Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e39362e302f32342d3234203d3e20323632373230.roa
File:                     3138362e3139352e39362e302f32342d3234203d3e20323632373230.roa (raw, json)
Hash identifier:          TJrJLJK/qfFrtIaUAjHBsS67O8CcHKdVXgIIpuJUd5o=
Subject key identifier:   10:F9:42:0B:31:CD:7E:02:A2:C7:31:C6:27:64:3D:5D:2E:53:BF:F1
Certificate issuer:       /CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
Certificate serial:       7D5A42A43105BA451FCCD825EE6AB72154527433
Authority key identifier: 1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e39362e302f32342d3234203d3e20323632373230.roa
Signing time:             Tue 28 Mar 2023 20:25:50 +0000
ROA not before:           Tue 28 Mar 2023 20:20:50 +0000
ROA not after:            Tue 26 Mar 2024 20:25:50 +0000
asID:                     262720
IP address blocks:        186.195.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5a:42:a4:31:05:ba:45:1f:cc:d8:25:ee:6a:b7:21:54:52:74:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FD894D023CD182BB2913A2820E363D6B32EFF0A
        Validity
            Not Before: Mar 28 20:20:50 2023 GMT
            Not After : Mar 26 20:25:50 2024 GMT
        Subject: CN=10F9420B31CD7E02A2C731C627643D5D2E53BFF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:1f:c2:cb:d4:4d:31:3c:c8:55:83:99:8a:
                    7d:fe:7c:da:e8:0a:1e:86:31:4b:5b:fc:db:6c:eb:
                    89:cf:4a:f6:87:4f:70:8e:51:f6:6c:a7:05:b9:5a:
                    db:cc:cb:86:72:63:db:29:31:a8:b3:b2:0d:be:8f:
                    d7:f7:1d:63:55:78:93:02:30:68:f8:2d:eb:67:2a:
                    18:bf:c9:e6:bb:0a:ec:e0:84:10:6a:2c:e9:a3:3f:
                    01:26:72:e9:c8:1e:06:8c:85:09:5e:e4:5f:c3:ec:
                    ec:6d:39:bd:c4:0e:2d:a3:0d:f8:19:17:1d:78:15:
                    58:d6:9f:95:5d:e0:11:9e:c6:b3:ce:dc:c7:5b:df:
                    f7:0c:65:af:89:cf:4b:82:8b:d1:a9:c7:c6:07:35:
                    d6:75:eb:5e:99:76:d4:bc:ac:c3:c2:13:95:3a:89:
                    73:ef:e1:fb:a1:a1:00:4a:d8:a2:24:e4:16:44:93:
                    6a:c9:1f:e2:1f:98:a9:56:0c:21:b7:3b:07:41:5b:
                    f7:60:8d:6a:47:f1:e6:c5:d7:29:2c:b5:53:eb:bc:
                    0e:4f:a6:f8:db:ad:ef:cb:67:c8:6a:7d:2c:bc:f8:
                    fd:18:5d:7e:d3:d5:49:a1:d8:e4:26:fa:93:11:52:
                    6b:c5:a9:9f:06:ce:fc:a1:4e:32:cd:81:a9:f0:e7:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F9:42:0B:31:CD:7E:02:A2:C7:31:C6:27:64:3D:5D:2E:53:BF:F1
            X509v3 Authority Key Identifier:
                keyid:1F:D8:94:D0:23:CD:18:2B:B2:91:3A:28:20:E3:63:D6:B3:2E:FF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1FD894D023CD182BB2913A2820E363D6B32EFF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/3138362e3139352e39362e302f32342d3234203d3e20323632373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:d8:91:78:5e:6d:c4:e5:78:35:6c:84:90:d8:e8:b6:f1:ff:
         df:32:3c:41:ef:73:aa:a9:a8:21:8a:22:03:b1:1c:6f:b8:9b:
         b0:8d:36:05:15:4a:78:b9:db:2a:63:6c:17:3a:eb:fc:14:7c:
         80:13:e4:4e:7f:db:87:79:4a:fe:50:90:f7:41:95:47:f9:75:
         f7:cb:5c:3f:82:3f:f8:88:4c:30:b7:b2:7e:82:56:9c:04:36:
         8a:4e:6c:6c:f0:f9:98:52:6c:4d:77:be:e0:ff:51:ca:7f:d6:
         55:16:75:e9:e9:ef:21:32:ea:68:96:b0:f2:10:98:d8:76:f8:
         56:d6:2c:55:91:cd:de:67:5a:4e:bb:35:09:2f:02:b9:14:f5:
         c2:11:0d:27:f5:9b:77:18:02:60:aa:f2:84:45:62:45:54:01:
         4d:ff:f2:7c:e0:b4:97:1a:b3:21:9e:14:f8:42:55:e4:c1:e6:
         71:19:ff:d5:df:33:20:19:12:e3:69:c2:cf:f1:4e:e8:dc:f1:
         d8:7d:10:b9:d0:8a:d4:65:84:28:15:0b:49:a3:3e:6f:3e:c8:
         c7:d1:d0:98:99:20:f8:46:74:26:a6:54:8d:7a:d6:56:ac:f1:
         e7:83:c2:2b:37:63:0e:27:cd:d7:ac:d6:70:61:83:57:be:66:
         b1:1b:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org