Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36342e302f32302d3234203d3e20323632373430.roa
File:                     3138362e3230382e36342e302f32302d3234203d3e20323632373430.roa (raw, json)
Hash identifier:          IR4QcjkkwGDxtxExPPdjsWheZHATt/lY4YtKTcMX/jk=
Subject key identifier:   16:7F:5D:1E:1B:0C:D3:43:00:0E:D7:B7:5C:1B:54:1C:E0:7D:5C:18
Certificate issuer:       /CN=94E9EBE9869C286286ECD79575BCB63D45B3F9D5
Certificate serial:       5BF62495E3F97F6DB5E7464047D8B69FCFAFB659
Authority key identifier: 94:E9:EB:E9:86:9C:28:62:86:EC:D7:95:75:BC:B6:3D:45:B3:F9:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94E9EBE9869C286286ECD79575BCB63D45B3F9D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36342e302f32302d3234203d3e20323632373430.roa
Signing time:             Mon 11 Apr 2022 00:18:20 +0000
ROA not before:           Mon 11 Apr 2022 00:13:20 +0000
ROA not after:            Mon 10 Apr 2023 00:18:20 +0000
asID:                     262740
IP address blocks:        186.208.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f6:24:95:e3:f9:7f:6d:b5:e7:46:40:47:d8:b6:9f:cf:af:b6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E9EBE9869C286286ECD79575BCB63D45B3F9D5
        Validity
            Not Before: Apr 11 00:13:20 2022 GMT
            Not After : Apr 10 00:18:20 2023 GMT
        Subject: CN=167F5D1E1B0CD343000ED7B75C1B541CE07D5C18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:89:70:71:97:02:84:0b:14:69:a1:94:bc:
                    1c:4d:bf:b0:87:8e:6b:3d:f7:23:9c:13:77:04:0a:
                    e4:f0:19:4f:32:d1:ff:51:12:9b:e1:e7:59:0d:da:
                    f6:de:fb:6f:8b:ae:85:d9:40:d9:e3:ba:56:d3:60:
                    bc:6b:5a:81:f6:16:5d:e9:92:f4:0a:02:48:e5:eb:
                    82:e8:74:99:64:73:b6:db:93:80:53:66:82:4a:5c:
                    cf:81:11:ca:66:fe:93:2e:a7:9a:a0:83:85:bc:f8:
                    c7:37:f4:99:de:4a:e8:fd:8e:26:b8:95:05:72:8a:
                    f9:54:00:47:2c:9f:24:72:c0:97:a5:28:1b:fa:9a:
                    19:2f:0c:1e:90:c2:35:3c:a8:9d:1a:d4:8c:e6:be:
                    6d:94:4d:b7:53:11:1f:bc:31:e8:80:82:e5:50:c6:
                    bf:ce:e5:f7:16:b0:1f:9b:90:27:96:36:59:ab:87:
                    ac:ce:66:db:8c:8b:f3:3b:eb:18:92:43:c6:76:2d:
                    d6:63:0e:3c:a3:d7:7d:be:58:84:e3:44:5d:86:10:
                    d4:e9:b0:bc:8e:e1:8f:f5:b6:3d:5c:0f:f5:28:97:
                    2a:f3:35:3a:db:7e:79:ac:1a:1d:07:c7:ce:4d:e0:
                    35:6f:2d:7b:a4:f9:d7:b7:a8:5d:c1:6b:41:d5:24:
                    9d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7F:5D:1E:1B:0C:D3:43:00:0E:D7:B7:5C:1B:54:1C:E0:7D:5C:18
            X509v3 Authority Key Identifier:
                keyid:94:E9:EB:E9:86:9C:28:62:86:EC:D7:95:75:BC:B6:3D:45:B3:F9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/94E9EBE9869C286286ECD79575BCB63D45B3F9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94E9EBE9869C286286ECD79575BCB63D45B3F9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36342e302f32302d3234203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:08:9d:ae:ae:d7:31:43:6b:37:71:64:b2:30:57:91:03:61:
         3d:cb:88:77:32:9b:e7:4f:16:04:a8:ef:ed:59:e0:11:fb:b9:
         d0:19:aa:98:17:4d:44:eb:6f:56:2e:8f:5a:4c:9a:fc:12:a7:
         c5:41:6c:30:91:87:4f:8c:6e:c5:73:7c:a6:96:2d:ee:22:44:
         ee:a3:61:28:3e:ca:56:4f:de:9a:cb:09:9d:a6:bf:95:86:1c:
         41:cf:13:eb:7d:6a:f8:33:5c:ae:76:4b:a1:03:c7:58:5a:97:
         b5:7b:ed:63:6b:7e:47:dd:c2:0d:6b:a7:6e:5d:c0:f2:ed:35:
         6d:8b:c2:0d:a3:47:59:33:6c:91:5e:67:6e:cb:47:3b:04:e9:
         e4:16:0a:21:df:dc:2b:da:66:e9:39:00:2c:d1:21:80:3e:f5:
         81:ca:fe:c6:a2:7c:51:73:ad:fd:07:0a:54:95:89:27:2f:24:
         11:cf:47:e2:84:bb:fa:12:ed:da:3a:a3:7e:11:15:ba:46:d3:
         40:6a:55:7a:c9:0e:d3:f3:c3:0e:42:fe:68:f2:0f:b2:b8:56:
         59:12:cc:a2:60:ac:6f:67:8e:31:ec:6c:c6:3d:4a:9e:da:19:
         6f:3f:d5:db:76:fa:c1:3a:64:cd:0b:87:76:8b:47:e2:2a:2b:
         a2:fb:77:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org