Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e32302e302f32342d3234203d3e20323632383033.roa
File:                     3138362e3235302e32302e302f32342d3234203d3e20323632383033.roa (raw, json)
Hash identifier:          8z0nlavcfXHYnt2PGdYYviiuzj/WQj0u8mR3UsiLHxs=
Subject key identifier:   18:36:E8:29:1F:59:98:60:7A:EF:D3:21:6A:17:B6:25:28:63:EE:5F
Certificate issuer:       /CN=4B6E9F11E5A67509F805F1053977D96F854078E0
Certificate serial:       57D1E1241BD3850B0868155DD6D47FACA627B75D
Authority key identifier: 4B:6E:9F:11:E5:A6:75:09:F8:05:F1:05:39:77:D9:6F:85:40:78:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B6E9F11E5A67509F805F1053977D96F854078E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e32302e302f32342d3234203d3e20323632383033.roa
Signing time:             Sat 24 Feb 2024 14:11:04 +0000
ROA not before:           Sat 24 Feb 2024 14:06:04 +0000
ROA not after:            Sat 22 Feb 2025 14:11:04 +0000
asID:                     262803
IP address blocks:        186.250.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d1:e1:24:1b:d3:85:0b:08:68:15:5d:d6:d4:7f:ac:a6:27:b7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B6E9F11E5A67509F805F1053977D96F854078E0
        Validity
            Not Before: Feb 24 14:06:04 2024 GMT
            Not After : Feb 22 14:11:04 2025 GMT
        Subject: CN=1836E8291F5998607AEFD3216A17B6252863EE5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ca:b4:71:e9:7a:18:76:af:99:1a:87:ae:9f:
                    40:a7:33:b0:15:09:4a:5f:1c:78:29:b7:62:39:f3:
                    b0:42:b6:02:94:b1:08:aa:f6:55:26:27:d0:b0:bc:
                    a9:13:c6:7c:0c:05:dd:fa:23:e0:fa:6a:c7:3f:f3:
                    3a:7e:9d:3a:01:06:38:89:e4:9c:3e:1e:e0:a3:e5:
                    26:8c:78:58:42:17:06:55:a0:81:bc:39:2f:f6:22:
                    30:b3:1e:42:b1:c0:51:02:ae:ec:91:ea:e0:10:f6:
                    f8:d1:43:95:2e:76:6b:0e:d5:5a:87:91:83:ed:df:
                    aa:6a:28:a0:f9:d0:7e:74:32:fd:67:c7:35:4f:50:
                    02:fe:4b:65:67:41:cd:4d:f9:9e:58:1e:49:41:c5:
                    e8:94:0b:a2:3e:23:6d:db:23:ef:e8:98:23:bb:0a:
                    40:f2:5a:a4:9a:0b:00:f3:58:71:73:05:0c:9b:47:
                    30:9a:bc:bd:f1:ae:ba:b2:33:b3:94:9a:bb:f1:d8:
                    7c:30:e5:2e:6c:72:4c:34:1a:8a:43:bc:96:73:9b:
                    a5:ad:b6:8b:dd:fc:58:58:c8:4f:48:ca:2f:00:08:
                    dc:85:bf:06:3c:04:81:2e:d0:f0:e1:78:86:a2:ea:
                    d1:6c:68:40:62:be:c3:01:b6:06:0a:8b:07:54:44:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:36:E8:29:1F:59:98:60:7A:EF:D3:21:6A:17:B6:25:28:63:EE:5F
            X509v3 Authority Key Identifier:
                keyid:4B:6E:9F:11:E5:A6:75:09:F8:05:F1:05:39:77:D9:6F:85:40:78:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/4B6E9F11E5A67509F805F1053977D96F854078E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B6E9F11E5A67509F805F1053977D96F854078E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/3138362e3235302e32302e302f32342d3234203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:ef:85:31:b6:9a:cd:0e:dd:75:d4:08:61:8f:6c:9a:55:64:
         25:6a:86:10:1a:0d:68:ae:10:f1:39:80:eb:c5:1b:84:59:e0:
         ec:91:78:9f:f6:d4:d3:94:3e:d8:b9:c1:16:a3:0f:57:fa:4f:
         4e:41:36:b6:63:dc:f9:f2:d1:4e:85:f7:47:73:10:64:e8:a0:
         ba:6b:f5:2f:a8:b9:bb:c7:ef:f6:b6:ed:65:80:c3:2d:78:75:
         70:f8:bc:36:79:80:a7:18:4c:ca:b0:de:4b:d0:78:d1:5d:f6:
         f4:fa:52:82:7e:c8:f9:66:03:92:ca:7b:62:ec:51:b2:4c:c6:
         5b:9e:95:ed:b3:92:25:3b:ea:eb:75:d7:fe:40:95:be:61:bc:
         09:5d:3d:7a:68:64:70:24:2b:60:ca:e3:b1:3f:b9:b0:4a:ee:
         b7:30:bb:3e:63:67:b3:e3:6e:6b:7a:cd:14:c6:4d:cc:16:8f:
         ee:bf:07:a6:06:c2:be:1e:1d:dd:79:8e:1e:f0:5a:91:79:e7:
         61:61:0d:85:67:35:76:72:7d:43:7a:da:78:b8:41:e5:ba:05:
         e8:cd:26:cb:08:d4:ea:9c:c2:b6:5a:ef:ee:6d:9e:22:3f:88:
         22:c3:2d:90:ae:8c:16:0c:e0:c4:49:5d:dc:b9:9d:9f:47:ec:
         4e:96:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org