Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa
File:                     3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (raw, json)
Hash identifier:          qwhOm5YhXQVUwbCIglA23dV4VZllf+NdnGns38AlL2U=
Subject key identifier:   46:BE:60:3D:FF:85:BA:F0:2A:4A:76:4B:86:40:61:35:49:C5:9C:CF
Certificate issuer:       /CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
Certificate serial:       13B29BDFCE29FAFCB7ED77F26F9448D73D184736
Authority key identifier: D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa
Signing time:             Fri 12 Apr 2024 21:12:37 +0000
ROA not before:           Fri 12 Apr 2024 21:07:37 +0000
ROA not after:            Fri 11 Apr 2025 21:12:37 +0000
asID:                     262725
IP address blocks:        186.235.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b2:9b:df:ce:29:fa:fc:b7:ed:77:f2:6f:94:48:d7:3d:18:47:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE
        Validity
            Not Before: Apr 12 21:07:37 2024 GMT
            Not After : Apr 11 21:12:37 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:7a:f6:f3:ae:21:fc:aa:0d:07:e6:6b:d8:
                    bf:bf:f5:ab:d2:c4:f5:f0:90:19:86:cf:97:a1:4f:
                    6b:56:91:ae:75:76:8c:89:17:ca:f5:34:a3:a7:ac:
                    29:9c:9e:6f:c3:3f:b3:a3:d3:aa:50:a3:b4:bf:3f:
                    20:34:9d:2a:28:6a:45:cc:70:af:ea:11:3b:2c:80:
                    b3:34:e0:89:80:2b:68:ed:5b:c5:3b:da:c4:b7:33:
                    b6:86:06:94:3b:d6:28:15:89:fb:cd:a5:74:7a:b2:
                    b4:a4:a6:0b:eb:b4:7b:90:c6:4e:5e:bb:bb:a5:14:
                    6b:6e:95:80:dc:8f:8f:c1:8d:c3:ed:da:52:fd:47:
                    5b:ce:25:2e:e0:bd:fe:73:5f:cb:39:25:14:9d:43:
                    4b:0d:c0:b0:7a:bd:77:1c:dc:89:34:fe:60:18:80:
                    e0:e3:79:cf:f8:c9:56:2f:6b:18:2d:76:20:cd:77:
                    09:76:cd:bb:34:3d:58:94:96:9e:44:94:93:a2:5c:
                    bc:93:c1:16:29:34:9b:59:8d:60:ca:d3:9f:54:63:
                    d3:cf:e1:96:79:20:e3:b6:f9:59:86:74:95:06:5b:
                    fc:71:bc:d7:5e:43:a5:ca:9a:d2:a0:2b:40:7e:72:
                    8e:b1:49:69:3d:78:1a:fe:a6:96:91:d2:5c:38:90:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BE:60:3D:FF:85:BA:F0:2A:4A:76:4B:86:40:61:35:49:C5:9C:CF
            X509v3 Authority Key Identifier:
                keyid:D2:7C:F3:62:E3:B4:54:2D:7E:C6:D9:5B:4E:D5:F1:0B:5B:F9:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D27CF362E3B4542D7EC6D95B4ED5F10B5BF9C4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/1/3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:af:bd:2f:1b:27:06:73:61:0c:ea:e0:ed:61:d7:c5:f8:3b:
         fc:75:f7:ca:81:a9:8c:5f:c2:e0:c4:6b:f6:4b:5c:c1:62:1c:
         1a:fa:7e:14:a3:b6:64:75:2b:92:60:40:a0:aa:da:f2:c8:24:
         36:2c:3f:4c:8d:e3:9f:a6:8c:db:30:5f:c2:d4:f9:25:10:b0:
         8e:c4:a6:2d:63:58:4d:64:e4:6e:c5:92:db:7c:22:78:9a:a6:
         b5:05:3e:74:8a:f1:d0:bd:af:55:dc:41:72:dc:2b:99:51:7b:
         08:60:88:04:5a:d2:c0:8c:82:38:92:23:a6:99:4d:bc:92:9f:
         80:17:4a:15:9b:5e:1d:ee:15:a2:af:46:c6:0a:21:a6:ad:a3:
         74:6d:8e:01:df:a2:f8:fd:38:35:6f:c0:53:5b:53:1a:d8:0a:
         4d:0c:6f:78:66:84:d3:8f:f1:56:12:7d:9f:63:4b:eb:6d:1b:
         65:27:89:c3:e3:67:ac:39:04:92:e8:44:52:44:a0:8a:d9:fc:
         34:a4:c7:d0:b2:a3:02:b6:0e:4a:58:4d:b4:20:1e:b0:56:96:
         46:05:28:31:10:d9:bf:eb:88:06:3c:d9:ba:40:c8:a8:f2:b3:
         b8:2a:1e:ab:f3:69:45:67:07:f6:8c:52:c4:ef:ee:b3:f4:f7:
         dc:57:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org