Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa
File:                     3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa (raw, json)
Hash identifier:          Ek6QqyhE0uiv5hcF1W9m2d7ZHv/xJ4ocavXL3K5eTHA=
Subject key identifier:   70:4A:2A:30:06:69:5A:79:E5:51:A9:2D:2D:69:B7:0B:61:70:34:A2
Certificate issuer:       /CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Certificate serial:       01361AEC3E67AEE107530E87785EC3303EED4EA9
Authority key identifier: 71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa
Signing time:             Mon 16 Oct 2023 20:43:55 +0000
ROA not before:           Mon 16 Oct 2023 20:38:55 +0000
ROA not after:            Mon 14 Oct 2024 20:43:55 +0000
asID:                     28131
IP address blocks:        186.208.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:36:1a:ec:3e:67:ae:e1:07:53:0e:87:78:5e:c3:30:3e:ed:4e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
        Validity
            Not Before: Oct 16 20:38:55 2023 GMT
            Not After : Oct 14 20:43:55 2024 GMT
        Subject: CN=704A2A3006695A79E551A92D2D69B70B617034A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:dc:0a:bc:17:72:18:3a:ec:e4:a8:b4:46:
                    bc:a1:0b:77:0d:fb:62:bf:8e:23:fd:5f:66:47:fe:
                    69:78:89:8e:7b:06:5b:fa:79:54:1f:59:a7:c2:b0:
                    09:6f:3d:72:9e:0f:f0:ae:15:e9:36:9f:af:85:a1:
                    be:8a:e7:bd:66:5a:7e:0e:7b:bd:09:a5:80:8f:56:
                    8b:df:9f:19:06:bc:97:5a:ae:fb:c1:9a:e6:2f:62:
                    ed:c7:91:b1:0f:6f:f1:4b:ce:65:4e:ff:b5:28:91:
                    d1:e7:b9:c1:f3:74:0f:a9:60:22:85:41:7d:b4:f3:
                    d4:62:3a:05:5a:7e:36:bd:2f:e9:8f:67:14:d6:21:
                    09:69:78:e4:d4:fb:fd:b8:67:54:28:1b:fe:f6:1e:
                    56:ec:65:bd:aa:83:62:ca:56:12:f1:26:62:30:f4:
                    5c:58:cb:a1:fa:e8:88:65:2e:d8:4e:dd:f8:40:76:
                    4a:19:1b:c3:d8:75:6a:98:df:ab:7c:b4:7f:b0:2c:
                    14:65:dc:43:dd:a4:ac:f9:60:a6:3d:52:7b:6a:e6:
                    80:11:55:af:3b:14:e7:ec:3e:e6:22:0e:e9:8e:25:
                    79:70:86:93:c9:6a:bd:c8:7e:ee:6e:8f:9e:d1:cf:
                    82:70:bc:50:12:58:e8:fc:6e:6c:5e:8a:d7:c8:f6:
                    94:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4A:2A:30:06:69:5A:79:E5:51:A9:2D:2D:69:B7:0B:61:70:34:A2
            X509v3 Authority Key Identifier:
                keyid:71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/3138362e3230382e3232342e302f32302d3234203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c0:23:d4:86:b7:58:59:fc:ff:e4:aa:be:cd:38:50:29:34:a9:
         4d:82:51:da:dd:e5:9c:3a:fc:d5:ba:e9:5d:f2:85:97:77:f4:
         8c:08:3f:ac:38:6f:9e:96:a2:b0:a6:ef:35:04:b3:04:46:15:
         fd:ce:7b:28:06:6c:cd:29:56:8e:d0:82:b4:34:0b:15:46:f7:
         69:47:10:61:ef:93:3a:75:f1:be:05:51:08:53:67:55:31:1f:
         43:a3:58:17:fd:49:ae:d4:19:1b:d1:83:60:41:d3:59:ed:46:
         dc:ec:da:44:27:cc:c9:41:31:5e:ef:b3:72:6a:b7:5f:eb:ed:
         b5:8e:a9:45:a3:5e:96:97:a1:2b:34:da:c9:c4:48:84:03:49:
         7e:9b:1d:ce:27:4c:b9:03:c5:b0:a2:3f:e0:97:5a:1e:04:90:
         e4:5d:78:b9:55:c4:fc:3c:a2:f8:68:a4:bc:7a:19:54:8e:ee:
         19:d4:9d:67:4a:cb:35:96:1f:cc:96:00:06:3f:2d:c9:96:25:
         99:ae:d1:a6:e7:5a:65:82:01:9b:7e:a5:80:7d:5c:c3:c0:1a:
         39:3f:c7:c3:66:88:6a:a7:51:de:bb:57:db:eb:15:43:f0:1f:
         e4:98:3c:99:76:13:30:ab:2a:69:86:a6:0c:88:eb:cb:60:44:
         b6:90:04:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org