:3a:a3:81:0c:74:77:d5:15:b7:a6:0a:6c:a6:62:
                    34:66:c8:32:e3:24:55:1f:ab:cd:b0:26:56:26:0a:
                    f3:fd:45:3f:b2:d9:32:f3:bd:ad:92:d3:7d:45:4d:
                    bf:1f:25:dc:d7:69:08:20:bf:0d:0a:43:aa:99:44:
                    2b:f8:92:5f:75:71:6a:6a:20:b1:2c:1a:67:3f:e9:
                    f1:c9:5d:fe:1f:12:7a:4d:c4:a9:79:18:60:67:1a:
                    90:a1:1c:3c:bf:81:1d:6e:50:1c:15:5e:23:cf:85:
                    53:96:e1:d2:ca:5c:e4:ab:64:3e:f0:09:93:a3:13:
                    f9:f4:3b:c6:e5:e2:81:e9:3b:7a:a6:c3:26:f3:c0:
                    68:12:5e:f7:34:1f:f3:da:80:b0:90:29:ee:04:9a:
                    fe:61:10:11:8c:e9:6a:71:26:89:74:18:37:49:41:
                    b9:91:22:23:d3:37:6a:cd:40:43:e8:94:ca:58:c6:
                    cb:f0:5c:8f:b9:fe:02:b0:45:11:b3:10:a1:3d:3e:
                    2c:7d:ac:12:59:d9:8e:90:fe:61:11:48:fa:13:da:
                    23:e2:f3:2f:b0:10:2c:9c:05:60:06:e4:f0:ac:89:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5A:DE:10:C4:51:01:04:86:8E:7C:FC:54:A1:44:A8:08:5F:7C:96
            X509v3 Authority Key Identifier:
                keyid:97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/97417F3E236E218F6CACD83DB7C3A791582C6461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32332d3233203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:17:4d:fc:29:56:89:01:8f:b1:af:df:a1:7d:c2:75:46:9e:
         13:cb:5e:a1:b7:34:b4:27:84:03:aa:a6:44:2e:14:73:a4:db:
         7c:a8:52:74:73:0d:c0:8d:68:cc:4d:0b:5e:00:08:13:91:03:
         fc:43:c1:79:69:a9:46:16:2d:c3:1b:f5:c2:aa:c2:07:d2:d3:
         4d:b0:b8:7e:c9:38:4d:25:b0:ab:7d:7a:9a:ee:1d:ed:f2:01:
         e9:ce:af:a9:a6:e2:11:4d:a8:18:83:4e:4b:18:d9:7f:c1:4e:
         88:7e:84:1d:20:e9:de:05:21:f8:8d:55:27:ac:ab:69:88:7c:
         c2:35:86:b9:dc:81:9f:69:02:05:cd:55:09:9e:6f:a2:c8:83:
         e0:2e:43:b8:cb:6c:0b:5f:fa:f2:f6:e8:50:b7:9f:02:14:69:
         5f:dc:d0:5d:6a:fe:f5:d9:48:62:cc:4e:4f:a6:2b:ca:a8:56:
         5f:a0:98:26:c6:ed:52:38:78:19:4b:03:9f:5f:72:6d:93:41:
         72:64:8c:34:f7:8e:8a:6f:58:de:ac:f6:50:2e:62:44:48:b6:
         ef:04:e3:5c:48:84:a5:20:94:0e:53:b1:25:38:62:3c:ec:5c:
         6c:f4:f3:02:be:90:a1:a1:54:d0:4e:cc:34:d1:00:8a:f7:d1:
         dc:df:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org