Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/3138362e3235302e32302e302f32332d3233203d3e20323632383033.roa
File:                     3138362e3235302e32302e302f32332d3233203d3e20323632383033.roa (raw, json)
Hash identifier:          vzqF6Jjy7CwzNqcgB/LPsBHf46EHwS8+tChfmcrVhEk=
Subject key identifier:   23:10:F1:6B:65:14:44:3C:68:C7:73:5C:FA:8F:83:27:B2:11:10:23
Certificate issuer:       /CN=5CE8CC62295E168AEA6DF72A4F79361AE557F0D7
Certificate serial:       31C03467A869D281E1EDB024A660DF8CA97FC92D
Authority key identifier: 5C:E8:CC:62:29:5E:16:8A:EA:6D:F7:2A:4F:79:36:1A:E5:57:F0:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/3138362e3235302e32302e302f32332d3233203d3e20323632383033.roa
Signing time:             Wed 03 Apr 2024 20:41:07 +0000
ROA not before:           Wed 03 Apr 2024 20:36:07 +0000
ROA not after:            Wed 02 Apr 2025 20:41:07 +0000
asID:                     262803
IP address blocks:        186.250.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c0:34:67:a8:69:d2:81:e1:ed:b0:24:a6:60:df:8c:a9:7f:c9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE8CC62295E168AEA6DF72A4F79361AE557F0D7
        Validity
            Not Before: Apr  3 20:36:07 2024 GMT
            Not After : Apr  2 20:41:07 2025 GMT
        Subject: CN=2310F16B6514443C68C7735CFA8F8327B2111023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:de:8f:a0:44:d4:26:cd:9f:eb:c0:e7:02:
                    ef:86:45:5b:39:0b:68:b3:4d:d8:9c:bf:01:6a:47:
                    ed:63:1a:c7:f1:b1:3f:54:ac:b1:06:36:07:1d:ba:
                    00:17:1e:6d:c5:61:19:70:a0:64:35:1a:91:b3:e9:
                    68:53:d6:f3:8c:b4:af:96:a9:60:2a:12:d2:79:ce:
                    9c:be:a9:2a:83:35:a5:db:4a:bd:d1:8d:be:d9:7d:
                    3e:9f:e6:6a:75:83:a4:44:b2:29:85:1a:8b:c4:51:
                    b0:19:e4:03:23:03:2f:b0:2a:2f:02:62:ed:e0:c0:
                    95:86:98:0e:b9:3d:aa:c5:d1:c2:4d:8e:69:38:58:
                    36:3b:91:ea:9f:89:4c:a8:38:87:12:6f:95:0c:de:
                    13:bf:04:81:1d:be:f4:a1:bc:c2:c6:4a:c0:79:cf:
                    85:cc:f9:06:e1:ea:42:2b:7a:e8:32:3f:80:a0:13:
                    2a:c7:4a:7b:9b:6c:40:ca:3e:c8:a1:40:58:cb:e8:
                    a7:98:be:b4:12:f8:e5:58:48:fa:2f:d7:e0:19:e3:
                    a4:49:31:72:f5:04:86:45:f1:a5:57:cb:e4:b6:15:
                    a5:63:90:ad:3e:6e:37:34:b4:78:b2:e7:3a:97:45:
                    97:5c:75:72:cd:16:67:d3:dc:40:e2:e0:bb:c0:fa:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:10:F1:6B:65:14:44:3C:68:C7:73:5C:FA:8F:83:27:B2:11:10:23
            X509v3 Authority Key Identifier:
                keyid:5C:E8:CC:62:29:5E:16:8A:EA:6D:F7:2A:4F:79:36:1A:E5:57:F0:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CE8CC62295E168AEA6DF72A4F79361AE557F0D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/1/3138362e3235302e32302e302f32332d3233203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:db:73:11:40:26:2e:ca:09:9d:88:cd:8b:d2:41:f6:6a:84:
         af:7d:08:71:ff:65:87:ad:5f:1e:fd:db:9e:c6:4a:9b:bd:23:
         bd:76:a2:b9:d3:b2:3e:3e:37:12:ce:ea:e1:b8:b7:c2:f8:95:
         c5:81:0c:50:34:53:97:90:87:35:4b:77:d0:ab:70:81:9c:88:
         d1:e2:91:ce:09:80:96:fe:23:72:ef:ec:8e:83:74:57:71:f0:
         1b:4f:af:c7:7c:9b:9c:d6:58:62:c2:e4:16:43:bd:2d:27:c8:
         57:f8:62:0c:55:f0:e9:2d:0d:77:08:66:c0:42:91:d2:21:5e:
         90:39:3e:7e:24:3a:4b:8b:ac:3a:d7:e1:2b:c3:80:c2:9a:8b:
         e1:70:94:94:67:ba:45:83:77:d0:5f:43:05:b8:4e:0b:e8:81:
         00:99:d1:fa:68:93:9d:e3:82:2a:5c:4f:5e:26:f2:97:64:3f:
         a2:1c:63:f3:57:fc:b2:a3:b8:0f:6f:83:e4:0c:f8:e4:04:b1:
         88:ad:b6:7a:50:7a:2a:ac:27:68:94:19:e7:b0:de:6e:28:c5:
         e2:a1:8e:42:3c:87:e9:bd:fc:79:1b:ee:42:af:ad:f7:22:34:
         a4:94:7d:fe:fe:f9:88:3c:ea:8a:bf:1e:d5:12:a2:f3:1d:5b:
         34:57:f7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org