Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa
File:                     3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa (raw, json)
Hash identifier:          hE5krSUiUaE/IVrBELczl1g1k8lKqmwI9kkh4T6H0t0=
Subject key identifier:   56:C1:E4:F2:DE:40:23:40:02:8B:77:67:9D:90:CB:76:61:9C:F7:53
Certificate issuer:       /CN=347031E886A1761CE1CBE9ACB8541F33592066CC
Certificate serial:       2F8B8B1AE03D198995D4E493AB9900691A66BCCC
Authority key identifier: 34:70:31:E8:86:A1:76:1C:E1:CB:E9:AC:B8:54:1F:33:59:20:66:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/347031E886A1761CE1CBE9ACB8541F33592066CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa
Signing time:             Thu 02 Nov 2023 03:46:11 +0000
ROA not before:           Thu 02 Nov 2023 03:41:11 +0000
ROA not after:            Thu 31 Oct 2024 03:46:11 +0000
asID:                     271031
IP address blocks:        186.250.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8b:8b:1a:e0:3d:19:89:95:d4:e4:93:ab:99:00:69:1a:66:bc:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347031E886A1761CE1CBE9ACB8541F33592066CC
        Validity
            Not Before: Nov  2 03:41:11 2023 GMT
            Not After : Oct 31 03:46:11 2024 GMT
        Subject: CN=56C1E4F2DE402340028B77679D90CB76619CF753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:ff:ee:ca:32:39:5a:76:12:16:9a:44:07:
                    bd:b1:ef:f2:15:c9:73:9c:49:5d:99:e2:61:2b:e2:
                    c6:ea:8d:2a:e2:cb:da:64:51:9a:80:87:7e:11:e9:
                    9c:70:a2:a9:8e:c3:19:81:f9:2a:b0:ed:38:18:f5:
                    5c:b8:54:5a:17:ee:e5:72:7c:e3:69:42:3f:48:9e:
                    90:42:b6:82:f7:98:ac:84:bf:b4:6a:26:6f:7a:15:
                    22:de:f0:28:3d:4f:d8:c5:75:1e:f0:a8:53:79:32:
                    cf:a6:74:ba:0a:0c:32:e3:b5:81:ac:a5:1a:a8:8b:
                    62:a0:88:36:08:23:84:8f:94:48:08:91:63:36:00:
                    ab:5d:70:63:2f:79:b0:db:aa:fd:20:33:7b:34:a1:
                    dd:5b:4d:9e:fc:16:fc:0a:a0:be:b1:3c:94:f6:2d:
                    db:32:a2:55:0d:4a:97:2e:38:5f:22:6f:39:03:e9:
                    f6:83:ab:ce:c0:dd:73:ce:7c:a7:1c:1b:da:c4:2a:
                    89:ba:1c:9b:c7:84:94:4f:a0:f3:36:6f:ae:3a:e8:
                    dc:dd:99:53:dc:d9:79:d4:98:e4:1e:3c:fb:98:f5:
                    8e:a3:e8:75:51:54:37:d8:91:cd:a2:e6:e6:c2:5c:
                    ea:56:10:04:92:09:55:e4:ff:87:a2:b1:6f:4c:63:
                    74:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C1:E4:F2:DE:40:23:40:02:8B:77:67:9D:90:CB:76:61:9C:F7:53
            X509v3 Authority Key Identifier:
                keyid:34:70:31:E8:86:A1:76:1C:E1:CB:E9:AC:B8:54:1F:33:59:20:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/347031E886A1761CE1CBE9ACB8541F33592066CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/347031E886A1761CE1CBE9ACB8541F33592066CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/0/3138362e3235302e36302e302f32322d3234203d3e20323731303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:4a:cc:26:82:d2:2e:91:37:a2:37:6e:65:3b:85:7c:14:4d:
         3b:6d:32:a6:75:b1:0f:61:d4:1e:91:5d:27:8c:a7:10:85:8e:
         4f:7b:b5:10:f9:6a:25:99:68:cd:53:e3:28:1b:14:aa:07:e3:
         f9:5b:98:f7:ca:50:29:c7:f5:93:f0:7a:73:e3:ae:79:9d:a1:
         a4:6e:13:5e:1d:77:c1:35:93:94:90:6c:60:ae:31:09:40:ab:
         e5:9e:3b:01:0e:ff:82:0a:2a:a7:c6:b7:8b:c2:8f:27:37:61:
         bd:2d:53:e1:57:04:d9:3a:a7:ae:e1:24:0d:3e:00:8a:38:58:
         2d:48:dd:9d:f2:ba:bd:e0:77:c9:64:ea:e0:62:b6:63:89:72:
         1f:2b:d4:a5:eb:0f:4d:a0:db:df:42:3e:c8:8b:5b:e2:81:50:
         d2:a8:b5:fe:95:55:ef:89:b4:7e:f4:08:14:c1:e4:86:11:cb:
         4f:24:6c:67:5e:c4:50:b8:ce:9e:a5:24:bd:e1:49:85:d7:ee:
         05:5e:99:b3:fc:7f:eb:b0:97:94:49:bd:97:98:92:e2:af:5b:
         56:b2:aa:4f:1a:1e:52:28:fe:00:17:86:45:20:dd:b4:be:35:
         19:c0:f2:a6:d3:1a:4a:d6:bd:e8:2a:29:f3:4c:c2:7e:0b:6a:
         e9:3e:03:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org