Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/3138362e3233352e3234302e302f32322d3234203d3e20323633313033.roa
File:                     3138362e3233352e3234302e302f32322d3234203d3e20323633313033.roa (raw, json)
Hash identifier:          uAmLmhIyCGoE9HLqQEjAO5pPP3eubUCe7+vP75aQoZA=
Subject key identifier:   79:D7:D8:9E:5C:9D:85:40:4D:7B:8B:11:08:77:E4:CF:D0:0C:55:57
Certificate issuer:       /CN=E88CD61BC763954FE676E6FFBBBB376D7A8FF90B
Certificate serial:       765B4104CBF3504F89D0712DB4CB62DD22F65D87
Authority key identifier: E8:8C:D6:1B:C7:63:95:4F:E6:76:E6:FF:BB:BB:37:6D:7A:8F:F9:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E88CD61BC763954FE676E6FFBBBB376D7A8FF90B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/3138362e3233352e3234302e302f32322d3234203d3e20323633313033.roa
Signing time:             Sat 25 Sep 2021 14:52:00 +0000
ROA not before:           Sat 25 Sep 2021 14:47:00 +0000
ROA not after:            Sat 24 Sep 2022 14:52:00 +0000
asID:                     263103
IP address blocks:        186.235.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5b:41:04:cb:f3:50:4f:89:d0:71:2d:b4:cb:62:dd:22:f6:5d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E88CD61BC763954FE676E6FFBBBB376D7A8FF90B
        Validity
            Not Before: Sep 25 14:47:00 2021 GMT
            Not After : Sep 24 14:52:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:c4:81:2c:83:dd:6b:db:71:af:b6:44:ad:
                    c7:7f:75:79:ae:0a:f7:47:04:a9:64:b4:4f:c5:5f:
                    1a:fe:40:69:cc:a2:75:4a:64:92:22:6c:1a:18:c1:
                    5c:92:1f:2e:8d:3d:c1:87:1d:40:aa:9f:c2:a3:62:
                    2d:45:ca:d8:a1:35:29:be:26:39:74:d3:84:d7:a7:
                    14:6a:be:57:69:4a:84:55:5f:cd:87:a8:b0:2b:84:
                    27:7b:26:9b:6f:11:f5:5e:b2:f2:b0:32:c2:d3:ea:
                    b1:9a:11:f3:ef:9f:2d:11:ae:ed:6e:fa:50:5b:02:
                    8b:f2:da:21:15:6b:f5:5e:2f:96:6b:66:02:5e:44:
                    bf:d4:a6:ea:36:be:33:56:4e:80:41:5b:3a:26:dc:
                    35:cf:46:f6:be:a6:b0:6c:68:04:3a:72:8b:36:80:
                    26:24:22:c9:3a:47:db:85:f2:8b:9e:c2:7b:b1:d9:
                    17:de:d8:b6:eb:82:c7:d8:db:e9:71:66:e2:d7:db:
                    a7:8a:ea:97:0a:0a:c3:a4:99:cc:d3:8a:1e:c4:41:
                    2b:15:4b:9d:c6:cb:70:ba:b1:f9:44:4c:21:ac:9e:
                    04:c8:9c:2c:03:24:9f:fb:f8:60:f0:49:ef:22:60:
                    34:ad:00:b5:e5:26:b5:45:6e:2b:7e:ac:7a:cd:2d:
                    8a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D7:D8:9E:5C:9D:85:40:4D:7B:8B:11:08:77:E4:CF:D0:0C:55:57
            X509v3 Authority Key Identifier:
                keyid:E8:8C:D6:1B:C7:63:95:4F:E6:76:E6:FF:BB:BB:37:6D:7A:8F:F9:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/E88CD61BC763954FE676E6FFBBBB376D7A8FF90B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E88CD61BC763954FE676E6FFBBBB376D7A8FF90B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6c1NPPUnc4C5JpXw4j6N6M16BHFdDmD1soH7TniCgZbz/0/3138362e3233352e3234302e302f32322d3234203d3e20323633313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:03:73:53:74:99:60:04:cd:6e:10:76:2c:b4:5f:0c:d2:65:
         01:f3:09:d4:e7:35:cc:ef:9e:3a:9e:d2:ba:00:f8:b0:54:61:
         b4:3b:16:54:3c:e1:08:1e:58:3c:0b:ed:31:46:9a:46:02:8c:
         d7:16:7d:35:26:98:a4:b2:53:30:24:5d:39:a1:75:ad:3a:9c:
         67:45:5a:fa:0d:17:ae:4b:53:42:ff:f2:5d:31:47:07:a8:80:
         54:11:27:0f:05:e7:14:3c:4f:fd:27:c9:35:bc:52:e8:0f:50:
         9e:dc:7a:99:b4:dd:9e:77:04:fc:01:03:ad:b5:d1:3d:84:86:
         05:18:99:5f:21:ee:10:75:e3:fd:24:d4:15:d6:0a:5b:b4:78:
         ce:d2:43:b5:b9:87:96:84:7d:19:90:68:d5:1d:74:1c:35:d0:
         14:94:9b:93:f1:47:65:b6:71:65:37:10:d3:a0:65:1b:17:52:
         64:69:50:1e:e2:c0:49:90:5b:50:13:30:63:16:6d:d1:90:eb:
         b0:ba:88:11:bb:6e:51:fc:b3:8b:8c:24:35:14:f2:80:d8:ab:
         1b:80:81:de:0b:8b:9b:54:22:a3:e5:f9:4b:cd:41:b9:e0:be:
         61:ce:c0:13:60:37:4f:46:98:a7:93:2f:4f:05:67:b0:ff:16:
         24:5a:31:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org