Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e332e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e332e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          ZAqOJ1uTk6/sQadgPHWPD/G/fIRLG/hKYnIFzB6vMks=
Subject key identifier:   3D:93:75:4D:C4:CF:20:91:2B:58:35:45:F8:43:0A:A1:95:DC:10:EC
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       129F2A17A79BEA7FBD6175FD92A95AC21D741DE0
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e332e302f32342d3234203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:12 +0000
ROA not before:           Tue 12 Sep 2023 04:55:12 +0000
ROA not after:            Tue 10 Sep 2024 05:00:12 +0000
asID:                     262713
IP address blocks:        186.208.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9f:2a:17:a7:9b:ea:7f:bd:61:75:fd:92:a9:5a:c2:1d:74:1d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:12 2023 GMT
            Not After : Sep 10 05:00:12 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:3b:01:d2:be:1f:63:16:de:a1:66:4c:28:
                    0b:a2:55:02:44:69:dd:4d:cb:af:d5:e3:60:45:3b:
                    c4:52:5a:24:14:6f:08:dc:f3:5a:bf:ef:19:18:b3:
                    10:3f:54:b1:0a:10:34:98:fb:c6:3e:aa:ad:63:c3:
                    c0:9b:ba:e8:ba:82:a0:c8:9e:9c:38:b9:52:d9:22:
                    aa:e5:99:02:cd:96:8a:e3:df:14:4c:5e:3b:fa:58:
                    7a:0b:0a:5f:ac:8d:e8:1a:d1:26:59:51:84:0a:f2:
                    80:bf:2a:94:ff:c7:a1:35:5a:8f:a3:87:ad:8e:a0:
                    cd:46:73:3a:d9:db:6e:43:d7:76:00:4b:a9:15:2e:
                    99:2b:18:38:6b:18:76:8e:de:0c:71:d4:e0:9e:b8:
                    f9:a9:55:5f:17:86:c8:bc:48:5c:2f:e4:75:69:4e:
                    86:3b:70:f7:e7:9f:d0:98:c3:ca:7b:e1:91:f2:30:
                    00:0a:ba:a4:c6:a8:59:81:a4:11:6d:ad:02:d1:d8:
                    c6:36:08:f6:73:1f:7c:ad:fa:09:53:e4:45:31:45:
                    1f:3e:30:e0:15:f4:32:1e:09:cf:ee:51:37:ce:56:
                    d5:27:b9:1e:53:7c:a5:6a:11:b0:fa:2e:fe:e2:bf:
                    59:44:a5:41:9f:77:21:ee:2b:00:30:fb:6d:df:1e:
                    d0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:93:75:4D:C4:CF:20:91:2B:58:35:45:F8:43:0A:A1:95:DC:10:EC
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e332e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:56:a4:92:e8:2e:b2:38:8e:be:52:b5:ed:05:70:96:5f:75:
         15:9b:de:70:5b:51:e9:58:1a:80:d3:a8:8a:01:08:d8:7b:a8:
         68:f7:c5:9d:81:e3:32:33:6d:43:31:a6:fc:d3:f9:a7:c4:b9:
         4f:4e:1a:5b:bc:72:02:55:c2:c6:81:1a:2f:54:95:1e:d7:d7:
         31:ec:ef:25:e9:cd:45:fa:57:51:95:ac:ba:32:4f:d8:cf:82:
         c4:c8:3c:13:ec:e0:93:15:c8:f7:75:e6:92:57:5b:ca:99:6c:
         bb:8d:ca:42:4d:e3:7c:ee:0e:23:f6:55:9a:00:e5:1f:47:a8:
         2d:cf:ad:b9:88:5b:4f:6b:e8:7c:be:ac:9b:41:69:f6:6f:05:
         63:cf:5e:c2:15:1b:21:03:68:37:b2:19:b6:0b:a9:f9:63:28:
         76:f3:b4:f4:d8:5d:27:50:d9:d8:23:b0:6d:6c:ba:7e:04:bc:
         fb:41:90:6a:f5:52:c3:d7:4d:46:36:c6:81:f7:83:5f:a3:72:
         90:dc:3c:02:1b:b9:00:31:e0:cb:69:82:29:4c:cd:cb:89:a5:
         0b:a1:3b:00:3c:a9:96:a8:da:7d:e3:29:5f:b9:d3:fe:04:6d:
         9a:fc:4d:c5:73:5c:a8:e0:87:2d:92:3f:05:bc:6e:03:61:4f:
         e6:89:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org