Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xoMirZqxe8xBpWPTbnh6MqNiWmynytiy4VbUw4csyL4/0/3138362e3134382e3232382e302f32322d3234203d3e20323730363635.roa
File:                     3138362e3134382e3232382e302f32322d3234203d3e20323730363635.roa (raw, json)
Hash identifier:          3HPtXIYtcVEgngWOBadbwdoFTrvRQKL4DIdgHAWrpfM=
Subject key identifier:   7C:79:82:C7:0C:54:1B:80:CD:CD:A6:34:20:1D:3D:39:6E:57:D9:2E
Certificate issuer:       /CN=C1889F3DEEDCB03F5E4FCA200B706650EC5BD054
Certificate serial:       747C04017C7B41980D57F7EC41A731D2C77BFC1F
Authority key identifier: C1:88:9F:3D:EE:DC:B0:3F:5E:4F:CA:20:0B:70:66:50:EC:5B:D0:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1889F3DEEDCB03F5E4FCA200B706650EC5BD054.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xoMirZqxe8xBpWPTbnh6MqNiWmynytiy4VbUw4csyL4/0/3138362e3134382e3232382e302f32322d3234203d3e20323730363635.roa
Signing time:             Thu 04 Apr 2024 19:00:00 +0000
ROA not before:           Thu 04 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     270665
IP address blocks:        186.148.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7c:04:01:7c:7b:41:98:0d:57:f7:ec:41:a7:31:d2:c7:7b:fc:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1889F3DEEDCB03F5E4FCA200B706650EC5BD054
        Validity
            Not Before: Apr  4 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:84:c4:45:44:a4:02:63:84:d4:10:e8:1d:
                    80:77:e2:07:2e:9f:d3:36:bb:44:11:25:fb:71:36:
                    aa:ab:87:f2:44:16:d1:0f:a9:b7:8f:4c:da:49:5b:
                    68:06:d1:e9:60:32:8f:11:e3:b4:d9:45:2b:1f:dc:
                    73:c8:e8:88:f3:d2:9f:0a:14:14:e0:ed:ac:06:4f:
                    ae:3e:81:5a:87:fb:ee:ef:a6:58:50:94:2f:4c:49:
                    1c:c9:fb:50:79:f1:4f:e8:f8:0c:87:7a:0f:64:ad:
                    13:e8:2a:57:a4:52:4d:12:c5:62:37:df:96:91:7e:
                    51:ce:ed:0b:c2:43:d9:fc:4e:84:cb:01:86:68:41:
                    31:48:a2:cd:85:e5:c9:ee:33:d3:a4:24:36:a4:7a:
                    b6:9e:2a:e5:51:b5:af:77:c6:57:9c:a0:0f:85:6b:
                    f8:b2:5f:80:7d:be:2a:2a:f5:48:92:76:44:11:eb:
                    1f:83:53:fa:6a:16:a8:3b:b1:92:c4:d4:e8:ec:f4:
                    52:70:37:9a:c3:65:99:20:53:14:1c:0a:82:3f:4a:
                    fd:66:7d:be:ef:c1:c6:ea:77:19:d4:bb:59:9b:23:
                    9b:d9:28:ed:71:d6:a7:1c:b6:5f:e8:5b:a9:c0:4f:
                    bc:ef:08:8a:61:98:f6:7b:a5:a5:4f:49:0b:5c:fd:
                    03:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:79:82:C7:0C:54:1B:80:CD:CD:A6:34:20:1D:3D:39:6E:57:D9:2E
            X509v3 Authority Key Identifier:
                keyid:C1:88:9F:3D:EE:DC:B0:3F:5E:4F:CA:20:0B:70:66:50:EC:5B:D0:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xoMirZqxe8xBpWPTbnh6MqNiWmynytiy4VbUw4csyL4/0/C1889F3DEEDCB03F5E4FCA200B706650EC5BD054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1889F3DEEDCB03F5E4FCA200B706650EC5BD054.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xoMirZqxe8xBpWPTbnh6MqNiWmynytiy4VbUw4csyL4/0/3138362e3134382e3232382e302f32322d3234203d3e20323730363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:fe:30:a0:bf:d1:49:44:38:09:c0:ac:3f:99:bc:64:29:9a:
         31:ba:59:53:b3:0c:f0:0b:ed:27:09:f7:78:48:5b:5f:8e:c6:
         88:41:04:69:c9:c5:42:ac:40:9d:1a:8c:67:b2:29:df:90:29:
         ef:2e:73:40:62:03:95:64:95:14:63:e9:76:75:7a:cd:6a:66:
         db:d3:1f:43:c4:36:06:09:c0:8b:ea:63:69:5a:8d:0c:c4:40:
         94:fc:ae:78:8f:ed:c2:13:56:71:9d:3e:5a:ba:b6:1f:a0:09:
         d5:55:f9:46:6d:8c:62:2a:a3:49:92:ad:54:1e:f8:43:52:a5:
         3f:41:75:d8:02:0b:4e:25:2e:bb:08:4a:e4:30:95:65:d0:cc:
         7d:27:a4:ac:c6:a6:7c:fa:c3:7b:bf:05:85:0f:dd:08:33:70:
         24:6d:b0:3f:92:1a:a8:cc:67:12:43:c6:a0:b3:39:df:40:84:
         8d:6f:34:ff:7e:44:b2:a1:d4:f9:c9:73:d2:a2:5c:ea:97:2c:
         2e:a5:60:9b:ef:b9:5c:31:b5:8b:d3:ae:d8:0d:b8:8c:90:39:
         58:b7:cf:1e:ab:bb:01:f3:12:26:63:41:8d:c0:e5:90:23:c4:
         d3:7c:6e:9a:03:93:77:d9:85:b2:43:fe:27:3a:16:92:34:ee:
         30:ac:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org