Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e37322e302f32312d3231203d3e20323632373235.roa
File:                     3138362e3233352e37322e302f32312d3231203d3e20323632373235.roa (raw, json)
Hash identifier:          bA2Ga0JBB2nYxiLbXYV+O/4plh/pOdZqIhrZv5NILl4=
Subject key identifier:   1A:C4:84:F3:E2:10:4D:67:EB:82:42:BC:A3:08:B0:90:91:16:24:C5
Certificate issuer:       /CN=20DE0E6E3D621F83173025848A78216A75E502CC
Certificate serial:       3F032ABC070B0158BAA8BF7F5E8689BD563CA39B
Authority key identifier: 20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e37322e302f32312d3231203d3e20323632373235.roa
Signing time:             Mon 11 Nov 2024 21:01:50 +0000
ROA not before:           Mon 11 Nov 2024 20:56:50 +0000
ROA not after:            Mon 10 Nov 2025 21:01:50 +0000
asID:                     262725
IP address blocks:        186.235.72.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:03:2a:bc:07:0b:01:58:ba:a8:bf:7f:5e:86:89:bd:56:3c:a3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DE0E6E3D621F83173025848A78216A75E502CC
        Validity
            Not Before: Nov 11 20:56:50 2024 GMT
            Not After : Nov 10 21:01:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fe:db:e2:85:4e:9a:0a:69:1d:c3:fa:ec:fc:
                    c9:65:9b:18:3a:10:ab:c2:c8:22:47:c1:ee:8a:68:
                    dd:11:bb:20:02:bb:1a:80:d1:58:65:e3:31:31:a4:
                    b3:15:7f:ad:1c:17:ca:96:c0:46:fe:db:d0:3a:4b:
                    ed:11:e3:a4:0b:66:c4:de:53:33:51:10:79:1d:14:
                    e9:4d:f7:c2:26:57:c0:68:42:1b:15:b8:3a:35:bf:
                    0d:e2:47:4d:f2:be:9b:0e:be:33:32:36:64:fb:71:
                    6a:f7:09:bb:f9:8a:1b:03:77:cb:58:24:99:c8:1e:
                    a9:3d:01:5f:b0:0c:f5:c3:36:95:84:ed:69:6b:c3:
                    ec:e7:53:64:a1:fc:63:bb:0a:55:31:f2:22:fe:9f:
                    13:d7:5c:c2:79:48:60:58:b1:7e:fb:11:38:3e:c2:
                    e3:f0:a1:1d:09:a0:36:d3:6c:a1:d2:ea:ac:9a:57:
                    fc:97:e1:ad:b7:69:6f:cb:d5:5c:59:26:de:23:6d:
                    b0:65:25:eb:15:f5:1b:1e:61:d7:9e:7f:cb:7e:4c:
                    01:c2:e1:65:99:c7:a6:d4:b1:c0:17:5b:08:37:46:
                    91:e6:ee:84:68:5b:7e:e5:8a:fa:a3:0f:36:79:26:
                    b5:11:a9:07:f9:7e:9b:13:cd:27:08:8f:06:e3:f8:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C4:84:F3:E2:10:4D:67:EB:82:42:BC:A3:08:B0:90:91:16:24:C5
            X509v3 Authority Key Identifier:
                keyid:20:DE:0E:6E:3D:62:1F:83:17:30:25:84:8A:78:21:6A:75:E5:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/20DE0E6E3D621F83173025848A78216A75E502CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DE0E6E3D621F83173025848A78216A75E502CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/3138362e3233352e37322e302f32312d3231203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:47:e2:61:27:e8:14:fb:e7:15:83:89:aa:c4:01:4d:fe:fb:
         23:6c:2e:fe:d9:4c:57:fc:f1:62:5c:8a:66:e3:16:4e:9b:34:
         f0:e2:f1:0d:6b:01:fd:4b:12:18:c7:1d:39:20:1d:05:3f:d8:
         f9:7e:7f:ec:79:a9:a7:98:6a:2c:80:c5:58:c3:c1:80:a4:59:
         74:e2:9a:d4:11:a2:4d:3a:f0:7b:e2:f4:1e:cb:35:88:7f:6a:
         6f:36:46:df:c2:f3:72:58:12:02:21:a9:55:5a:fc:d7:0c:66:
         ce:eb:7c:15:83:0d:b6:1b:9b:6b:af:2a:66:ec:22:a2:3d:12:
         0b:ab:06:da:b6:10:5e:b6:5f:75:ac:b5:70:fb:6b:ad:17:44:
         7d:4c:88:bb:64:6f:22:a2:5f:33:3d:16:b2:cc:26:64:5a:44:
         20:16:31:87:39:6d:d6:55:c7:dd:a2:1b:92:d9:d1:e9:3d:5a:
         a9:3f:92:00:02:06:53:47:5d:8c:0b:b0:3d:c5:0b:be:af:bf:
         92:eb:48:40:f6:d8:f1:57:ae:09:d5:8c:ff:c9:3a:15:a8:0f:
         40:82:31:ed:cf:4f:8b:35:e5:6e:cd:47:c8:bd:ef:23:5f:df:
         d0:4b:a3:5f:08:74:1c:ff:4f:27:8b:02:9c:b3:67:8b:d8:90:
         fe:c7:5b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 18:29:11 2024 by rpki-client on console-fra.rpki-client.org