Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138362e3139322e3137362e302f32302d3234203d3e203533313335.roa
File:                     3138362e3139322e3137362e302f32302d3234203d3e203533313335.roa (raw, json)
Hash identifier:          LpWGT4L75ocyI+0rmYQFnXwdbkjqntHP/sDLeAqsApY=
Subject key identifier:   52:87:67:B1:A1:5D:E7:BF:5A:2C:04:C8:A1:B7:55:1D:AE:13:04:A2
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       2740C1D650F771952F499543A96281B2B411BA49
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138362e3139322e3137362e302f32302d3234203d3e203533313335.roa
Signing time:             Sat 03 Feb 2024 12:53:22 +0000
ROA not before:           Sat 03 Feb 2024 12:48:22 +0000
ROA not after:            Sat 01 Feb 2025 12:53:22 +0000
asID:                     53135
IP address blocks:        186.192.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:40:c1:d6:50:f7:71:95:2f:49:95:43:a9:62:81:b2:b4:11:ba:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Feb  3 12:48:22 2024 GMT
            Not After : Feb  1 12:53:22 2025 GMT
        Subject: CN=528767B1A15DE7BF5A2C04C8A1B7551DAE1304A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:c6:82:d4:b3:b3:6f:9d:e3:d0:07:94:15:
                    46:2a:49:af:ea:67:93:01:7b:8a:df:2a:6c:8e:46:
                    a5:78:23:f0:f1:83:0b:2b:dc:3b:f1:6d:31:b1:2a:
                    57:b6:b5:04:b4:56:3b:4c:e1:33:45:7a:ec:c3:86:
                    ce:d4:e3:9a:b3:27:9e:84:b5:5b:b1:14:46:3e:e7:
                    60:0d:32:40:dd:d3:81:18:d2:cf:49:62:c8:8e:44:
                    44:3c:1e:f6:17:eb:ae:0c:c5:c6:b6:55:9d:ab:73:
                    6f:c4:6a:06:a1:df:b6:16:82:2a:dd:b7:48:52:a2:
                    0f:17:97:ce:bc:72:58:2e:b2:7d:04:90:93:cd:62:
                    d4:53:dc:a0:b2:56:8c:13:70:ba:13:3a:fc:8f:8a:
                    3a:d0:87:78:c4:0e:94:62:0a:63:9d:30:8f:c8:e0:
                    18:1f:1a:d8:aa:1d:b6:4f:51:34:12:5a:3c:3a:85:
                    c3:66:5c:bf:ef:b6:61:a2:46:39:62:cc:98:76:32:
                    8e:ee:bd:74:cd:bd:13:f2:d4:ff:76:55:27:6a:63:
                    95:c5:2c:15:cd:76:41:38:ec:6d:e8:0a:8b:0f:ec:
                    d0:10:44:41:48:74:40:73:dd:a5:5e:71:bd:24:ae:
                    d7:6a:dc:81:03:30:30:8e:8c:01:83:97:01:44:cb:
                    10:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:87:67:B1:A1:5D:E7:BF:5A:2C:04:C8:A1:B7:55:1D:AE:13:04:A2
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3138362e3139322e3137362e302f32302d3234203d3e203533313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:42:16:5b:f0:65:30:67:f5:c1:80:8e:a5:aa:20:f6:75:0e:
         e3:b4:2b:5a:30:2b:b6:68:39:e4:fe:4c:1a:de:aa:95:86:f8:
         5f:ac:a7:97:54:8b:2a:0d:70:56:ad:34:93:00:3b:dd:be:66:
         17:72:f1:ff:64:32:62:6a:cd:a1:54:ce:1a:a7:a4:e8:f1:71:
         8a:6d:e0:bf:63:fe:00:84:72:53:e2:c1:f0:df:83:19:a8:5a:
         5d:dd:4e:be:c3:c6:49:0a:37:d9:3e:ad:93:5a:c3:72:b8:a1:
         7d:49:db:e5:8b:45:9b:39:24:ab:c3:4b:25:ab:2b:8d:50:8f:
         ec:95:ca:92:cf:41:23:fa:e3:64:38:d5:ca:64:8c:16:33:45:
         80:62:c8:8f:08:67:55:bc:f7:bf:26:05:48:ff:55:da:ca:ef:
         6a:23:0f:2a:63:e3:a8:cd:39:46:40:3b:06:3e:88:de:a6:4c:
         e8:00:56:38:97:57:cf:3c:ad:7f:9a:90:b7:09:90:a0:86:76:
         17:ed:6b:ab:0a:5e:af:d7:23:46:32:7b:82:52:45:6a:e2:66:
         af:12:30:bd:2c:7d:96:57:b5:43:d2:ed:f2:9a:23:4c:88:32:
         9f:15:72:1e:39:aa:f6:75:3d:2e:f5:14:ae:dd:51:7a:aa:f5:
         85:8b:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:13 2024 by rpki-client on console-ams.rpki-client.org