Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e302e302f32332d3233203d3e20323632373235.roa
File:                     3138362e3139322e302e302f32332d3233203d3e20323632373235.roa (raw, json)
Hash identifier:          aluf7imnkfx66t3gKWp9jJDQwk4YKntTHI1wG9IA/Wk=
Subject key identifier:   5D:BE:8F:9A:7E:AA:E5:87:32:53:A7:AC:0D:1C:8B:2F:D7:3B:7C:64
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       4748CC602DBDB7E8794E83CB2A8DFA826762A3FB
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e302e302f32332d3233203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:50 +0000
ROA not before:           Mon 11 Nov 2024 20:56:50 +0000
ROA not after:            Mon 10 Nov 2025 21:01:50 +0000
asID:                     262725
IP address blocks:        186.192.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:48:cc:60:2d:bd:b7:e8:79:4e:83:cb:2a:8d:fa:82:67:62:a3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:50 2024 GMT
            Not After : Nov 10 21:01:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:48:dd:bb:d6:20:eb:d7:06:78:c4:bd:d3:18:
                    53:c1:5d:e2:96:b6:df:46:48:c9:b4:13:38:87:53:
                    d3:b4:24:00:a0:a1:3a:0a:fe:27:76:87:4e:3e:35:
                    f5:3e:d1:b6:42:f1:98:db:41:47:49:a2:25:6b:f9:
                    52:82:29:e6:af:26:9d:64:3b:12:33:b2:7c:9f:41:
                    21:0b:0b:e3:61:12:71:ce:8d:b4:96:0a:42:09:41:
                    b2:95:ab:24:8a:0e:22:9a:d6:ad:36:0d:85:96:07:
                    7b:57:21:13:46:91:ec:f0:ff:6f:13:33:0c:85:9e:
                    8c:bd:54:8b:eb:bb:96:18:ba:ce:a0:65:86:62:a0:
                    78:ff:e8:33:1c:c2:98:ad:10:56:88:a8:ee:57:b4:
                    fe:eb:4a:5d:21:96:80:6d:66:f3:ab:21:19:8a:47:
                    6c:8e:12:2d:5b:9d:ab:70:e4:1d:53:44:24:47:a1:
                    fa:84:fc:17:eb:a0:37:10:85:e5:2d:28:1a:e4:3f:
                    b9:8d:6b:73:a9:f9:2e:e2:0b:27:1f:19:5c:7d:e8:
                    51:75:6b:5d:20:d7:6e:ee:43:19:35:25:4a:1b:0f:
                    27:5f:66:46:ac:6c:4d:0e:9b:0d:c1:de:bc:87:2c:
                    0a:36:15:4d:33:70:2e:c5:e9:17:b7:14:be:5c:3d:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BE:8F:9A:7E:AA:E5:87:32:53:A7:AC:0D:1C:8B:2F:D7:3B:7C:64
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3139322e302e302f32332d3233203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:79:fc:7e:43:69:4c:f0:fa:21:1d:c7:5d:21:68:28:d1:88:
         25:bd:ec:99:5d:dd:51:0b:c9:90:35:c0:2a:04:3f:c8:79:b7:
         1f:77:ee:c4:f5:ef:fe:28:a6:bf:2b:26:20:1b:79:78:0c:41:
         80:e6:27:49:cd:30:2b:68:30:30:79:de:87:86:de:f8:fe:61:
         19:be:84:02:58:ce:9a:1f:3f:ef:55:fd:4c:1f:a4:b0:d6:35:
         b1:15:fd:fa:c5:70:5a:1c:25:e7:f1:db:87:42:43:e6:4a:e3:
         bb:ac:8a:3c:74:30:20:60:24:f2:b1:18:a5:b0:d6:90:a4:40:
         9e:cb:b6:8f:aa:83:54:b6:c0:a6:5b:e8:e8:c9:3b:5c:3c:b4:
         5d:af:94:40:a1:48:48:f0:4f:28:6a:3b:50:61:ea:4b:0d:39:
         ac:4e:ec:05:df:39:c8:ae:d0:c4:6b:f5:56:cb:64:ad:9b:8d:
         e8:39:2f:3f:0c:d6:63:c9:ad:e9:56:72:43:a3:a6:98:1f:44:
         c9:52:a7:1f:87:fe:a8:af:56:1c:6f:50:ff:26:b4:43:06:be:
         f5:16:ea:a2:3d:3c:e0:fc:8c:8e:88:2e:19:26:a9:d1:2b:67:
         3b:c4:7f:b4:c5:f4:d2:db:65:d2:77:a4:89:93:ec:1a:69:11:
         59:0d:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 19:19:58 2024 by rpki-client on console-ams.rpki-client.org