Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138362e3231362e3231342e302f32342d3234203d3e20323632393839.roa
File:                     3138362e3231362e3231342e302f32342d3234203d3e20323632393839.roa (raw, json)
Hash identifier:          NP8jsk7u886pBFI3/U4Bo+rXxrLf3qkrG54AX5TiHl8=
Subject key identifier:   29:44:59:A0:A3:42:77:E8:7D:D8:57:14:98:9C:9D:ED:F8:7C:2F:61
Certificate issuer:       /CN=207EB381959B83F7299D680B4544AE4668DCFE56
Certificate serial:       167466D5B7F3F1A15145FB0B9DF773BF738E75ED
Authority key identifier: 20:7E:B3:81:95:9B:83:F7:29:9D:68:0B:45:44:AE:46:68:DC:FE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/207EB381959B83F7299D680B4544AE4668DCFE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138362e3231362e3231342e302f32342d3234203d3e20323632393839.roa
Signing time:             Fri 25 Aug 2023 16:32:44 +0000
ROA not before:           Fri 25 Aug 2023 16:27:44 +0000
ROA not after:            Fri 23 Aug 2024 16:32:44 +0000
asID:                     262989
IP address blocks:        186.216.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:74:66:d5:b7:f3:f1:a1:51:45:fb:0b:9d:f7:73:bf:73:8e:75:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207EB381959B83F7299D680B4544AE4668DCFE56
        Validity
            Not Before: Aug 25 16:27:44 2023 GMT
            Not After : Aug 23 16:32:44 2024 GMT
        Subject: CN=294459A0A34277E87DD85714989C9DEDF87C2F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:bc:ba:54:49:d0:2f:02:2f:2e:e4:7a:50:
                    0f:2d:b8:72:d4:a4:9d:01:10:3e:ff:99:7a:61:99:
                    a7:c1:20:b5:3d:da:69:70:c2:65:4b:96:f1:35:29:
                    e8:37:14:f7:63:1b:7e:bb:8e:a2:82:fd:68:1e:a9:
                    9d:d6:d5:9c:20:1e:d6:c7:ff:18:e5:99:48:1d:8a:
                    52:30:e2:5c:7f:06:01:16:68:c9:69:51:5e:1a:1e:
                    ff:8c:d1:5a:c6:26:e4:5c:ed:42:2e:a4:d9:84:4b:
                    32:fb:a3:cf:25:ff:61:47:1e:f6:4c:d0:b5:62:7c:
                    b7:0e:ef:7d:24:82:33:9f:92:26:9f:1d:90:9e:d4:
                    d9:17:1a:87:b8:f5:89:f0:a3:3e:de:13:b7:09:54:
                    9c:50:53:36:0b:31:a6:b4:42:4e:b9:2a:f7:ba:43:
                    20:bd:b5:22:b3:22:58:e7:81:b2:df:4f:4d:85:ce:
                    d3:26:d3:5b:f8:38:2f:19:87:4c:55:82:85:51:5e:
                    d5:1a:4f:b3:09:d5:4f:eb:87:86:91:c7:1a:91:b8:
                    24:91:5d:a4:db:fd:20:18:b7:76:f8:7e:4d:66:22:
                    4c:76:9d:56:8d:cc:00:81:4e:c7:93:97:66:a3:9e:
                    1f:99:d4:3f:74:e4:e2:6b:ac:37:a4:08:87:09:82:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:44:59:A0:A3:42:77:E8:7D:D8:57:14:98:9C:9D:ED:F8:7C:2F:61
            X509v3 Authority Key Identifier:
                keyid:20:7E:B3:81:95:9B:83:F7:29:9D:68:0B:45:44:AE:46:68:DC:FE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/207EB381959B83F7299D680B4544AE4668DCFE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/207EB381959B83F7299D680B4544AE4668DCFE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3138362e3231362e3231342e302f32342d3234203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:20:65:21:5a:1c:5d:1f:02:a3:ea:d6:c0:1b:1a:0f:eb:0e:
         d0:9e:96:18:76:98:3c:dc:34:13:18:5c:d3:b6:b7:39:27:44:
         ab:dd:f8:79:19:24:ee:3c:01:5a:fd:2c:1c:24:33:ec:6f:3b:
         ac:d9:f6:6f:44:47:40:b1:92:35:ad:e7:1b:e8:09:d6:b5:1a:
         d8:f4:fc:84:c9:94:c1:21:72:3c:e3:14:43:20:1d:b1:46:7b:
         e7:f6:75:19:70:4b:5e:4f:14:88:10:1d:c3:aa:0e:2c:8c:5b:
         8e:05:77:29:19:e9:53:c1:c8:b4:ac:a6:0e:83:93:f3:b8:d5:
         9d:5f:b1:d7:e8:29:22:a1:27:cd:a8:67:23:74:f3:a9:40:32:
         6b:9a:cb:fd:5b:30:44:4f:62:33:71:90:1f:f7:1c:ea:ed:88:
         38:65:f3:4b:94:0e:32:3e:99:5d:8c:a5:04:7b:fb:f6:09:5f:
         fb:84:9d:16:79:18:4a:ff:68:b4:cb:46:cb:12:83:2d:53:ab:
         39:56:8b:03:77:c2:4d:5c:9b:1c:53:7d:f2:c0:76:e1:61:3c:
         48:50:bb:aa:55:e7:d2:c5:3a:44:74:f0:a1:97:73:15:f7:45:
         19:69:dd:89:ee:5a:c0:12:51:5f:40:35:a1:86:67:ef:3a:99:
         19:31:db:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org