Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/3138362e3139322e302e302f32302d3234203d3e20323632373235.roa
File:                     3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (raw, json)
Hash identifier:          0zQUNDbWhIprtLz2rHaoZeVQ6ouG3lJGvL/YT5HtufA=
Subject key identifier:   3D:C9:D6:10:F7:03:AD:59:62:78:52:2A:0E:FA:C3:83:FA:0E:B2:BF
Certificate issuer:       /CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
Certificate serial:       6BDEA1EA890CC122F129DA3514225E81F999B111
Authority key identifier: D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/3138362e3139322e302e302f32302d3234203d3e20323632373235.roa
Signing time:             Fri 12 Apr 2024 21:12:25 +0000
ROA not before:           Fri 12 Apr 2024 21:07:25 +0000
ROA not after:            Fri 11 Apr 2025 21:12:25 +0000
asID:                     262725
IP address blocks:        186.192.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:de:a1:ea:89:0c:c1:22:f1:29:da:35:14:22:5e:81:f9:99:b1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
        Validity
            Not Before: Apr 12 21:07:25 2024 GMT
            Not After : Apr 11 21:12:25 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:e8:62:84:bc:c5:52:73:5b:3e:84:36:30:
                    ba:6e:32:a1:fb:c4:4e:e8:e2:70:1d:6f:c4:19:28:
                    ad:02:e9:2b:4d:8f:ff:51:75:15:a9:13:ec:53:9d:
                    51:77:b2:6a:c8:7e:aa:d2:47:21:68:70:53:7d:b2:
                    15:3b:eb:5a:d9:32:8f:1f:f0:96:c6:fa:bc:ea:d3:
                    bc:34:b9:c9:04:e6:5a:e7:2b:58:0f:a4:4c:31:50:
                    71:de:59:9e:29:e4:0e:40:47:be:ba:06:a5:61:c6:
                    44:2e:22:45:7c:67:ef:bd:68:0e:7f:f6:91:96:91:
                    82:a5:32:b5:e3:fa:25:2c:74:d9:04:4b:ea:8a:14:
                    14:c6:cf:da:b4:a1:c2:8d:fb:61:7b:a4:9d:a6:ff:
                    d4:fc:b6:ad:cc:79:45:3d:00:c0:c0:17:bf:1b:6e:
                    ab:8b:db:3b:80:66:2c:d4:75:19:82:8c:5f:99:08:
                    06:3a:85:34:f0:b5:c3:a2:be:1b:4a:15:8c:61:e6:
                    3a:0e:54:43:aa:9c:01:ba:a0:9e:d8:b5:84:0f:c0:
                    f0:27:38:41:8e:96:b3:05:f3:f5:f1:27:29:d4:db:
                    5c:83:a3:4c:22:30:5e:c6:51:c8:14:6e:63:fd:33:
                    9a:bf:2c:c6:2a:23:09:97:67:7d:04:31:69:3f:f3:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C9:D6:10:F7:03:AD:59:62:78:52:2A:0E:FA:C3:83:FA:0E:B2:BF
            X509v3 Authority Key Identifier:
                keyid:D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/3138362e3139322e302e302f32302d3234203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:96:98:f0:4b:18:95:0b:80:91:02:ff:29:21:1f:d1:a2:69:
         aa:a3:fb:63:03:a5:3c:2a:11:aa:e8:27:58:ee:7b:dc:29:88:
         65:ba:67:23:4b:08:35:ca:7f:41:02:52:4c:aa:99:4e:96:38:
         24:60:28:c1:e6:97:f3:b2:7a:84:d5:2d:b5:77:d9:02:1c:dd:
         a0:c9:b1:7e:bd:28:2e:ac:d7:17:7d:40:bb:b0:05:5d:18:64:
         7f:26:fa:c9:db:68:16:1d:05:5e:02:aa:48:54:64:a7:a7:65:
         2b:1f:94:e7:fc:f6:3f:a6:cf:66:49:8e:64:4e:2f:15:d5:dc:
         a9:e4:3b:66:6f:62:27:43:34:af:17:09:b5:45:5d:43:4c:b0:
         8d:cf:06:80:dc:ff:0c:98:56:e7:6c:91:a0:b6:d1:42:8f:b8:
         25:a4:b7:2f:73:8f:1a:fc:11:f0:e7:5b:4a:d6:28:d2:43:81:
         97:43:00:0a:d8:e9:3b:bd:ac:51:7f:76:30:65:95:b7:7d:c9:
         9a:65:2d:22:f7:dd:64:58:da:a9:46:63:95:45:47:87:90:9e:
         15:58:8e:ec:d6:89:f6:cf:8b:22:26:cb:99:89:42:fe:bb:75:
         f8:a5:d0:af:e7:bd:37:5e:7b:63:10:20:64:2a:79:30:1f:7b:
         5c:da:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org