Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e39302e302f32332d3233203d3e203238363130.roa
File:                     3138362e3230392e39302e302f32332d3233203d3e203238363130.roa (raw, json)
Hash identifier:          S9scB0+DayvEPLKpOCXuiaWbtkhK3VyE1ZSdS0XHOmA=
Subject key identifier:   86:83:B1:C8:54:42:F6:49:F5:4B:D5:FB:DB:D7:BF:46:15:33:DF:8C
Certificate issuer:       /CN=97417F3E236E218F6CACD83DB7C3A791582C6461
Certificate serial:       3A80C5FE9876A545932FCA4005199998D15B1797
Authority key identifier: 97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e39302e302f32332d3233203d3e203238363130.roa
Signing time:             Mon 11 Mar 2024 17:16:08 +0000
ROA not before:           Mon 11 Mar 2024 17:11:08 +0000
ROA not after:            Mon 10 Mar 2025 17:16:08 +0000
asID:                     28610
IP address blocks:        186.209.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:80:c5:fe:98:76:a5:45:93:2f:ca:40:05:19:99:98:d1:5b:17:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97417F3E236E218F6CACD83DB7C3A791582C6461
        Validity
            Not Before: Mar 11 17:11:08 2024 GMT
            Not After : Mar 10 17:16:08 2025 GMT
        Subject: CN=8683B1C85442F649F54BD5FBDBD7BF461533DF8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:91:75:20:ff:3f:38:44:7e:3f:8d:e1:49:
                    a5:04:0b:ce:85:b3:e2:41:76:79:11:37:0c:50:ba:
                    4d:56:17:db:ca:13:86:ab:7c:b3:46:44:8f:8e:71:
                    d8:41:62:dd:64:59:04:57:b9:cc:16:0a:9b:f7:93:
                    aa:ad:2a:be:48:93:ad:85:32:92:b9:05:36:3f:32:
                    bd:f0:04:52:a1:71:c8:9e:11:79:f1:8b:0b:74:a2:
                    0d:fb:f0:ca:a8:ae:a4:32:fe:9a:ce:74:0f:f2:40:
                    e2:b8:e6:10:2b:00:69:f9:a2:19:08:ca:09:af:62:
                    85:a3:88:71:e8:54:8f:41:a7:13:d3:39:8f:aa:d2:
                    c2:e6:7a:fd:61:97:3c:bd:a8:e2:32:9b:99:a9:35:
                    a5:69:c1:5a:4c:4d:85:df:a8:50:73:9e:55:e1:f3:
                    96:50:a7:9e:6d:28:0b:74:7b:a9:cd:a5:d7:dd:bd:
                    41:45:43:f6:58:7c:ad:30:a6:63:2f:51:28:25:65:
                    40:c1:65:4f:7a:ff:5c:6c:ad:be:1b:62:58:ab:9c:
                    71:63:f1:e8:62:c6:a3:80:06:5f:e5:4b:9a:98:d8:
                    61:43:2d:ab:6d:4a:81:10:23:db:52:81:1e:77:17:
                    14:7a:d9:c3:be:f5:25:5f:5e:fd:af:f0:1b:0a:d7:
                    01:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:83:B1:C8:54:42:F6:49:F5:4B:D5:FB:DB:D7:BF:46:15:33:DF:8C
            X509v3 Authority Key Identifier:
                keyid:97:41:7F:3E:23:6E:21:8F:6C:AC:D8:3D:B7:C3:A7:91:58:2C:64:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/97417F3E236E218F6CACD83DB7C3A791582C6461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97417F3E236E218F6CACD83DB7C3A791582C6461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e39302e302f32332d3233203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:86:50:fe:e6:ef:d5:9e:81:86:8f:4c:cc:12:48:ee:12:0b:
         1c:37:8a:e8:55:ca:be:da:8a:1b:1f:1a:53:37:13:7f:b8:05:
         ad:bf:90:4e:0f:08:73:82:4d:3d:e0:e0:a5:07:4e:3d:95:5f:
         ab:7d:5f:25:b5:d8:83:c0:5c:74:5d:c2:41:5a:65:7d:63:6b:
         84:42:3d:0d:2a:cc:5a:a0:8c:a3:ed:b9:35:2f:0b:22:81:b8:
         85:73:4b:55:6e:c3:6e:86:c6:73:4f:ac:4a:3d:e3:1d:6e:fc:
         96:df:bb:64:7e:38:88:01:dd:68:6f:8e:54:0b:e1:88:f0:71:
         ae:6f:87:a8:b3:ef:2f:ea:ec:2b:fb:32:1b:c8:cc:75:24:4a:
         bc:c8:91:07:2f:64:99:99:d7:97:d4:9e:5b:ca:f0:9c:7a:06:
         69:89:a7:25:8b:a2:6e:75:ee:59:23:79:63:93:dd:d6:e6:b1:
         88:3c:7e:a9:86:32:ed:93:eb:4e:94:7d:f9:7d:9e:b8:7c:aa:
         1c:74:c5:b3:51:26:a0:31:dc:13:48:eb:be:c6:3c:a9:9b:7c:
         87:da:0b:a5:5b:42:f6:cd:af:9b:a1:7e:de:c5:a0:05:e1:92:
         88:da:81:5f:a3:d8:9b:b9:c9:2f:0a:2c:83:c6:87:0b:51:52:
         ab:8c:8c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org