Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36342e302f32312d3231203d3e20323632373235.roa
File:                     3138362e3233352e36342e302f32312d3231203d3e20323632373235.roa (raw, json)
Hash identifier:          +A9mPMTjz1Q2GbwEFA/UyJ0nfgirTOl6jcpqpUVNjeY=
Subject key identifier:   BD:7A:2E:4E:BA:20:D5:AB:E1:47:A5:FC:0C:1F:CB:D9:10:81:31:55
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       6E6E2C89B9971CEE6BD127DC2A71094A3198D8FC
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36342e302f32312d3231203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:51 +0000
ROA not before:           Mon 11 Nov 2024 20:56:51 +0000
ROA not after:            Mon 10 Nov 2025 21:01:51 +0000
asID:                     262725
IP address blocks:        186.235.64.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6e:2c:89:b9:97:1c:ee:6b:d1:27:dc:2a:71:09:4a:31:98:d8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:51 2024 GMT
            Not After : Nov 10 21:01:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:51:4d:43:6c:1b:07:08:fb:3d:47:fa:aa:
                    09:68:4b:18:17:b8:5b:0e:bd:da:5b:18:d5:9f:7c:
                    6a:44:3a:1d:07:42:e8:ee:f5:28:02:b1:cb:51:46:
                    db:c6:f1:1d:c5:a0:f9:1d:6d:ac:a5:ae:51:78:7e:
                    5d:24:c7:93:65:40:f6:3f:db:3a:3a:5c:c8:ad:11:
                    71:ff:d2:aa:7f:13:6e:04:46:c5:b7:4a:3f:4f:75:
                    b8:5b:15:2c:ec:d4:8b:ad:37:47:d6:42:21:cf:fe:
                    b2:a5:47:bd:71:c2:bb:e0:4b:1a:f0:27:22:d9:fd:
                    64:09:88:84:5e:72:00:af:17:87:0d:18:7a:e0:29:
                    39:86:3d:61:21:ec:cd:5f:25:3b:f8:d4:4f:4f:9e:
                    1b:04:6c:2a:8a:2f:c5:02:ff:fd:8e:dc:aa:8f:6c:
                    43:a8:16:ca:da:e2:a3:30:2b:c1:fe:ce:a7:b6:21:
                    83:d4:83:9d:e5:06:e3:a0:63:39:f4:c4:54:51:25:
                    51:cb:d1:ce:49:62:3f:13:63:05:df:1b:d6:20:52:
                    23:74:19:13:dd:5c:53:75:5f:01:6b:d7:0e:73:0a:
                    48:7c:b2:9c:95:62:32:c6:dd:e0:ae:1c:5f:8c:c6:
                    ba:7e:53:d8:b9:91:23:2c:0f:8f:40:3e:ee:21:b3:
                    26:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7A:2E:4E:BA:20:D5:AB:E1:47:A5:FC:0C:1F:CB:D9:10:81:31:55
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e36342e302f32312d3231203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:92:f5:57:39:9a:a5:f7:90:be:c2:13:95:2a:a8:5a:f2:82:
         40:93:f0:09:0c:43:2d:6e:88:f4:db:8f:8d:fb:27:b6:ef:e1:
         fe:b5:6e:fb:d9:da:e6:8e:cf:12:0f:0b:ab:ab:7f:4b:b5:0b:
         93:e2:63:1b:d3:d5:67:89:3f:ba:85:21:ca:7b:53:ed:ec:ca:
         e4:3c:39:33:07:1e:c7:27:1d:62:7e:17:e7:5e:d1:a0:6c:af:
         d7:3e:7d:96:ed:c0:68:f6:b4:69:98:55:41:9b:19:b8:4f:58:
         fd:72:80:a0:e7:7f:d7:2b:db:85:43:9b:14:9e:48:3d:0e:5d:
         ae:f3:1b:fe:6f:5b:bd:cb:94:a4:26:02:66:85:65:16:2d:12:
         ba:83:4a:60:b5:5c:8d:b6:35:7b:23:7d:9b:a6:1b:f0:91:6e:
         32:f8:81:29:4a:f9:10:75:75:89:a7:f0:5a:23:dc:ee:86:47:
         5f:85:ff:1a:a5:10:a6:89:03:9d:87:2f:78:c0:44:f5:93:51:
         ac:1c:1c:ae:05:c9:a4:1a:8c:e5:a0:a4:41:a9:58:5e:4a:08:
         69:ca:d6:33:32:07:36:5f:7c:53:79:83:e3:c7:20:26:28:06:
         ed:45:f6:d9:85:86:0e:4a:63:2d:58:6d:97:2f:e2:66:1d:a3:
         af:7f:0a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 18:29:11 2024 by rpki-client on console-fra.rpki-client.org