Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32302d3234203d3e203533313533.roa
File:                     3138362e3230392e39362e302f32302d3234203d3e203533313533.roa (raw, json)
Hash identifier:          ffKpL4eLS9KoSvvrf/4jmDBDhWrCxJ1/de/vNEWxpJk=
Subject key identifier:   EA:91:FF:1A:E8:87:14:F6:4A:A7:78:7E:88:69:29:3F:91:6F:3E:68
Certificate issuer:       /CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Certificate serial:       1BBC4BF7880B468D5847CCF6F8A53D326E0CDDEB
Authority key identifier: F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32302d3234203d3e203533313533.roa
Signing time:             Thu 10 Nov 2022 14:04:46 +0000
ROA not before:           Thu 10 Nov 2022 13:59:46 +0000
ROA not after:            Thu 09 Nov 2023 14:04:46 +0000
asID:                     53153
IP address blocks:        186.209.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bc:4b:f7:88:0b:46:8d:58:47:cc:f6:f8:a5:3d:32:6e:0c:dd:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
        Validity
            Not Before: Nov 10 13:59:46 2022 GMT
            Not After : Nov  9 14:04:46 2023 GMT
        Subject: CN=EA91FF1AE88714F64AA7787E8869293F916F3E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d3:43:11:a4:78:2c:a8:21:79:cd:93:cc:bc:
                    c5:b3:07:44:b3:e6:43:ec:32:9c:f2:f3:44:99:ee:
                    19:16:b4:17:76:95:70:de:f3:61:c3:3d:dd:fc:3a:
                    7e:2a:d0:42:06:d2:2e:c8:5d:4e:24:12:3c:dd:92:
                    80:d5:e1:00:1e:33:86:04:ac:21:12:62:27:98:5b:
                    6e:c2:41:be:89:d4:21:bb:ba:58:24:23:f9:4c:77:
                    e4:24:9c:3d:48:c5:b4:69:46:61:22:34:34:26:4a:
                    3e:eb:82:14:70:ee:d9:31:22:4c:bc:7b:60:fa:6a:
                    fc:a3:2a:a0:c3:93:48:b7:fa:6a:ac:64:cb:f4:d2:
                    44:bc:d5:48:d2:f5:1d:2f:c5:2d:b5:08:83:dd:50:
                    eb:30:2d:6d:b1:bd:55:9c:c1:25:30:99:d6:ab:74:
                    48:4c:3d:97:38:7f:91:0f:99:39:cd:0e:c5:a2:8c:
                    1f:a7:c2:95:6e:7b:1d:16:89:90:ce:52:36:14:0a:
                    cd:5b:24:36:35:f6:6b:77:39:0b:f4:fa:7d:2f:b1:
                    a9:52:8c:c4:c3:54:6b:cc:68:df:14:d6:f1:9f:51:
                    3a:49:c0:f2:ad:e4:9f:c9:fe:2f:2b:63:13:57:dc:
                    4a:1f:a3:8e:c5:36:ef:ac:e4:cc:8b:24:2f:c4:9d:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:91:FF:1A:E8:87:14:F6:4A:A7:78:7E:88:69:29:3F:91:6F:3E:68
            X509v3 Authority Key Identifier:
                keyid:F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32302d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ce:2e:26:a8:60:a6:a3:80:7f:64:dd:ce:06:15:78:2d:1b:7d:
         72:96:54:68:54:64:2b:dc:a1:9f:ef:e3:95:58:df:ee:e6:2d:
         26:63:61:88:4b:7d:33:bb:18:e0:dd:13:a1:fb:f9:ee:a7:95:
         ae:fb:ef:ca:58:f0:74:ca:05:92:aa:a8:dc:c8:f3:f8:90:8b:
         8f:64:06:22:61:fc:59:0d:64:0f:7d:a3:30:82:fa:ea:cd:af:
         75:72:91:ff:75:0b:11:50:84:8b:27:65:8e:92:9d:6b:e1:8f:
         38:5b:8d:c3:14:15:4a:a2:88:b0:61:4b:cf:67:47:e1:12:f1:
         39:7f:e4:32:81:79:3b:d0:a5:28:ff:83:73:b0:80:7c:41:c2:
         5c:25:63:9e:24:14:1c:34:45:7c:d3:a5:3e:f6:0e:4a:54:6f:
         e1:3d:c1:c5:ee:5b:49:b1:92:6d:82:13:a3:00:fb:cc:b3:95:
         37:58:72:15:a3:16:e2:08:60:3e:2d:ee:6d:cf:a1:cf:d0:68:
         33:aa:6b:af:49:7c:3a:7d:47:f1:53:db:df:7d:c9:ab:39:9d:
         bb:38:bf:59:00:44:00:f5:0f:9a:4d:dc:5b:58:d8:15:f5:0a:
         08:27:7e:f8:5b:26:36:96:03:3f:c2:58:ec:d9:cb:7f:ba:e4:
         ea:0c:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org