Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32302d3230203d3e20323632373133.roa
File:                     3138362e3230382e302e302f32302d3230203d3e20323632373133.roa (raw, json)
Hash identifier:          EumlVuwHDWMQMUNHX9QBW8bhS1hP8hJrrGEzlOh2Cr0=
Subject key identifier:   9E:75:9C:4E:BB:8C:A5:4A:20:8F:26:59:C7:A9:B7:98:42:E1:88:EC
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       2ED04FADE506A47A9BBFD290C673C9EDCE0BB545
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32302d3230203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:01 +0000
ROA not before:           Tue 12 Sep 2023 04:55:01 +0000
ROA not after:            Tue 10 Sep 2024 05:00:01 +0000
asID:                     262713
IP address blocks:        186.208.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d0:4f:ad:e5:06:a4:7a:9b:bf:d2:90:c6:73:c9:ed:ce:0b:b5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:01 2023 GMT
            Not After : Sep 10 05:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a7:2e:e1:a2:bd:bb:f2:ca:80:20:60:17:0b:
                    4e:77:3a:e2:7a:a0:2a:78:01:b7:2f:b4:99:59:17:
                    a4:2e:15:e9:f4:d3:8c:a9:6c:00:f2:70:46:2f:6f:
                    9d:de:9a:f6:be:26:6c:34:fe:87:1e:f9:db:1d:46:
                    fd:3b:05:e5:cf:62:63:98:96:8b:6b:af:c0:f9:89:
                    49:f1:76:2a:07:f5:17:41:01:03:8c:aa:12:61:33:
                    b8:bb:38:51:c5:1e:bd:8c:c2:93:f9:80:f0:8f:ec:
                    9d:7b:3b:2f:46:1e:e7:70:4a:14:2d:0c:9d:d5:04:
                    1f:ed:bb:a0:60:5a:b3:95:f9:eb:91:50:bd:ed:80:
                    64:eb:6b:7d:7c:cc:93:96:21:80:f5:b0:ed:15:c4:
                    21:17:32:9e:de:6c:d7:c7:d6:95:00:36:60:be:e6:
                    51:e5:21:84:cd:21:99:24:e5:97:dd:4a:74:d4:7c:
                    9b:be:bd:ee:a7:44:1a:c0:b7:24:df:ec:7a:e0:f2:
                    d4:68:8f:2c:7a:26:2c:74:e0:fa:b1:12:d2:e7:24:
                    66:37:bc:ea:dd:65:62:4d:7d:4c:94:35:c2:20:0f:
                    17:53:99:be:64:57:8b:fd:c5:c0:3b:f4:63:eb:c9:
                    00:36:c4:8d:5a:f4:15:c7:d4:76:8a:e4:42:5c:5e:
                    c2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:75:9C:4E:BB:8C:A5:4A:20:8F:26:59:C7:A9:B7:98:42:E1:88:EC
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e302e302f32302d3230203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:c8:50:ef:3f:cc:46:1c:9a:dd:90:c5:c7:3d:0e:de:47:6e:
         04:4e:44:70:8f:ff:e6:13:7d:84:49:e0:f2:7d:2d:96:5f:6a:
         ea:01:bb:4e:2c:3e:32:a8:60:e4:d1:c3:e4:0b:53:8e:f8:c4:
         4e:48:ff:9b:be:25:c0:ea:7a:2b:e6:11:35:1e:01:a9:47:a1:
         fd:9e:c2:6b:cf:17:09:0c:63:a7:2d:b8:5b:83:cb:d1:1f:aa:
         2e:13:ab:d4:34:35:80:d6:bd:ea:70:32:65:38:b3:b4:51:8f:
         a9:85:15:65:4c:cb:8e:fe:e9:7e:7a:2b:00:b3:88:24:0d:4b:
         bf:85:80:29:f7:b0:54:c4:08:af:59:66:da:34:ed:8e:85:7f:
         f5:5b:c6:73:91:49:e0:cf:50:20:5d:1a:f2:5c:30:d9:47:26:
         ed:c1:a0:9a:80:3e:b5:e1:5d:74:59:c7:6d:9c:f2:3a:38:fd:
         29:86:83:6f:d6:73:b9:0c:0a:33:b5:f4:0b:06:cc:e2:12:0e:
         40:1b:58:1d:08:ea:88:a5:c8:f9:c4:37:89:72:19:90:94:80:
         aa:4b:8d:3f:6d:e7:98:f5:10:6e:65:f1:8b:9f:a4:6b:aa:05:
         5a:16:14:6c:18:62:4e:b6:15:3b:87:2d:e7:e6:cc:db:34:68:
         e8:c6:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org