Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5G7bbsLf2KKF3YqtCSEtGdfBMwZyBH8MX1NiGSKfbPj1/0/3138362e3235312e3135362e302f32322d3234203d3e203532393030.roa
File:                     3138362e3235312e3135362e302f32322d3234203d3e203532393030.roa (raw, json)
Hash identifier:          DSZuU1M3PaXu6cUCTrKs1Kq0WjPQ8qziYvY5vIwvKGw=
Subject key identifier:   E0:9D:D4:F7:27:AA:49:5B:7C:66:71:82:EC:CE:76:4B:7E:6E:53:48
Certificate issuer:       /CN=94B74DE4C2A175B5C0C534858586F16D8BB4851D
Certificate serial:       4C69298E528C777713385CA68F7E59FD7A90DC89
Authority key identifier: 94:B7:4D:E4:C2:A1:75:B5:C0:C5:34:85:85:86:F1:6D:8B:B4:85:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94B74DE4C2A175B5C0C534858586F16D8BB4851D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5G7bbsLf2KKF3YqtCSEtGdfBMwZyBH8MX1NiGSKfbPj1/0/3138362e3235312e3135362e302f32322d3234203d3e203532393030.roa
Signing time:             Thu 22 Feb 2024 16:57:50 +0000
ROA not before:           Thu 22 Feb 2024 16:52:50 +0000
ROA not after:            Thu 20 Feb 2025 16:57:50 +0000
asID:                     52900
IP address blocks:        186.251.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:69:29:8e:52:8c:77:77:13:38:5c:a6:8f:7e:59:fd:7a:90:dc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B74DE4C2A175B5C0C534858586F16D8BB4851D
        Validity
            Not Before: Feb 22 16:52:50 2024 GMT
            Not After : Feb 20 16:57:50 2025 GMT
        Subject: CN=E09DD4F727AA495B7C667182ECCE764B7E6E5348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:63:63:0e:38:ee:2f:07:ee:09:9c:d3:74:ee:
                    c9:75:56:8f:cb:a0:4d:73:ab:55:b8:63:04:f6:a4:
                    a0:6d:d0:73:0c:fb:eb:5a:6f:bc:ac:68:d0:fd:1b:
                    c5:59:37:56:6a:b9:f1:14:3e:df:ab:bb:8c:a2:f8:
                    76:29:88:b3:e3:64:f9:f2:14:2f:6f:3a:cb:7c:a9:
                    0b:d7:91:f1:43:a7:79:41:e5:04:44:0c:b0:fd:ba:
                    9a:49:28:dc:30:d4:85:53:27:d4:08:2b:e8:9d:9a:
                    74:f1:00:6a:05:c1:b2:1e:67:30:29:1c:90:1e:90:
                    f2:38:71:82:e0:65:18:1e:55:97:11:b6:f2:96:23:
                    f3:a2:1d:a8:46:06:10:71:36:e9:bd:f5:53:ef:16:
                    2e:b1:d0:87:55:f8:6b:86:ec:90:39:ad:ac:09:24:
                    97:74:14:21:46:3e:11:37:03:5d:0f:50:03:77:0e:
                    5b:93:42:4b:63:41:33:7d:60:d0:19:1d:74:c6:90:
                    92:86:cd:ca:58:b7:2f:3b:f8:73:0d:b0:83:98:c0:
                    27:9b:20:20:b0:86:45:f0:65:4c:c5:1b:75:53:74:
                    65:4d:4d:82:d0:31:18:25:3e:ee:e3:2e:27:31:1f:
                    eb:32:00:55:96:67:0e:12:b0:78:d2:87:22:89:01:
                    b5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9D:D4:F7:27:AA:49:5B:7C:66:71:82:EC:CE:76:4B:7E:6E:53:48
            X509v3 Authority Key Identifier:
                keyid:94:B7:4D:E4:C2:A1:75:B5:C0:C5:34:85:85:86:F1:6D:8B:B4:85:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5G7bbsLf2KKF3YqtCSEtGdfBMwZyBH8MX1NiGSKfbPj1/0/94B74DE4C2A175B5C0C534858586F16D8BB4851D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94B74DE4C2A175B5C0C534858586F16D8BB4851D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5G7bbsLf2KKF3YqtCSEtGdfBMwZyBH8MX1NiGSKfbPj1/0/3138362e3235312e3135362e302f32322d3234203d3e203532393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:34:55:c3:86:32:f6:6b:9c:aa:3e:f4:09:a2:7a:5e:ac:2b:
         4a:72:b3:1f:ec:aa:c1:99:29:eb:39:57:22:7f:b5:af:14:ba:
         03:fe:ec:05:37:c2:5f:2a:5c:ce:ae:9c:69:93:56:79:ee:1d:
         5a:84:bb:a2:fe:56:69:31:d0:a7:fd:fd:b9:17:3d:1e:ed:7a:
         cf:e7:59:5e:54:f0:b4:2d:53:46:b4:b4:63:a5:8d:59:f6:1b:
         58:a3:61:29:9a:9c:72:b0:7d:0d:c2:0c:ad:be:9b:c8:21:c3:
         c1:8f:80:85:4a:3c:1f:68:7f:ef:8b:e2:a0:43:48:07:61:bf:
         75:15:f0:e9:92:82:a0:14:8b:29:93:bb:20:b7:8f:95:85:c9:
         83:46:70:5a:42:ea:e1:fa:55:f2:00:6b:1e:95:bf:8b:7f:0c:
         e1:7f:ad:38:77:91:e9:e5:02:cb:be:79:db:58:e3:21:9e:4c:
         84:60:ab:ca:da:a0:ce:d8:fe:66:d0:de:1b:b5:c4:86:2d:20:
         28:1d:c0:b3:36:3b:be:d2:85:4e:2a:3a:98:e5:3f:3b:c5:c8:
         b0:46:14:b7:06:55:95:4d:5a:3a:67:17:54:b9:e7:61:52:69:
         74:6d:3a:f7:ab:ae:ba:a1:1a:e6:3a:d6:eb:15:01:c3:a7:7e:
         75:7a:09:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org