Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3130342e302f32322d3232203d3e20323632373230.roa
File:                     3138362e3139352e3130342e302f32322d3232203d3e20323632373230.roa (raw, json)
Hash identifier:          pJmT9ISvC7L2qeyyRKxbsaG3JcL3rpG9+yXjcjxkVZE=
Subject key identifier:   23:F0:27:CB:2E:21:34:1F:C4:65:F4:3B:7F:DD:15:63:2D:0B:35:FD
Certificate issuer:       /CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
Certificate serial:       45E3969B4851B21F8DFF98CAF65E9FB86267C6A8
Authority key identifier: 1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3130342e302f32322d3232203d3e20323632373230.roa
Signing time:             Tue 28 Mar 2023 20:25:52 +0000
ROA not before:           Tue 28 Mar 2023 20:20:52 +0000
ROA not after:            Tue 26 Mar 2024 20:25:52 +0000
asID:                     262720
IP address blocks:        186.195.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e3:96:9b:48:51:b2:1f:8d:ff:98:ca:f6:5e:9f:b8:62:67:c6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Validity
            Not Before: Mar 28 20:20:52 2023 GMT
            Not After : Mar 26 20:25:52 2024 GMT
        Subject: CN=23F027CB2E21341FC465F43B7FDD15632D0B35FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:d3:60:bf:da:5a:c2:f7:64:72:fd:af:98:
                    b1:39:30:ff:6e:87:55:e9:56:4b:82:6b:9a:b9:da:
                    f5:0d:ab:03:f6:27:37:6f:eb:80:90:90:aa:3c:31:
                    17:f1:7c:fa:58:ed:5e:5f:ce:ac:36:af:90:43:ae:
                    dd:cc:2e:c6:fe:68:8e:e1:75:28:2f:9d:8d:fc:cb:
                    6c:c0:64:51:52:77:fd:83:7d:02:ea:1a:db:1d:a8:
                    40:29:74:9c:16:c2:fd:d4:bf:95:3f:4d:29:2d:3f:
                    7d:fc:a4:4d:ee:b3:f5:33:4e:a8:79:3c:37:f1:ab:
                    b4:d6:fb:e7:fa:16:89:c6:04:22:cc:95:c0:50:be:
                    26:c1:fe:0e:90:59:61:3f:dc:06:c5:c7:a5:eb:bc:
                    50:c8:40:55:00:9d:17:16:c7:67:46:c3:81:f2:61:
                    59:2a:f8:97:41:4e:3a:3c:17:cb:5c:17:bd:87:46:
                    d3:3e:ed:62:ea:d0:72:8f:a1:1f:bd:e3:60:3e:48:
                    99:da:32:d4:82:27:eb:ab:4a:23:aa:0d:52:3e:f7:
                    3c:a4:68:7f:16:a3:8f:a5:b8:ee:a1:b0:fa:b4:68:
                    6e:42:bc:7b:6c:b6:4a:7c:67:e8:de:b4:dc:4e:bf:
                    01:75:d0:26:35:99:ba:b9:ea:56:fc:34:0a:41:18:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F0:27:CB:2E:21:34:1F:C4:65:F4:3B:7F:DD:15:63:2D:0B:35:FD
            X509v3 Authority Key Identifier:
                keyid:1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3130342e302f32322d3232203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:34:2d:69:7a:36:a5:de:ed:7b:d4:5f:e3:4c:d7:c8:b4:d7:
         7a:cd:49:5c:0f:22:a0:6f:49:96:3f:7e:78:b3:c6:cc:65:92:
         a1:14:5a:18:f3:df:83:67:81:44:05:4c:9c:2f:7a:2e:da:1d:
         99:2d:46:af:fe:a1:18:59:19:5b:14:3c:50:09:7d:a1:40:8f:
         25:0d:c8:63:0f:95:8b:c5:ef:86:2a:a9:75:9e:ff:d3:5d:5f:
         76:8a:38:46:07:15:a7:90:6a:d1:2b:68:0a:ee:29:db:00:37:
         38:e0:42:04:88:f3:ac:cf:c9:83:17:60:4f:6d:f7:d6:3b:2f:
         31:31:44:98:3f:63:7a:e1:e8:02:55:9a:b3:f2:86:1f:7d:18:
         9f:28:c2:79:fa:2e:ca:72:70:c2:21:3c:02:29:85:46:11:00:
         17:c2:a4:24:6b:c4:01:f2:f6:f8:9c:17:a2:ee:dd:5f:51:b3:
         c2:73:58:f9:68:07:14:59:35:14:68:98:88:91:52:80:3d:10:
         3d:51:0e:47:ab:73:12:12:98:39:f7:d8:1a:92:18:83:55:80:
         45:91:7e:b3:32:b9:bb:a1:15:f1:6f:58:b5:80:cc:1c:d5:5a:
         a8:5a:44:bf:09:82:47:2d:91:31:d5:db:ea:56:c9:c2:f7:aa:
         2a:d9:24:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org