Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa
File:                     3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          CpGh5ikQlCWRDAfrwtQw2sk6tXkfHbKin9E78Z6GFYQ=
Subject key identifier:   6A:F8:6E:30:F9:95:FE:16:9B:F5:54:6B:B7:8E:EB:CD:EB:57:41:5C
Certificate issuer:       /CN=292430768F8FDCC636FCB3BD7A916A407C9461E8
Certificate serial:       1A335733D99B30FD949CDB2165414F3957FABD84
Authority key identifier: 29:24:30:76:8F:8F:DC:C6:36:FC:B3:BD:7A:91:6A:40:7C:94:61:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/292430768F8FDCC636FCB3BD7A916A407C9461E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa
Signing time:             Tue 04 Jul 2023 16:00:23 +0000
ROA not before:           Tue 04 Jul 2023 15:55:23 +0000
ROA not after:            Tue 02 Jul 2024 16:00:23 +0000
asID:                     53218
IP address blocks:        186.250.168.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:33:57:33:d9:9b:30:fd:94:9c:db:21:65:41:4f:39:57:fa:bd:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292430768F8FDCC636FCB3BD7A916A407C9461E8
        Validity
            Not Before: Jul  4 15:55:23 2023 GMT
            Not After : Jul  2 16:00:23 2024 GMT
        Subject: CN=6AF86E30F995FE169BF5546BB78EEBCDEB57415C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:c0:ca:77:60:5a:1c:c3:09:af:ef:04:af:
                    d9:42:61:9e:20:6c:92:c7:80:e9:62:b8:46:26:97:
                    b9:80:f1:e6:e3:43:d9:5c:ee:d8:c9:23:7c:2f:e1:
                    a7:5f:4a:ba:3f:40:74:17:e2:5d:be:36:06:47:19:
                    bc:78:28:a1:fb:c3:a3:16:48:a0:52:10:d0:d1:d6:
                    81:7a:9d:0c:18:82:f8:28:37:e4:ca:ab:c1:57:25:
                    21:2e:72:d0:00:a4:5c:b5:63:20:49:d8:b2:3c:8c:
                    52:e9:d7:3c:02:bc:63:11:f5:44:6a:09:10:5d:55:
                    3e:f7:01:99:ea:ec:9d:54:6b:aa:d5:2f:35:f9:fb:
                    29:d0:2c:95:b1:6f:16:03:ed:7c:42:2b:1c:3c:66:
                    f5:b0:26:a2:09:52:d2:27:4c:63:b5:a8:24:02:e4:
                    08:66:8c:c7:22:ac:0b:58:70:a0:de:d9:7f:d4:e1:
                    ac:af:8a:c4:ae:85:4b:c8:be:40:24:33:a6:d8:f4:
                    f9:11:1d:9a:0a:45:7e:13:9f:a7:65:f7:25:fd:60:
                    13:99:fb:bd:17:57:16:7b:ab:f5:eb:c9:4e:62:5e:
                    a9:16:94:d5:19:16:12:24:cf:23:99:d6:84:43:f6:
                    a7:09:8d:41:32:66:50:22:08:4c:84:5f:48:5a:08:
                    fd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F8:6E:30:F9:95:FE:16:9B:F5:54:6B:B7:8E:EB:CD:EB:57:41:5C
            X509v3 Authority Key Identifier:
                keyid:29:24:30:76:8F:8F:DC:C6:36:FC:B3:BD:7A:91:6A:40:7C:94:61:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/292430768F8FDCC636FCB3BD7A916A407C9461E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/292430768F8FDCC636FCB3BD7A916A407C9461E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3138362e3235302e3136382e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:b6:1c:bb:b5:91:4e:d5:6f:70:03:d6:50:1b:2d:04:48:94:
         00:a7:93:51:f5:c6:ca:87:02:1e:8f:b0:15:7b:e6:03:69:66:
         ca:78:e0:98:cd:cf:a3:1e:ba:ff:8c:4e:9e:bb:cf:72:f5:ba:
         d3:f0:0c:5e:e8:49:5d:b7:39:3f:be:cf:ff:3a:cb:03:be:8e:
         9a:62:78:e7:d5:28:43:9d:39:f7:ec:ff:df:3a:bf:ca:f2:cf:
         3b:ab:53:ea:e7:00:e7:13:d5:07:9d:80:89:e5:45:d9:fb:ce:
         84:ad:0b:83:ed:2f:04:7c:5c:fd:9f:98:75:cb:6d:52:f1:be:
         cc:aa:74:7e:57:ed:03:7d:50:70:61:63:4d:1e:ff:ec:2b:37:
         eb:89:c9:0f:88:cc:41:dd:f5:d6:ba:56:85:60:74:ac:0c:6d:
         71:c4:e1:bf:03:45:11:1c:94:b0:7e:f5:23:b2:4c:c9:60:09:
         cf:03:09:ce:66:fc:10:5e:6d:9a:60:a4:4c:b3:05:7d:5f:89:
         05:5c:bb:34:b4:46:2a:be:47:d8:21:0a:f8:15:58:2f:1b:2b:
         62:6e:b4:f8:0a:9e:f4:30:a5:32:53:18:b1:25:3e:e0:2d:fc:
         d9:a8:35:5c:19:da:3c:46:40:d5:75:83:98:cf:46:de:35:a7:
         6b:1f:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org