Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          d1e9KNoksY7cc45GrLGjZ05cG0cmE+gH28sTcOjZGh8=
Subject key identifier:   E6:6F:65:B4:E4:AC:37:D5:AD:6F:3B:7A:AD:91:55:1E:6A:FE:A8:4C
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       33BA89D2D1891306508A990E337D9251662C2BBC
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa
Signing time:             Thu 07 Nov 2024 20:40:12 +0000
ROA not before:           Thu 07 Nov 2024 20:35:12 +0000
ROA not after:            Thu 06 Nov 2025 20:40:12 +0000
asID:                     262992
IP address blocks:        186.219.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ba:89:d2:d1:89:13:06:50:8a:99:0e:33:7d:92:51:66:2c:2b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:12 2024 GMT
            Not After : Nov  6 20:40:12 2025 GMT
        Subject: CN=E66F65B4E4AC37D5AD6F3B7AAD91551E6AFEA84C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:57:94:78:a9:4b:1c:a5:06:fe:c2:6e:b1:
                    15:7c:47:45:d0:70:c6:79:b6:e0:ac:69:ac:85:c0:
                    bd:32:e0:60:2a:9f:85:70:f5:1e:b2:eb:0d:11:68:
                    0a:aa:29:07:71:6a:4d:05:6e:05:f8:b7:55:a0:c1:
                    6b:a5:5e:1d:9d:17:8f:b8:4f:9c:b2:cf:06:31:60:
                    8a:d9:c5:0f:07:33:b7:7b:d9:3f:31:90:ef:b8:76:
                    ca:46:6c:a2:1c:35:08:e2:da:e7:c4:43:3b:26:9f:
                    8f:4f:e6:bf:3c:52:68:d9:22:04:95:96:9d:e0:0d:
                    6c:5c:03:b6:9f:f0:25:96:ba:15:18:19:8d:78:cc:
                    35:bf:01:9b:5f:dd:2a:93:f8:1c:18:bc:33:33:ab:
                    f1:c0:2d:ca:85:0c:c2:3d:af:7f:ca:a3:9a:a8:6d:
                    b2:60:57:c0:0a:7b:30:39:01:f3:6e:f1:e1:22:c0:
                    c7:ee:dd:22:43:ee:2e:39:23:5a:e3:2a:ec:1a:86:
                    fc:70:b1:9a:93:03:ae:36:b9:73:8b:68:32:35:86:
                    ac:2a:70:57:02:6b:b5:87:68:a0:7f:68:54:ad:9e:
                    10:67:b8:40:53:b7:8c:d9:3d:1f:56:67:0a:90:ab:
                    2e:23:d8:d8:62:6b:6b:c9:03:aa:2e:e4:5d:c3:de:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6F:65:B4:E4:AC:37:D5:AD:6F:3B:7A:AD:91:55:1E:6A:FE:A8:4C
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:4d:36:18:c0:fd:df:fb:e5:4b:31:77:58:af:cf:9a:a3:91:
         72:cd:ce:69:e7:12:bc:f8:06:4d:cd:39:ff:fd:fe:05:d3:76:
         37:88:a4:0b:24:53:07:bf:b1:5c:0c:d0:1e:ef:45:f9:8a:43:
         48:43:ff:32:26:ad:b5:cd:92:31:80:08:af:e7:a7:d5:8a:80:
         a0:a4:13:e6:a3:81:38:42:c5:32:61:83:9a:37:23:7e:17:05:
         42:f1:5e:c9:68:e0:0d:ec:c8:0d:06:af:1b:a2:6f:bc:c7:0b:
         2e:3e:90:cc:84:7e:1b:6d:bc:ee:ac:07:f4:a9:e4:53:70:70:
         35:29:fd:de:41:46:47:5d:59:e0:de:ab:f1:58:2f:a9:a3:78:
         47:71:e0:c5:a2:95:9a:30:12:cc:06:c8:d0:5f:ce:88:04:c9:
         43:dc:1b:ec:84:53:18:b0:0f:02:23:14:7a:67:66:9c:6b:ae:
         b3:2b:f7:f0:ba:4a:67:86:a8:9f:41:86:e3:84:bc:17:c6:dd:
         29:14:49:95:61:5d:55:dd:5b:5a:da:46:29:bd:66:0c:e6:e8:
         89:61:11:b0:31:23:f9:c2:d0:29:1c:cf:be:e6:a3:c4:ec:3e:
         a9:62:5e:15:5a:63:1e:b4:a2:24:df:66:af:9a:b9:e7:a3:66:
         f6:0f:4a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org