Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3130382e302f32322d3232203d3e20323632373230.roa
File:                     3138362e3139352e3130382e302f32322d3232203d3e20323632373230.roa (raw, json)
Hash identifier:          07wvScFQMatc0YOMY6SWgJHsbcKCoaotRaM4OGRgNwc=
Subject key identifier:   F0:8E:28:F6:7E:9A:5B:90:05:F6:9D:C5:4F:68:BC:9F:52:8A:0A:5F
Certificate issuer:       /CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
Certificate serial:       708B991F984C697935452704C70FF477FE4B719B
Authority key identifier: 1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3130382e302f32322d3232203d3e20323632373230.roa
Signing time:             Tue 28 Mar 2023 20:25:55 +0000
ROA not before:           Tue 28 Mar 2023 20:20:55 +0000
ROA not after:            Tue 26 Mar 2024 20:25:55 +0000
asID:                     262720
IP address blocks:        186.195.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8b:99:1f:98:4c:69:79:35:45:27:04:c7:0f:f4:77:fe:4b:71:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Validity
            Not Before: Mar 28 20:20:55 2023 GMT
            Not After : Mar 26 20:25:55 2024 GMT
        Subject: CN=F08E28F67E9A5B9005F69DC54F68BC9F528A0A5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:82:a3:6c:fc:27:13:c4:5a:5a:f8:92:e8:fe:
                    ac:27:de:37:43:7d:85:c3:ac:a6:97:0f:cf:3c:6e:
                    5f:dc:5f:83:9a:0c:a2:28:35:4c:ed:f2:0f:71:f7:
                    db:7f:6d:59:b6:d6:99:02:b3:e8:ca:a5:2e:1d:04:
                    a2:b1:1e:d7:d2:76:bd:34:d4:b1:0b:50:c2:cb:1d:
                    f5:27:e2:41:3a:b2:9d:a2:8e:40:d7:df:6e:81:db:
                    db:5d:81:f9:2e:ab:14:4c:87:96:1f:8d:77:55:03:
                    62:22:16:8c:43:e8:a8:e8:5f:99:11:8e:9b:5d:e5:
                    52:21:5d:d2:58:00:9a:af:ce:af:cb:af:52:38:a5:
                    69:3a:10:ed:28:0f:dc:4a:84:51:d6:1d:71:80:19:
                    ad:49:a8:9c:0c:ee:4f:3c:d0:81:37:fa:15:fa:f3:
                    02:9f:04:a0:1a:9a:bc:65:db:08:23:29:2d:1f:1d:
                    3d:c3:bf:5c:a0:34:39:cb:69:b4:e6:64:bb:1b:e4:
                    fe:96:9e:3d:4c:7c:a0:a4:e8:01:38:b4:5c:d7:bf:
                    c6:e1:a6:4a:00:bd:59:dc:40:7c:20:ce:b4:11:ec:
                    5f:f5:fb:82:f5:3d:e0:25:13:9d:a2:aa:18:ae:b2:
                    f3:a4:f4:06:c6:d4:df:da:07:ba:36:53:64:dc:15:
                    a0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8E:28:F6:7E:9A:5B:90:05:F6:9D:C5:4F:68:BC:9F:52:8A:0A:5F
            X509v3 Authority Key Identifier:
                keyid:1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3130382e302f32322d3232203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:67:ec:3f:2c:53:b5:a2:7d:d3:7d:d9:21:1f:b6:af:60:da:
         99:20:94:4b:75:f7:3e:71:c5:40:28:c7:ca:0e:55:a5:0c:18:
         fe:ae:b8:9d:15:b3:ee:a0:9e:c0:9a:89:4d:a4:8a:95:e5:d8:
         d6:3b:3d:55:36:d6:82:44:df:05:c9:04:24:fd:fc:51:85:57:
         2e:b8:97:be:35:ad:68:ea:27:17:c2:51:f1:ea:e9:1d:76:52:
         42:d7:90:4f:fc:3f:48:50:4e:c0:ca:ae:d5:19:3c:4b:c4:e7:
         f7:73:0c:6c:51:72:28:64:9d:8b:70:a6:6a:3d:92:1c:cf:6f:
         ed:8e:f7:49:0b:8b:a4:c8:70:9e:2d:a7:dd:b4:e4:ac:a2:b9:
         fb:51:09:cb:af:8b:50:0a:b3:80:87:78:ff:91:b6:7d:30:4e:
         d6:fd:58:45:97:94:63:4a:d9:1f:e6:c6:9f:42:6f:a7:37:a7:
         e7:b0:e6:fe:81:ff:4c:99:b1:62:b0:6d:f8:3d:3a:4a:98:74:
         a1:cc:df:44:b7:de:af:ff:5f:1f:37:32:21:40:ca:56:2f:2b:
         06:34:1e:2d:25:c1:52:44:84:6a:a3:db:14:62:28:7a:99:3e:
         d7:e5:35:7f:b3:91:ea:d4:e5:d8:c2:d1:82:e1:8b:f4:17:e3:
         07:ab:9a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org