Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31342e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e31342e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          MU9JnOvfsmViywGRA5MBhk8GaMU6l8+RCErGdNhlbx0=
Subject key identifier:   C5:11:1B:1A:E9:6A:C5:F2:B6:BF:67:0B:66:BD:6B:1B:69:2D:35:B0
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       157B60A45A7DC4253F1F49522687C2B37D80FA95
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31342e302f32342d3234203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 04:00:00 +0000
ROA not before:           Tue 12 Sep 2023 03:55:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     262713
IP address blocks:        186.208.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7b:60:a4:5a:7d:c4:25:3f:1f:49:52:26:87:c2:b3:7d:80:fa:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 03:55:00 2023 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:eb:3e:c9:79:a9:9d:34:2a:f2:39:98:86:e0:
                    9c:3c:52:0d:2b:03:3d:ec:af:44:99:71:50:6e:e6:
                    4b:91:47:f1:12:f3:05:d4:43:ac:a5:54:26:df:2d:
                    12:6f:13:32:05:b6:cb:4f:e2:e6:6c:54:9a:07:34:
                    93:95:72:51:fb:24:1a:61:34:8f:41:98:cf:dc:f5:
                    06:5e:07:b8:8f:34:68:3f:28:99:20:a1:00:fc:8c:
                    cc:26:ba:8b:d6:e4:1f:6e:fe:93:43:d3:56:73:7e:
                    7a:2c:c5:cb:81:19:5f:b9:61:70:c5:5e:01:d4:72:
                    30:7e:7c:07:55:2b:ad:b2:02:5f:2a:30:f7:82:e5:
                    08:c1:3b:e1:58:e9:e9:78:e9:b6:b1:fd:c2:18:62:
                    2b:b8:15:ed:7b:cb:f8:61:a8:74:55:62:2f:02:28:
                    34:22:d6:27:51:27:02:4a:8e:72:f3:23:19:7c:6b:
                    a4:d7:22:e5:0b:fc:0e:a4:dc:93:6c:7b:4c:0d:b5:
                    c8:67:48:ac:cd:ea:a6:e1:35:fd:c3:14:cd:9c:fb:
                    c6:87:6e:7d:43:30:ca:63:31:71:e5:a9:7b:51:e2:
                    bb:d1:e2:ce:5a:9c:bc:ce:d4:17:e5:6b:3d:61:d8:
                    06:51:13:28:24:bf:2d:c9:dc:d4:d9:46:4c:c2:4d:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:11:1B:1A:E9:6A:C5:F2:B6:BF:67:0B:66:BD:6B:1B:69:2D:35:B0
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e31342e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:2d:cb:36:10:83:85:84:a5:a3:b4:06:6e:76:76:86:0e:d4:
         94:a9:b0:e2:36:9d:01:cc:4e:df:1b:0d:07:53:c8:0e:7a:8c:
         f9:e7:5f:c0:64:d1:15:43:1d:ed:e5:88:a6:93:4d:ea:b4:5b:
         ce:05:78:38:4d:08:01:1a:08:17:9c:63:1f:80:50:e0:20:58:
         f8:3c:c4:9c:90:61:b7:c0:ae:69:7f:3e:36:69:3c:60:82:63:
         94:ca:d1:31:4b:25:22:ac:07:1e:b9:00:27:be:b1:43:d9:c0:
         eb:7e:98:48:85:78:ca:9f:0c:f1:09:df:75:78:f0:ca:18:29:
         d5:a1:44:56:e3:85:47:18:dc:04:61:9b:c6:67:36:8b:ef:8e:
         a5:31:cc:af:61:4a:26:71:b2:58:5f:94:63:d7:3c:24:82:c8:
         00:4d:94:66:71:4c:6e:11:a1:8c:ff:b9:d5:b0:48:d4:67:56:
         fc:c1:5b:82:ea:87:59:d8:d2:c8:34:b0:6a:b9:50:9b:99:14:
         d9:9b:16:9a:b0:1c:56:6a:8e:87:26:1a:e5:02:ca:5c:5f:85:
         3a:c6:e4:6d:cd:5e:9f:eb:dc:c0:73:93:48:88:85:a5:cf:48:
         ae:d5:96:76:2e:66:4c:53:2d:ee:89:75:ec:62:9f:8b:43:be:
         75:f8:0c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org