Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e39302e302f32342d3234203d3e203238363130.roa
File:                     3138362e3230392e39302e302f32342d3234203d3e203238363130.roa (raw, json)
Hash identifier:          9rGVDSNq5PXaXvMInqnbqY6Imz75+MPsKFWVPeWd2/k=
Subject key identifier:   D9:EC:A8:C9:49:62:70:39:FC:33:13:49:6F:7F:4C:10:8D:7E:08:0C
Certificate issuer:       /CN=4B5276CDFF6FA0A23F162671193E4C132CBC55E8
Certificate serial:       45BEA62C86E7FE82186DB01EBFBA6D48B0C7CB02
Authority key identifier: 4B:52:76:CD:FF:6F:A0:A2:3F:16:26:71:19:3E:4C:13:2C:BC:55:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e39302e302f32342d3234203d3e203238363130.roa
Signing time:             Thu 04 Apr 2024 20:03:04 +0000
ROA not before:           Thu 04 Apr 2024 19:58:04 +0000
ROA not after:            Thu 03 Apr 2025 20:03:04 +0000
asID:                     28610
IP address blocks:        186.209.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:be:a6:2c:86:e7:fe:82:18:6d:b0:1e:bf:ba:6d:48:b0:c7:cb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B5276CDFF6FA0A23F162671193E4C132CBC55E8
        Validity
            Not Before: Apr  4 19:58:04 2024 GMT
            Not After : Apr  3 20:03:04 2025 GMT
        Subject: CN=D9ECA8C949627039FC3313496F7F4C108D7E080C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1c:2a:e0:bb:5d:61:ad:69:7e:31:dc:c8:48:
                    c1:ba:97:aa:a7:8b:df:da:91:6f:f3:85:d1:44:f6:
                    28:65:57:11:0f:4d:74:f7:74:46:00:81:64:93:79:
                    0e:4d:5f:8a:fb:63:73:e9:fd:88:b3:41:62:ea:69:
                    29:18:2e:4d:2c:58:fb:22:a2:24:f4:c6:0e:7a:5f:
                    74:5c:2f:b5:87:33:10:f2:42:83:db:b4:01:0f:a6:
                    11:eb:40:5d:42:d0:e9:38:5e:01:0f:fc:7c:52:05:
                    ca:d6:7b:40:c8:df:66:f3:39:c3:7f:9b:56:69:c0:
                    7b:99:79:41:22:e2:6c:bd:ff:f8:e6:a8:78:5a:77:
                    4e:12:27:59:18:70:79:c9:50:93:39:eb:72:e1:ae:
                    f4:cf:e5:a7:55:6c:ab:9d:e0:4a:09:f5:ad:8a:42:
                    39:cc:4a:49:e4:1e:b5:42:95:6e:01:d3:28:78:eb:
                    e9:b1:62:fb:f8:e0:bf:0a:fc:b5:e1:8c:18:af:7f:
                    ba:fb:5c:31:77:aa:1d:70:0a:1b:92:5f:63:6e:24:
                    76:a3:c4:a1:77:20:9c:f8:fe:50:24:c9:e6:94:ce:
                    44:b9:7e:b9:72:99:7a:0a:ec:39:93:54:8c:89:ec:
                    13:5f:b6:5f:c0:e8:a3:9f:69:5e:df:a9:2d:27:d1:
                    e1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EC:A8:C9:49:62:70:39:FC:33:13:49:6F:7F:4C:10:8D:7E:08:0C
            X509v3 Authority Key Identifier:
                keyid:4B:52:76:CD:FF:6F:A0:A2:3F:16:26:71:19:3E:4C:13:2C:BC:55:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e39302e302f32342d3234203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:ea:d8:ef:e4:83:ad:94:ed:9f:51:d5:46:58:d1:b4:86:a8:
         08:92:dc:12:f6:ee:da:50:ff:43:b0:01:95:3a:ff:72:11:67:
         44:2d:e2:0a:20:64:39:7d:4f:17:f1:50:b9:6d:1e:0a:06:08:
         a8:c1:39:f6:15:18:0d:30:7d:25:b5:b6:21:0b:7f:ca:f5:4e:
         de:18:65:7c:fb:49:4e:ad:30:0c:24:9b:4e:68:bf:7d:2b:6d:
         6b:71:95:68:30:22:a7:91:65:cc:ec:fa:a8:c8:71:89:c3:53:
         9d:71:1f:1a:16:5f:a9:cd:87:ec:dc:2f:4b:e5:6e:12:90:ec:
         ec:b9:f8:b4:a4:a1:40:cd:97:7a:16:f9:4b:28:74:ed:3f:0f:
         9b:cf:0e:a0:55:2f:9e:c4:6d:96:d4:ca:00:bb:01:b0:82:24:
         f6:17:01:57:ad:0c:60:6e:7c:39:0b:0c:ff:6f:d3:4e:f7:e8:
         5f:93:08:50:c1:4d:3e:e1:77:db:99:87:0b:0a:6e:9a:bc:af:
         df:3b:77:5b:ca:03:8e:03:a3:c0:c9:95:e4:c5:82:7c:0d:76:
         a8:a9:d3:d7:2f:5b:2f:de:f0:bc:0c:0e:db:1a:9f:2e:66:0b:
         0c:36:39:20:51:54:4e:fb:a6:c1:aa:95:48:db:15:84:f2:9d:
         cf:04:62:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:04:03 2024 by rpki-client on console-ams.rpki-client.org