Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e39312e302f32342d3234203d3e203238363130.roa
File:                     3138362e3230392e39312e302f32342d3234203d3e203238363130.roa (raw, json)
Hash identifier:          4nKhcH9uUHSs3PSkevcS0BA+dJ1DI0hqZlKeZwN/8l8=
Subject key identifier:   5F:37:52:12:E8:1A:35:42:46:30:FA:E5:88:21:19:CE:90:5F:49:0F
Certificate issuer:       /CN=4B5276CDFF6FA0A23F162671193E4C132CBC55E8
Certificate serial:       39026DE1220B0A51FB84644C187D8C337A9FBD6B
Authority key identifier: 4B:52:76:CD:FF:6F:A0:A2:3F:16:26:71:19:3E:4C:13:2C:BC:55:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e39312e302f32342d3234203d3e203238363130.roa
Signing time:             Thu 04 Apr 2024 20:03:03 +0000
ROA not before:           Thu 04 Apr 2024 19:58:03 +0000
ROA not after:            Thu 03 Apr 2025 20:03:03 +0000
asID:                     28610
IP address blocks:        186.209.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:02:6d:e1:22:0b:0a:51:fb:84:64:4c:18:7d:8c:33:7a:9f:bd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B5276CDFF6FA0A23F162671193E4C132CBC55E8
        Validity
            Not Before: Apr  4 19:58:03 2024 GMT
            Not After : Apr  3 20:03:03 2025 GMT
        Subject: CN=5F375212E81A35424630FAE5882119CE905F490F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b4:d9:58:aa:a4:e6:bb:ba:26:d3:46:49:40:
                    6c:16:7d:be:00:f9:70:b0:32:b4:f5:0a:a9:91:59:
                    4f:ff:2f:61:9c:5d:b1:34:d9:fb:35:aa:74:67:18:
                    66:3f:5a:e8:fc:bb:d2:07:ee:5d:92:55:de:6f:4b:
                    de:b8:a9:1d:fb:3b:a8:b5:ed:fe:ae:f1:e5:3d:b8:
                    44:17:13:72:85:c1:9d:cf:f1:3d:2f:b7:50:c8:ae:
                    af:7d:3e:b9:29:b5:b2:03:fa:b6:ca:dc:0d:14:10:
                    c5:9f:44:85:6a:6f:88:56:9c:d1:48:6e:e3:16:d4:
                    90:1f:d3:c5:5c:d0:76:bd:01:8b:d1:66:07:a2:62:
                    51:c0:fb:d6:d3:9f:c1:02:06:d8:e3:31:1e:38:34:
                    6a:48:20:f2:c1:f2:ea:05:25:70:7c:98:dd:91:3d:
                    12:ac:76:12:21:cf:9a:d6:8c:26:99:69:e1:b9:57:
                    12:05:7a:e9:29:7f:6c:6b:8d:98:65:57:48:62:d2:
                    5c:68:b7:41:06:67:f9:a0:71:66:db:b9:fa:6c:2e:
                    d0:2c:84:1b:88:0c:33:9c:71:f3:96:a2:8a:c6:c7:
                    d6:c0:3e:94:77:cb:e3:74:a2:49:6a:f4:59:ca:3f:
                    29:ff:ce:59:28:62:84:30:10:49:77:91:ee:8f:34:
                    06:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:37:52:12:E8:1A:35:42:46:30:FA:E5:88:21:19:CE:90:5F:49:0F
            X509v3 Authority Key Identifier:
                keyid:4B:52:76:CD:FF:6F:A0:A2:3F:16:26:71:19:3E:4C:13:2C:BC:55:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B5276CDFF6FA0A23F162671193E4C132CBC55E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/1/3138362e3230392e39312e302f32342d3234203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:3d:86:9a:e6:53:3c:aa:8c:b7:61:f3:31:91:9a:79:af:62:
         de:15:0f:a1:bd:aa:8a:44:0b:77:37:1f:94:0b:19:d4:36:a2:
         c0:6a:58:c9:9f:c5:d5:dc:1c:04:57:63:f6:92:60:e8:95:8a:
         c3:9c:f8:eb:1d:82:9b:17:0f:f1:72:bd:1e:33:4e:8b:a5:1e:
         29:b8:30:b2:39:28:1a:f6:dd:13:1c:98:d0:44:b2:13:0a:23:
         2c:94:e6:0c:90:00:d2:d8:20:ca:91:7d:96:29:f8:61:1f:69:
         ea:03:e3:99:4b:ec:05:e6:6f:09:52:6b:ce:6c:4e:30:9e:65:
         9a:70:8c:c1:85:9a:74:4a:40:6f:f9:56:79:9e:dc:fb:e0:ae:
         72:bd:b0:6a:53:2f:14:86:7f:e6:59:5b:bb:19:e0:1b:6c:a6:
         29:50:11:44:89:af:7e:0f:ee:f4:1b:6f:58:46:05:1d:b2:b0:
         b0:85:11:6b:9d:2d:34:b9:c9:d1:f4:13:e3:88:76:fb:a3:f2:
         fb:60:df:9b:90:ee:54:d1:68:16:84:c6:61:45:9e:d8:17:48:
         47:1d:f0:de:08:ab:d8:0c:d5:97:9a:e8:12:1d:b4:34:4a:da:
         a7:00:36:25:6f:50:dd:6b:d8:3f:1f:07:ff:ce:09:a6:c3:39:
         03:6f:f9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:00:46 2024 by rpki-client on console-fra.rpki-client.org