Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3130382e302f32332d3233203d3e20323632373230.roa
File:                     3138362e3139352e3130382e302f32332d3233203d3e20323632373230.roa (raw, json)
Hash identifier:          qIR44VTktfe/c/TN0HAbFyni1hHF0zOGn/Hkz5dwGDs=
Subject key identifier:   6D:A6:D8:F0:2F:2E:13:C5:54:9B:AC:84:F9:DF:61:8C:5D:B6:5B:FE
Certificate issuer:       /CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
Certificate serial:       5D040A00D2EDD0A4FD317F000BEB1C6619CF93D9
Authority key identifier: 1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3130382e302f32332d3233203d3e20323632373230.roa
Signing time:             Tue 28 Mar 2023 20:25:51 +0000
ROA not before:           Tue 28 Mar 2023 20:20:51 +0000
ROA not after:            Tue 26 Mar 2024 20:25:51 +0000
asID:                     262720
IP address blocks:        186.195.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:04:0a:00:d2:ed:d0:a4:fd:31:7f:00:0b:eb:1c:66:19:cf:93:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Validity
            Not Before: Mar 28 20:20:51 2023 GMT
            Not After : Mar 26 20:25:51 2024 GMT
        Subject: CN=6DA6D8F02F2E13C5549BAC84F9DF618C5DB65BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c4:6a:a2:ca:a3:b3:00:2a:72:6d:e2:d9:bd:
                    8d:73:fc:62:54:59:ec:8f:16:cf:22:bb:0a:46:f6:
                    ff:a9:29:f1:85:9d:b2:56:15:66:c3:8f:3e:e4:23:
                    30:90:a0:a4:eb:28:de:48:7d:78:90:14:f3:44:c2:
                    b1:bc:e0:03:63:1a:20:17:a4:d1:e2:4f:b8:4d:cc:
                    06:2b:33:b6:ce:04:c8:8f:90:9f:7c:c9:ee:7f:7c:
                    40:57:0c:29:58:49:c1:23:a2:a5:e9:a9:fb:58:05:
                    9e:88:1b:f4:4f:ff:b1:56:4a:0b:f2:fd:8c:2b:a3:
                    fd:ed:d0:57:f2:26:ed:dc:2b:3d:11:fe:cd:c4:62:
                    2c:ec:a4:fd:16:91:63:98:b0:88:cf:76:32:b1:c0:
                    07:ee:56:d5:c8:ca:4f:c6:8b:5e:d7:f0:7f:aa:b0:
                    b9:56:72:58:cd:c9:19:f9:21:16:66:4e:56:ee:25:
                    0b:ad:4c:f3:e5:71:ab:dc:b0:87:f5:79:9c:45:1c:
                    67:19:b3:1b:a6:e4:13:ad:bc:ab:17:9c:fa:06:a9:
                    13:9f:39:f9:f9:8a:c0:04:af:e7:38:11:a1:27:b2:
                    60:ef:e5:89:83:c3:c8:ea:a8:31:22:d6:7d:96:20:
                    09:1c:86:09:41:7d:f9:55:2e:5a:0a:f3:35:96:7f:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A6:D8:F0:2F:2E:13:C5:54:9B:AC:84:F9:DF:61:8C:5D:B6:5B:FE
            X509v3 Authority Key Identifier:
                keyid:1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e3130382e302f32332d3233203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:00:4f:c8:a5:f2:7b:53:37:a3:56:54:40:4c:2c:7f:78:e7:
         2d:33:51:20:ac:8a:16:5c:0c:72:8b:57:02:fc:a2:7a:c9:a3:
         d2:c3:a7:9a:f0:3d:2d:c2:c9:7a:45:e7:8f:6a:4c:62:7e:78:
         ec:d8:5b:a0:e2:f9:90:0a:d5:29:1e:fa:e9:93:d5:1c:f6:ea:
         1c:49:2a:55:cf:a4:96:ea:ee:21:a4:1f:ee:a4:83:b4:c3:5c:
         6e:90:33:8e:d7:f6:2f:7d:d6:48:e5:ba:6d:8a:f4:57:83:50:
         5f:e9:93:39:3b:60:48:3f:6b:74:78:77:2c:0c:0f:c5:48:4a:
         6f:5b:27:b3:51:56:37:67:b1:b7:0f:98:da:33:a2:43:02:80:
         5d:a8:55:d3:95:92:9f:68:e0:7b:3d:33:f4:a4:70:9e:df:66:
         10:99:ef:cc:aa:73:6e:0a:15:8b:ff:1b:5b:88:75:5b:75:8b:
         9e:ac:02:f8:36:46:b3:b2:fc:16:2b:a7:0f:62:9e:59:26:d2:
         74:74:50:c3:62:74:da:9c:1a:3e:e0:d2:87:3c:b8:e5:71:4e:
         37:3e:d7:a7:aa:5b:a0:2c:3e:74:d5:85:ed:69:ec:db:69:c1:
         78:f1:a3:97:f9:7a:30:f9:45:bc:b6:cd:77:fb:15:a1:35:cd:
         ef:4d:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org