Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e302e302f32302d3230203d3e20323632373235.roa
File:                     3138362e3139322e302e302f32302d3230203d3e20323632373235.roa (raw, json)
Hash identifier:          +weZ4qJ7wewEYXVkhdgvyq8blOG/0tJfyWBkVshzbTM=
Subject key identifier:   FF:2A:AD:23:B0:16:69:0F:8A:43:7A:FB:C8:08:B7:1B:F7:32:4E:6F
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       2267BB52FBB7A0EDFA6F381FE4E66BC0EA4AC43E
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e302e302f32302d3230203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:52 +0000
ROA not before:           Mon 11 Nov 2024 20:56:52 +0000
ROA not after:            Mon 10 Nov 2025 21:01:52 +0000
asID:                     262725
IP address blocks:        186.192.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:67:bb:52:fb:b7:a0:ed:fa:6f:38:1f:e4:e6:6b:c0:ea:4a:c4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:52 2024 GMT
            Not After : Nov 10 21:01:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:ff:32:5e:e5:bd:d1:39:67:c1:06:d5:45:
                    eb:47:13:41:41:b9:fd:43:2e:05:d5:73:2b:0c:fd:
                    6b:34:4d:2b:4b:e1:aa:0c:81:33:71:01:0e:b3:4c:
                    b1:41:83:c7:36:44:87:bc:5d:b6:31:8b:2a:7b:00:
                    a6:89:55:92:eb:2b:90:18:dc:b2:7c:e3:ca:54:12:
                    0e:5c:3e:6e:bb:70:5d:a0:da:f1:ca:db:e4:b7:68:
                    a9:39:f8:f1:15:7d:b0:20:6a:a3:45:1f:7a:2f:05:
                    63:87:86:ac:df:c3:83:a5:f8:9d:24:1f:9f:92:4c:
                    73:b2:35:8c:c6:6d:42:90:ec:bf:c8:4b:77:b7:8f:
                    13:31:3d:02:fa:a3:a7:7b:87:67:d8:35:30:29:76:
                    9d:37:06:67:93:a4:e6:82:ae:ef:c9:ba:ce:36:0f:
                    c0:42:2c:2e:65:3f:a6:2b:6b:b5:40:d2:d7:6f:d0:
                    6e:67:b0:77:ec:d4:e5:f3:57:c1:44:96:b1:d3:14:
                    78:69:24:b8:f5:c2:3e:16:c8:97:9a:9d:99:e8:23:
                    de:6e:87:11:09:03:5b:7e:52:6f:e4:4b:80:af:ca:
                    fa:4b:32:91:cd:f9:3b:29:0c:58:2e:61:c6:f2:20:
                    13:32:97:29:dd:06:5b:56:c0:89:40:88:e1:07:1f:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2A:AD:23:B0:16:69:0F:8A:43:7A:FB:C8:08:B7:1B:F7:32:4E:6F
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e302e302f32302d3230203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:71:e4:18:15:b2:1c:fc:b7:fa:ad:21:7f:02:d9:4f:79:04:
         41:f3:c0:bb:c7:fb:ad:ac:c8:60:e1:a3:39:00:be:ee:47:5f:
         90:1f:7a:97:87:f0:56:c4:2f:f5:26:8e:af:f2:53:06:51:c2:
         3d:e0:a3:e7:2f:1c:29:0f:6f:f5:b1:f9:23:92:6e:04:54:1e:
         29:a9:90:ab:bb:fc:e6:ee:d9:e3:29:13:b6:fd:7b:66:08:8e:
         a0:20:9f:d7:7c:cc:09:6d:07:27:a9:ed:71:2e:9e:b5:1b:0a:
         4e:83:36:84:bc:42:00:f8:8d:21:be:a5:2e:ab:ed:59:b7:25:
         cc:ed:16:5b:d2:4e:9e:ae:8b:51:df:4d:8e:b6:9b:48:bb:52:
         63:8c:f1:0e:bb:53:f4:ee:38:50:fd:6c:91:06:45:b6:76:60:
         99:02:6b:87:50:6d:84:3c:c3:b3:0e:d3:dd:a2:c8:50:95:2f:
         24:0f:a4:46:31:1a:4e:0e:31:61:43:48:79:f3:0f:80:18:64:
         c8:04:9c:db:14:43:3b:53:ec:0d:c4:b0:f6:3e:9b:2c:88:15:
         70:2c:cc:2e:c6:db:6a:be:fa:ef:6e:92:cb:71:f5:d2:70:9e:
         0b:3f:87:e0:57:3f:37:64:bb:b5:a1:25:c8:b4:60:73:6a:cc:
         37:e4:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 18:29:11 2024 by rpki-client on console-fra.rpki-client.org