Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134342e302f32302d3230203d3e20323632393932.roa
File:                     3138362e3231392e3134342e302f32302d3230203d3e20323632393932.roa (raw, json)
Hash identifier:          2gAzoESpXB+8O09KxU5zedEWFYkWAStcTHYj/AuYVsg=
Subject key identifier:   48:71:FC:9B:E5:BE:C5:24:DE:4A:E9:74:72:6D:7B:35:33:1C:AF:98
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       341674E1A9CB19CE152B0957EF128918E6D9034F
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134342e302f32302d3230203d3e20323632393932.roa
Signing time:             Thu 07 Nov 2024 20:40:15 +0000
ROA not before:           Thu 07 Nov 2024 20:35:15 +0000
ROA not after:            Thu 06 Nov 2025 20:40:15 +0000
asID:                     262992
IP address blocks:        186.219.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:16:74:e1:a9:cb:19:ce:15:2b:09:57:ef:12:89:18:e6:d9:03:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:15 2024 GMT
            Not After : Nov  6 20:40:15 2025 GMT
        Subject: CN=4871FC9BE5BEC524DE4AE974726D7B35331CAF98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2b:f4:8f:66:d7:86:cd:53:38:a2:07:81:74:
                    29:f1:c0:bc:9a:01:ee:66:2d:4c:e6:f2:43:77:fe:
                    80:4b:2d:42:e7:7d:18:3e:9e:b1:e0:76:2b:e9:77:
                    b9:55:e6:56:5d:d5:1d:43:ac:57:84:65:da:79:ae:
                    98:eb:f7:b2:3b:02:fd:c6:a6:6f:47:e7:7a:19:d1:
                    f6:42:30:db:b6:32:59:b0:c6:be:f7:25:14:0b:6b:
                    9f:c5:1a:3d:14:ab:45:4c:39:50:d2:8d:a5:62:46:
                    94:b1:d0:13:22:1f:36:14:52:0d:d0:bd:2a:d8:69:
                    86:14:69:c1:cd:b6:a7:c7:5e:15:9d:42:1b:fd:8e:
                    9c:15:11:f8:8e:d7:13:94:c4:b7:9b:f0:3d:45:7f:
                    71:d2:15:0d:37:92:69:76:29:a2:df:20:50:2d:dc:
                    36:2e:8a:7a:ec:58:d4:c7:65:1c:fa:cf:22:70:ab:
                    39:1f:45:e8:6f:c8:d5:e4:a7:eb:d5:0a:af:19:54:
                    37:85:87:81:b6:b2:3d:42:b6:5f:6f:38:f7:ab:d9:
                    3c:44:36:bb:fb:0a:d4:ab:5b:06:6f:ee:56:37:20:
                    f0:22:f7:04:da:30:b5:92:3f:08:c6:84:df:03:f7:
                    df:c7:3c:ad:ea:56:df:f8:54:26:dc:4f:3f:a6:9d:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:71:FC:9B:E5:BE:C5:24:DE:4A:E9:74:72:6D:7B:35:33:1C:AF:98
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134342e302f32302d3230203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:0e:95:9c:d1:a0:7f:56:ad:07:1f:85:c5:7d:e2:7c:b9:
         4a:f5:10:97:f5:95:9a:33:52:57:26:42:51:47:e5:7f:bd:da:
         ca:d6:1f:34:28:61:1d:ae:3c:3c:b8:b3:b1:74:c2:81:4f:60:
         2a:3b:3b:73:e6:74:05:bb:c8:8b:92:73:d9:df:5b:8b:7c:a6:
         ca:7b:92:ac:c5:84:79:e9:c6:a1:47:c2:a3:07:dd:55:df:2d:
         ad:cf:f1:16:cd:1e:ca:0a:5f:7b:8d:cb:87:75:7d:57:53:84:
         19:81:fe:ee:8d:ec:85:55:7c:03:4a:ee:d0:a5:28:b1:f0:d4:
         04:10:ef:4e:09:7d:73:6b:54:59:83:20:3e:70:bc:8c:4b:a9:
         38:f1:c0:34:dd:69:db:0b:77:e3:02:e6:5d:52:ed:0d:f4:ce:
         7a:79:31:0c:b0:0d:37:f3:af:40:bb:f5:1f:c2:0f:6f:ec:b6:
         4a:d7:42:08:c7:2f:55:9c:ff:70:e3:c3:e5:58:af:8e:49:68:
         f8:7c:38:89:54:0f:87:06:cd:1d:88:26:21:b6:7f:d0:df:9a:
         64:21:e1:3a:3d:4c:ea:07:cc:e2:9a:f5:88:f4:78:ed:ce:c3:
         a9:76:74:b1:46:d3:34:1a:af:2e:69:84:7e:c8:c6:df:c6:68:
         6e:d5:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org