Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31312e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e31312e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          dEZ8og2KV3tI88jKOTEs/BiEhUKIeFrWDBOmR46aF60=
Subject key identifier:   5B:82:E8:BC:7E:BE:17:13:FC:7A:80:FF:CF:79:AD:75:7F:36:2D:F3
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       617E32281F4E56446AD16E42CD09BC392974AD16
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31312e302f32342d3234203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:10 +0000
ROA not before:           Tue 12 Sep 2023 04:55:10 +0000
ROA not after:            Tue 10 Sep 2024 05:00:10 +0000
asID:                     262713
IP address blocks:        186.208.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7e:32:28:1f:4e:56:44:6a:d1:6e:42:cd:09:bc:39:29:74:ad:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:10 2023 GMT
            Not After : Sep 10 05:00:10 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:73:c9:32:02:70:31:85:17:b7:2c:74:56:dc:
                    5b:f5:03:6f:23:a6:d3:d6:d5:04:8a:13:72:da:67:
                    42:af:4b:c8:dc:70:94:c5:a3:0f:28:6b:0f:07:01:
                    5e:df:d3:60:52:80:38:57:1c:66:7b:58:72:21:1c:
                    26:e1:65:24:3c:e9:bf:00:97:d7:59:f4:0f:6f:35:
                    7a:17:7a:60:7a:c8:d0:0a:e8:99:be:03:83:da:f7:
                    30:8a:cd:e5:5c:58:35:c7:6e:96:29:55:1a:2b:f3:
                    f1:67:c0:cb:cf:8b:4d:b9:63:06:3a:9f:92:93:5b:
                    8c:3e:d4:9f:be:1e:46:41:14:1a:d7:ba:73:4d:5c:
                    da:ba:87:df:56:2a:bf:f4:51:68:ff:fd:db:5d:d1:
                    85:c0:41:f9:a5:73:eb:ba:8b:1e:00:71:8c:64:4d:
                    94:3d:b6:e0:8a:90:83:08:37:33:41:17:fb:5e:5d:
                    34:f4:d9:c3:eb:6b:3d:04:3f:57:0a:f7:76:4b:c4:
                    71:89:41:8f:b0:4c:70:45:b7:66:6c:c4:08:4c:8f:
                    c0:24:dd:c8:9f:4e:49:78:34:66:a7:1f:d6:8c:24:
                    fd:0c:0e:03:a1:11:72:a0:e3:c8:3b:0a:1d:e2:aa:
                    e4:31:4b:10:1b:33:97:f0:07:69:29:45:5f:2b:db:
                    41:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:82:E8:BC:7E:BE:17:13:FC:7A:80:FF:CF:79:AD:75:7F:36:2D:F3
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31312e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:32:09:10:ff:32:7c:21:b9:61:26:68:c2:26:0e:17:6d:b1:
         6f:15:86:bc:5b:65:b4:4b:31:43:41:37:fd:fb:e5:9f:e2:70:
         62:9b:cb:b2:c4:5e:c5:2a:bb:ca:e3:c3:8c:8f:40:41:3e:de:
         c8:5b:82:3c:97:77:d5:f8:3d:56:f7:eb:59:b2:f1:17:59:9c:
         07:9c:a5:cc:0a:85:94:4d:a5:71:8d:a7:d1:7c:04:73:6e:8f:
         44:3b:7e:6e:bf:73:5b:34:05:bc:da:cb:cf:80:61:58:05:d6:
         bd:00:d4:4e:20:20:9b:12:5f:f5:11:2f:44:67:02:81:1b:70:
         b5:ce:24:68:6a:38:97:02:4d:bf:b4:62:64:db:27:58:52:bb:
         c9:dc:cf:81:65:c9:8c:a6:02:ce:87:f4:c9:ba:7c:20:7d:69:
         2e:24:fc:ee:08:02:b1:e6:2a:4d:49:69:50:c2:96:3c:9f:a3:
         67:11:83:6b:8c:4c:41:b7:ab:88:ed:c8:3c:2d:f8:82:fa:62:
         f4:fd:08:30:a0:f5:57:b1:2e:13:50:fe:8b:34:99:8c:fd:10:
         91:24:1d:09:32:e1:d6:7a:13:6d:90:c4:44:68:c2:3a:5b:19:
         83:60:47:3a:6e:92:a7:92:59:ec:27:13:18:0e:0d:99:67:a1:
         b3:0c:56:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org