Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134382e302f32342d3234203d3e203238323730.roa
File:                     3138362e3231392e3134382e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          udHI77rdZhJH7DwhVGkoeWnxb5bdYkLf8OTs5moO9Gg=
Subject key identifier:   97:8C:37:43:CF:64:1E:70:1B:6F:DA:60:40:AC:2B:60:F1:50:FC:DA
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       5E0BE65F157A15533466158BFA2BE882F3DF67DE
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134382e302f32342d3234203d3e203238323730.roa
Signing time:             Thu 07 Nov 2024 20:40:16 +0000
ROA not before:           Thu 07 Nov 2024 20:35:16 +0000
ROA not after:            Thu 06 Nov 2025 20:40:16 +0000
asID:                     28270
IP address blocks:        186.219.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0b:e6:5f:15:7a:15:53:34:66:15:8b:fa:2b:e8:82:f3:df:67:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:16 2024 GMT
            Not After : Nov  6 20:40:16 2025 GMT
        Subject: CN=978C3743CF641E701B6FDA6040AC2B60F150FCDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3f:50:a1:3e:f5:d1:4c:f9:ed:a0:e5:19:34:
                    5e:c7:3d:f8:57:32:e9:39:fe:00:c2:0f:d8:c9:dc:
                    78:ad:a9:5f:64:ed:78:9e:c9:c8:12:a7:80:ab:2a:
                    74:ad:24:5c:b2:c3:18:88:3c:f4:db:f8:d0:52:34:
                    cb:95:9f:50:21:50:f2:d0:72:99:11:5b:8a:3c:61:
                    1a:15:08:98:84:d8:3f:19:35:b5:2b:8c:cc:23:90:
                    47:12:56:44:27:ad:be:21:db:2c:73:9d:6a:c0:a0:
                    85:ac:31:b8:15:e8:c3:0f:cc:8c:6c:b8:f8:23:c2:
                    3e:7a:5e:b1:26:c2:38:9a:23:26:55:5f:01:9e:d6:
                    d1:8a:49:75:49:0c:ac:2c:5c:e5:79:af:cb:9b:3a:
                    a9:b8:c8:78:60:8e:a0:5a:26:1e:ed:fd:e9:4e:4f:
                    43:86:80:f0:07:b7:d8:4a:9e:3f:68:d9:0c:98:27:
                    22:7b:52:b5:20:44:95:5e:1e:ad:35:67:54:98:ff:
                    81:4b:ea:ed:cc:c5:a2:6e:a7:6c:74:ca:5f:03:26:
                    0b:42:e9:91:ae:32:32:05:75:7e:64:9a:73:9e:05:
                    2a:94:27:84:d6:51:1a:f3:8e:c1:10:2e:c9:85:fc:
                    6c:21:d6:30:68:8d:b4:c0:ef:8d:1c:ab:e7:df:b1:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8C:37:43:CF:64:1E:70:1B:6F:DA:60:40:AC:2B:60:F1:50:FC:DA
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134382e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:e9:57:89:e1:28:55:ae:18:1a:20:1a:2a:af:6f:46:30:
         26:ce:01:9b:8a:fa:29:30:56:61:16:47:04:1d:84:61:0e:0b:
         13:47:c7:1e:94:99:67:72:63:68:23:fa:4e:63:d1:b5:cc:ad:
         99:69:a2:ba:1a:dc:b8:e5:c2:b6:80:88:bb:87:55:c0:93:1c:
         b2:4b:e2:d9:a7:66:c2:12:60:1c:a0:3a:94:5b:8d:35:a7:e9:
         10:48:f3:12:ff:ec:f0:57:16:b2:10:6f:59:21:22:b3:62:b5:
         3d:92:ba:bd:74:cd:2f:38:54:24:0e:35:19:5a:08:b9:52:7e:
         23:f9:f7:25:6d:24:15:f0:86:51:95:73:2d:30:c7:d2:e7:39:
         e0:f3:12:21:c2:b2:b9:7f:38:5e:36:48:23:e9:a9:4c:bc:d8:
         1a:4a:18:15:4a:8b:14:52:00:c5:79:1c:0e:46:3f:45:82:ef:
         7a:8e:52:d5:17:38:44:b9:9e:4b:4b:d2:f2:eb:9d:99:b9:5e:
         ed:02:5d:d9:40:2a:33:20:5c:b5:1e:ca:c9:cd:f9:4c:96:d5:
         e6:06:50:88:78:b0:d7:f1:c3:0d:d8:5e:84:2f:71:51:28:25:
         ec:85:6e:8f:65:cc:68:1b:ad:16:c6:0e:09:b9:3d:77:66:c0:
         42:a4:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org