Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e39362e302f32302d3230203d3e20323632373230.roa
File:                     3138362e3139352e39362e302f32302d3230203d3e20323632373230.roa (raw, json)
Hash identifier:          MKKC07b3SRZ9y7X/DHjdqRgzZ0Fec5pwYet3KHIEJxg=
Subject key identifier:   B1:9C:92:DF:17:29:60:36:7E:F4:5C:A5:6B:F7:07:ED:B5:0E:D2:59
Certificate issuer:       /CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
Certificate serial:       50E2AF0015C2C47A2F9A57928B011F7411317E0C
Authority key identifier: 1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e39362e302f32302d3230203d3e20323632373230.roa
Signing time:             Tue 28 Mar 2023 20:25:50 +0000
ROA not before:           Tue 28 Mar 2023 20:20:50 +0000
ROA not after:            Tue 26 Mar 2024 20:25:50 +0000
asID:                     262720
IP address blocks:        186.195.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e2:af:00:15:c2:c4:7a:2f:9a:57:92:8b:01:1f:74:11:31:7e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Validity
            Not Before: Mar 28 20:20:50 2023 GMT
            Not After : Mar 26 20:25:50 2024 GMT
        Subject: CN=B19C92DF172960367EF45CA56BF707EDB50ED259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:d7:5b:ce:63:89:0e:1d:a3:5c:52:1b:a5:
                    a5:68:e6:ab:fd:5e:53:9c:8c:3f:97:be:3c:52:c0:
                    72:b6:ff:e1:0c:74:96:c3:2e:45:55:cd:8a:c4:fb:
                    e7:38:a0:d3:47:f9:9f:2e:42:c9:47:ad:7b:ca:8d:
                    01:fb:71:b6:73:ef:2f:c5:2e:59:f9:b8:d0:30:21:
                    26:13:e7:f6:79:e8:a1:e8:40:1d:1b:05:15:e2:da:
                    2c:16:3b:24:d7:4d:99:c5:4f:fc:72:5d:1d:2e:46:
                    13:c2:dd:d2:70:c8:5b:4d:64:43:c7:66:6d:e0:b9:
                    7b:cb:1c:d7:6d:d9:98:2f:70:a6:a1:f0:58:dc:b1:
                    72:cb:0e:06:94:83:dd:ab:13:9c:73:4f:6f:d4:2b:
                    b9:59:7f:d2:46:3d:54:5f:22:22:78:4b:40:b0:8d:
                    38:26:38:ab:fa:d3:e0:07:f3:42:7e:f3:1a:bf:4e:
                    81:b0:f0:12:87:7d:03:7d:3b:f2:ed:6d:28:e6:07:
                    28:27:39:2c:b4:cc:51:60:86:28:b0:cf:08:28:85:
                    35:f6:6a:42:bb:6f:ca:5a:a6:82:68:31:a6:06:65:
                    d4:e2:c2:84:19:cd:8f:6c:dd:3d:e6:30:a6:5d:4c:
                    3b:05:d6:f7:1e:4f:f7:78:98:fd:4a:7d:a8:8a:cb:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9C:92:DF:17:29:60:36:7E:F4:5C:A5:6B:F7:07:ED:B5:0E:D2:59
            X509v3 Authority Key Identifier:
                keyid:1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e39362e302f32302d3230203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:1b:2a:2b:5c:66:3e:0d:9d:5a:cf:4c:48:e7:b6:83:35:13:
         cb:5c:c6:8a:fc:e9:c6:96:af:6c:52:b4:31:11:87:fe:57:81:
         e1:41:19:ff:0b:8f:ed:b8:6c:77:28:4b:d1:56:9d:63:65:42:
         bf:18:44:0d:a6:38:35:14:9b:1b:9d:a1:2a:2c:6e:d5:0d:73:
         25:e6:09:e4:50:d2:ec:16:59:b6:cb:9b:aa:cf:38:33:2c:68:
         ca:04:01:8a:f7:0e:1c:ba:37:08:4f:44:c7:09:99:7f:86:dc:
         44:87:7f:29:24:39:ce:7d:3b:df:ec:41:27:c6:b5:8d:32:53:
         7d:eb:7a:48:91:5c:95:05:e8:eb:25:d4:22:94:c6:0d:e0:6f:
         8f:63:83:71:80:6b:cf:a2:ca:f6:4a:3c:10:64:bc:47:a1:09:
         d4:bd:d6:a2:91:92:b6:2d:e1:32:84:b7:c5:f8:16:ff:de:04:
         b7:ea:64:97:bb:da:c8:4d:11:11:68:bc:e8:aa:b5:1e:8b:30:
         a0:09:46:40:d2:f1:df:f6:8a:0e:28:49:d9:90:bd:b0:03:8d:
         79:6f:0a:41:21:6c:e9:35:33:35:37:c6:d1:ed:53:df:eb:fc:
         d8:fe:a7:17:f3:8d:6d:8e:24:b2:d6:2c:34:97:5a:60:bf:c5:
         f3:5f:2c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org