Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3130342e302f32342d3234203d3e20323632373230.roa
File:                     3138362e3139352e3130342e302f32342d3234203d3e20323632373230.roa (raw, json)
Hash identifier:          jMlIuOWodVcXS2g/1uNFlSYVDEcopEd78G9Rg85fm4Y=
Subject key identifier:   54:FB:3B:FB:1A:E0:65:9F:E6:94:0C:DC:20:17:43:47:92:B8:B2:94
Certificate issuer:       /CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
Certificate serial:       2EDD7BC2C39FB18C47217CF3B15CB40ED899FD74
Authority key identifier: 1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3130342e302f32342d3234203d3e20323632373230.roa
Signing time:             Tue 28 Mar 2023 20:25:55 +0000
ROA not before:           Tue 28 Mar 2023 20:20:55 +0000
ROA not after:            Tue 26 Mar 2024 20:25:55 +0000
asID:                     262720
IP address blocks:        186.195.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:dd:7b:c2:c3:9f:b1:8c:47:21:7c:f3:b1:5c:b4:0e:d8:99:fd:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Validity
            Not Before: Mar 28 20:20:55 2023 GMT
            Not After : Mar 26 20:25:55 2024 GMT
        Subject: CN=54FB3BFB1AE0659FE6940CDC2017434792B8B294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:f4:d4:7d:06:e6:e5:6c:69:33:f8:bf:03:
                    e4:c0:55:ca:99:b3:5d:f6:9e:6b:98:37:01:2a:02:
                    11:e8:5a:ba:ad:51:07:a9:2f:3f:03:26:16:bc:f2:
                    46:2e:e1:72:63:1a:11:c0:52:fe:98:fb:e3:f3:7d:
                    1f:44:1c:af:5e:4a:58:49:2b:61:f9:c9:79:70:70:
                    35:d6:2a:68:9e:17:7a:e7:96:71:f5:82:25:95:8c:
                    c4:ae:b6:4c:35:ef:c0:86:9b:43:6a:aa:00:db:2d:
                    24:a2:ed:38:b9:3d:3c:eb:45:aa:30:a5:da:49:79:
                    40:47:3f:4f:e8:9f:4a:33:60:c2:a4:c9:dc:55:f5:
                    58:4b:14:a5:e9:14:1d:0d:bd:62:33:2a:e7:7d:5f:
                    00:ac:84:cb:c4:26:d3:0a:bd:a8:1a:31:e5:1e:99:
                    df:99:7a:83:d3:cf:35:d7:64:6c:da:70:f8:69:9f:
                    9e:04:7c:75:4a:e0:c6:b8:a5:41:9d:40:a1:18:7b:
                    b9:d8:47:cf:19:96:62:39:3a:ae:cd:39:1a:52:ad:
                    21:12:cb:48:05:7d:a4:57:14:ab:3e:d8:d8:c9:71:
                    bb:1e:ae:37:8b:06:92:5e:98:82:b8:cd:19:0d:df:
                    c9:ac:fd:4f:7b:f3:f8:e1:8d:35:d4:53:38:d0:91:
                    56:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FB:3B:FB:1A:E0:65:9F:E6:94:0C:DC:20:17:43:47:92:B8:B2:94
            X509v3 Authority Key Identifier:
                keyid:1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3130342e302f32342d3234203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:53:6f:99:f5:2f:45:3f:06:df:9a:53:ab:ed:fb:9f:1e:d0:
         44:5b:d9:93:8f:f2:cc:9c:74:e2:78:20:1c:88:79:44:12:f9:
         52:d5:a4:ad:94:a2:7f:1a:b9:de:9a:a2:f0:8a:f8:5c:5d:8e:
         15:57:c1:99:af:e2:6a:40:d3:5e:ed:05:2a:af:d2:01:1a:d3:
         ea:66:77:f8:6d:7f:1a:08:3a:aa:0d:7c:13:0c:0d:64:d5:d1:
         1a:5a:6c:39:fe:c8:b3:aa:93:b0:11:70:8e:aa:f5:e4:1c:01:
         88:04:af:8a:5d:9b:c5:60:82:8c:ef:36:32:59:c8:48:40:38:
         f1:3f:e7:58:8e:be:a9:bb:6a:dc:6b:db:ee:48:4e:eb:bd:bf:
         75:20:0e:37:ba:03:75:24:d9:47:c3:26:f5:23:b5:cc:b8:83:
         9f:9d:b2:68:c1:8f:09:01:ba:c9:ba:b2:ab:de:2a:e9:b8:cf:
         d3:63:75:63:9b:ed:9b:16:00:54:a9:01:c0:e7:83:18:91:92:
         fe:0b:73:5e:5a:86:9b:1d:d7:4f:fb:93:f8:7c:d4:f2:c7:41:
         77:2c:4d:ae:49:a3:19:7b:44:c5:70:c3:f3:e1:f1:3f:e3:49:
         b0:06:59:1c:d5:ca:eb:21:df:25:01:af:dd:e9:ff:30:a2:96:
         44:8f:c7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org