Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/1/3138362e3233332e302e302f32322d3332203d3e20323730373535.roa
File:                     3138362e3233332e302e302f32322d3332203d3e20323730373535.roa (raw, json)
Hash identifier:          V7mfUCuOJlIYf0HmX4sbcYLcnPJN4sN1IBKv8VWphfQ=
Subject key identifier:   90:7D:18:FE:11:FF:22:FF:D4:2E:FD:0D:DB:80:98:69:7A:84:0C:CD
Certificate issuer:       /CN=470ECC71416A3386488F49C5C7ED668E1F49F723
Certificate serial:       4F0045498D73EA3795C99C06E104972273ABFDE2
Authority key identifier: 47:0E:CC:71:41:6A:33:86:48:8F:49:C5:C7:ED:66:8E:1F:49:F7:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470ECC71416A3386488F49C5C7ED668E1F49F723.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/1/3138362e3233332e302e302f32322d3332203d3e20323730373535.roa
Signing time:             Thu 04 Apr 2024 16:52:36 +0000
ROA not before:           Thu 04 Apr 2024 16:47:36 +0000
ROA not after:            Thu 03 Apr 2025 16:52:36 +0000
asID:                     270755
IP address blocks:        186.233.0.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:00:45:49:8d:73:ea:37:95:c9:9c:06:e1:04:97:22:73:ab:fd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470ECC71416A3386488F49C5C7ED668E1F49F723
        Validity
            Not Before: Apr  4 16:47:36 2024 GMT
            Not After : Apr  3 16:52:36 2025 GMT
        Subject: CN=907D18FE11FF22FFD42EFD0DDB8098697A840CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:83:54:30:6c:2f:9e:13:93:5f:c9:8a:ad:
                    ea:28:36:64:ad:4d:c4:08:7c:3f:dd:69:8d:34:dd:
                    52:b1:b4:d8:52:f5:66:ce:1f:c2:45:61:63:03:0b:
                    27:af:f8:4d:96:b7:7e:b3:2a:05:c4:da:53:95:d5:
                    41:0c:d6:80:7a:bd:06:8a:03:15:6a:69:66:a2:82:
                    57:e9:ed:9f:d6:98:71:74:c5:cf:cc:4b:91:58:eb:
                    21:e1:63:b8:fb:5c:df:1d:3a:c7:fe:ca:47:ef:68:
                    a1:1f:b2:27:16:55:d6:d5:bf:b9:2f:06:66:05:a8:
                    23:e8:2d:00:cd:25:58:93:b2:35:5f:42:5f:94:57:
                    fd:1c:45:bc:d1:24:1f:65:d4:09:41:bb:cf:e7:ad:
                    52:ae:53:0a:4f:50:a3:d6:8d:93:a0:b6:d2:74:52:
                    ac:2e:7e:25:07:de:cb:6e:f8:ff:9d:44:29:33:e0:
                    31:1a:e5:b5:85:fd:7a:c8:1c:0b:c3:a9:0c:68:41:
                    5e:0f:7b:96:d5:cf:80:79:e0:7a:e2:ae:cd:05:b7:
                    f7:c5:81:b4:77:07:78:6e:f0:4e:3a:63:be:4d:78:
                    7e:cc:ca:ee:f8:df:fb:f5:dd:fc:35:52:61:d4:b6:
                    ac:ab:b1:ca:b4:b8:35:c6:30:5e:08:d5:4f:55:5c:
                    97:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7D:18:FE:11:FF:22:FF:D4:2E:FD:0D:DB:80:98:69:7A:84:0C:CD
            X509v3 Authority Key Identifier:
                keyid:47:0E:CC:71:41:6A:33:86:48:8F:49:C5:C7:ED:66:8E:1F:49:F7:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/1/470ECC71416A3386488F49C5C7ED668E1F49F723.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470ECC71416A3386488F49C5C7ED668E1F49F723.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/1/3138362e3233332e302e302f32322d3332203d3e20323730373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:64:dd:7d:0c:0c:40:b3:fe:ad:95:ec:d8:c8:8c:e4:42:de:
         8a:f3:37:14:e4:d9:5b:cc:60:e4:13:d7:00:b1:cd:53:35:96:
         54:19:9c:39:fc:ab:0b:66:91:f3:94:07:a7:60:5f:28:09:d3:
         60:60:42:53:e6:ae:c8:a0:dc:68:5e:89:68:9a:05:95:9f:eb:
         50:58:0c:84:b7:19:28:de:b2:3d:c9:f6:ed:81:9e:c1:68:91:
         a9:9d:99:8f:81:00:56:85:b6:11:0b:fb:8b:a1:e3:70:50:a3:
         bd:81:d6:cd:33:d4:4f:8c:e2:27:8f:4f:c1:ca:4f:bd:51:aa:
         ef:bb:a8:64:9b:33:93:c8:0b:00:b4:01:48:87:cc:96:6f:77:
         77:a4:0c:12:01:4e:f1:82:9f:83:2a:d4:2b:c9:d7:84:9c:47:
         d1:7c:d6:ef:d4:a1:7c:fe:38:6d:ca:13:40:b2:1a:6f:8b:64:
         0c:36:3a:b5:7d:8d:7b:17:18:f9:3a:a2:d7:29:7b:2e:c1:96:
         27:d8:5f:2f:4a:0a:60:ca:42:39:ca:32:92:ae:be:b4:df:b2:
         e7:49:63:95:4b:bd:d0:75:ef:56:25:7c:34:fb:e8:e5:72:14:
         e8:bc:9a:c9:4d:5f:6e:4e:eb:46:e4:39:d0:20:54:f6:a4:7b:
         e7:b9:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org