Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138362e3139352e3137362e302f32302d3234203d3e203238353830.roa
File:                     3138362e3139352e3137362e302f32302d3234203d3e203238353830.roa (raw, json)
Hash identifier:          FwZcFQGoyMmWUirbAZjShQHRJQ2hRI0/ZUzBPc00YL8=
Subject key identifier:   4A:0E:3D:9C:53:5A:52:F9:6E:7E:18:EE:41:EE:3B:CE:D0:89:45:CA
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       6F99E494582DCAD9D9DCDE43A55AFCCF6448DB8D
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138362e3139352e3137362e302f32302d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:02 +0000
ROA not before:           Thu 19 Oct 2023 19:10:02 +0000
ROA not after:            Thu 17 Oct 2024 19:15:02 +0000
asID:                     28580
IP address blocks:        186.195.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:99:e4:94:58:2d:ca:d9:d9:dc:de:43:a5:5a:fc:cf:64:48:db:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:02 2023 GMT
            Not After : Oct 17 19:15:02 2024 GMT
        Subject: CN=4A0E3D9C535A52F96E7E18EE41EE3BCED08945CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:08:ac:91:25:e2:79:30:3e:4f:66:95:cf:
                    80:65:b4:81:d4:13:bd:2e:89:c1:2d:d8:c3:41:0c:
                    70:a8:e0:9a:3e:1c:19:db:93:ed:74:71:6d:ef:29:
                    64:78:a2:2e:1a:7b:ad:b7:32:37:7e:63:e2:fc:31:
                    fc:3d:fc:78:e9:d3:6f:8a:ba:d3:cc:e8:47:ad:d8:
                    45:16:f4:dc:e4:28:b0:c6:cf:48:a9:55:f2:05:ed:
                    a2:f7:92:30:ca:8f:a3:8c:f0:7e:5b:8f:90:4f:f3:
                    23:08:90:a5:66:ac:18:0c:d8:4a:ce:6c:16:76:01:
                    33:b2:b2:c3:8c:46:68:d9:32:ec:42:57:81:a9:9b:
                    ea:b3:ad:3d:d4:64:09:3b:b6:d3:74:7e:8f:01:6c:
                    0b:18:bd:2d:11:35:40:9e:78:96:80:f4:a5:2b:97:
                    44:d2:13:3e:77:25:ae:7b:7f:42:09:42:ff:16:11:
                    f0:7b:e4:81:68:67:1c:3a:10:b8:f8:98:19:c9:40:
                    45:ae:97:4e:00:0b:e1:b1:1a:5f:4d:e4:17:d0:6e:
                    ed:f4:32:c6:4f:78:ff:2b:88:10:39:47:42:a4:66:
                    8f:30:45:56:6a:a5:8b:67:35:3e:c1:05:2e:d7:2f:
                    9b:8d:8b:30:42:54:81:99:b8:0a:c7:65:02:7d:9f:
                    80:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0E:3D:9C:53:5A:52:F9:6E:7E:18:EE:41:EE:3B:CE:D0:89:45:CA
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3138362e3139352e3137362e302f32302d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:47:8a:ad:76:65:5c:ea:14:56:66:0f:4c:d8:91:bc:ee:dc:
         ad:f3:28:94:6e:51:e5:7d:23:3a:ae:52:18:53:bc:fc:3c:3f:
         77:79:89:34:05:25:f1:ab:53:e8:13:6e:3d:d0:c1:cd:6c:1b:
         fa:75:ec:eb:5b:7d:cb:8c:58:6a:86:3f:e0:b1:dd:63:1c:fa:
         a6:4e:9a:f2:d5:98:05:af:43:53:6f:69:8b:69:88:1a:48:f1:
         4f:69:fe:6a:98:dc:e7:73:ca:4b:77:c2:19:1f:4d:33:2d:99:
         19:c2:17:fe:4a:6b:e3:3c:21:ac:e3:93:e7:23:58:e5:7d:a0:
         91:19:eb:e5:5f:2b:45:3b:cb:89:11:19:5f:4a:64:ac:ec:85:
         ac:9a:45:0d:ed:7e:55:88:45:b3:70:a8:3a:34:42:e2:c7:c9:
         7c:c1:cf:a4:62:6b:a9:86:a3:4f:80:15:d8:8e:9f:0e:43:73:
         27:86:5a:7d:fb:dc:4a:a1:d6:e0:bb:d1:c9:4f:b5:df:18:a1:
         09:8d:f8:dd:26:42:19:ed:66:11:0b:a2:d8:43:b0:86:e9:79:
         ea:d6:ac:06:f7:6a:76:ec:34:de:7f:be:2d:3c:8a:f4:e8:6c:
         87:8b:e7:10:ce:f5:65:e0:38:d0:95:ce:bb:6e:01:01:31:09:
         71:c2:4b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org