Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/3138362e3231392e3137362e302f32312d3234203d3e20323632393935.roa
File:                     3138362e3231392e3137362e302f32312d3234203d3e20323632393935.roa (raw, json)
Hash identifier:          +siFzjsQks7VdZS6b+BBdNkUgaCvjrPwOAzN5my0SAo=
Subject key identifier:   5C:B3:2E:C0:4B:D0:68:08:7F:F8:D1:C0:9B:DF:9B:1B:86:3B:85:FF
Certificate issuer:       /CN=47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3
Certificate serial:       40A73A7D54A6011CACB767460212978573531552
Authority key identifier: 47:50:6C:BC:D7:C9:46:8C:FD:F5:C2:BB:9B:23:94:6F:34:0E:3E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/3138362e3231392e3137362e302f32312d3234203d3e20323632393935.roa
Signing time:             Sat 05 Aug 2023 15:00:00 +0000
ROA not before:           Sat 05 Aug 2023 14:55:00 +0000
ROA not after:            Mon 05 Aug 2024 15:00:00 +0000
asID:                     262995
IP address blocks:        186.219.176.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a7:3a:7d:54:a6:01:1c:ac:b7:67:46:02:12:97:85:73:53:15:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3
        Validity
            Not Before: Aug  5 14:55:00 2023 GMT
            Not After : Aug  5 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:77:4a:8e:26:62:b2:88:b3:39:8c:d3:7d:49:
                    5a:d4:3d:a9:e1:3c:89:cb:cb:23:3d:31:06:97:cc:
                    70:1a:b9:63:7f:03:d2:41:06:fd:31:ec:68:c2:37:
                    b3:cf:2a:a9:32:34:c0:a8:37:a0:31:78:89:98:18:
                    bd:94:33:15:a8:ff:fd:cd:b2:18:e4:82:fa:57:44:
                    a3:36:cb:f4:8e:0c:1b:a8:80:ea:28:9f:68:a8:0f:
                    d7:1d:a5:4b:1c:ab:43:7e:cb:2b:6b:10:6e:02:b4:
                    08:26:7d:8b:3e:d9:41:35:0c:51:64:fe:ff:05:13:
                    46:02:87:39:cc:16:bb:05:70:9a:02:69:84:a3:fe:
                    b4:b6:d6:93:d0:28:5b:a4:27:c5:ff:b7:7f:6e:7c:
                    51:38:0c:86:76:e8:2e:48:db:05:17:09:67:fc:20:
                    1b:f7:96:a8:12:73:8c:e0:ce:ec:de:cd:57:43:66:
                    55:82:0d:0d:9a:61:a8:6d:ff:2c:aa:73:d6:23:b1:
                    a8:f2:dd:6a:7e:f1:c2:9a:c9:ee:fd:95:c8:2d:7f:
                    8f:24:7e:e7:3b:d2:90:71:ae:2f:48:ce:3c:f7:1a:
                    b7:42:d8:84:cc:4c:3d:6d:bd:9f:23:6f:91:76:b1:
                    00:80:c1:46:c8:8a:ef:5b:77:cc:fc:70:a7:a0:ee:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B3:2E:C0:4B:D0:68:08:7F:F8:D1:C0:9B:DF:9B:1B:86:3B:85:FF
            X509v3 Authority Key Identifier:
                keyid:47:50:6C:BC:D7:C9:46:8C:FD:F5:C2:BB:9B:23:94:6F:34:0E:3E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47506CBCD7C9468CFDF5C2BB9B23946F340E3ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2pLW4BMwnHnP9bWEU2G92YoyaKBdjTZzFQM6yhHT9nJ4/0/3138362e3231392e3137362e302f32312d3234203d3e20323632393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bc:2f:00:e1:d9:13:1f:32:3a:f8:a1:78:2d:57:d7:ec:db:7e:
         ee:e8:22:58:de:4f:09:53:f3:72:e2:52:b1:55:4f:ca:7c:0b:
         9d:49:94:72:56:91:b1:f6:a3:fa:2c:3b:a5:b3:e2:7b:1a:61:
         62:c1:50:bf:fb:21:55:b8:af:f8:e8:2e:6f:2c:da:87:70:d5:
         57:a4:fc:dc:be:90:7b:38:ea:b6:ea:de:18:d5:aa:48:a6:e6:
         3f:c7:56:b7:8a:01:f1:93:f1:b3:af:de:fa:7e:b3:31:62:ac:
         31:0d:3e:2d:cf:ff:fd:57:81:f1:99:08:e8:e0:4e:1f:d1:0b:
         dd:8b:17:25:00:c4:3e:e9:af:4f:65:b7:e1:2d:e6:eb:d2:5a:
         2b:57:a8:dc:a6:99:ef:2f:ec:b7:02:54:12:e5:06:02:d0:99:
         b3:e5:fa:b8:4c:0d:4d:02:69:22:56:e0:5a:53:f0:3f:75:83:
         67:cd:7c:45:26:18:b2:b0:4a:67:4c:17:96:30:cd:fb:29:40:
         cf:9f:16:e7:f5:92:ea:15:6b:27:b3:be:66:8c:22:ba:6b:6b:
         10:6c:41:38:de:82:83:13:ee:37:f8:f5:86:3d:c1:32:49:64:
         6a:90:b3:4c:4c:83:6a:c9:7a:aa:4c:65:a5:20:54:4d:7f:14:
         18:dc:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org