Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e342e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e342e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          4uSwga5U15CRuey/vz8ejyOCaCaI8CUMfGVv7EIEVLs=
Subject key identifier:   AA:F0:93:10:BC:83:A3:8A:EA:E0:95:57:EB:6B:FB:68:35:BA:64:15
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       0D2279A157DC186D13136CBF8D613B89D031EB77
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e342e302f32342d3234203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:08 +0000
ROA not before:           Tue 12 Sep 2023 04:55:08 +0000
ROA not after:            Tue 10 Sep 2024 05:00:08 +0000
asID:                     262713
IP address blocks:        186.208.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:22:79:a1:57:dc:18:6d:13:13:6c:bf:8d:61:3b:89:d0:31:eb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:08 2023 GMT
            Not After : Sep 10 05:00:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:a6:49:be:21:4a:f0:df:83:33:3b:dd:f2:
                    a7:67:1a:57:6b:52:81:18:3d:c7:81:be:3b:6c:db:
                    ea:e8:04:b5:6f:86:16:0e:ba:bc:4c:1d:07:04:50:
                    12:dd:4b:75:a9:62:c6:cb:92:d9:31:82:4a:40:18:
                    6c:51:f6:b5:5f:a9:bf:a9:90:40:93:64:bc:27:0e:
                    95:49:69:e7:4d:8f:c2:ab:33:2d:85:0d:b0:84:f7:
                    54:26:28:b1:9d:8a:f5:d3:cd:d9:6a:be:c3:6e:a1:
                    e4:66:43:b5:06:f7:8e:f2:07:0d:b8:95:44:bf:d4:
                    e1:46:27:19:03:d5:24:19:cf:fd:a1:98:9d:7f:d2:
                    d5:d1:2f:04:f7:ed:b7:04:a6:7d:8b:94:e0:f3:07:
                    8c:b5:24:3e:ea:f7:b8:6d:98:8b:52:1b:10:fd:5f:
                    a4:86:85:ce:08:19:97:f3:eb:11:cb:f6:2c:5f:bb:
                    9d:21:cc:ad:36:85:fc:f7:01:d4:73:30:82:aa:02:
                    d2:4f:77:80:73:2b:ed:d3:74:98:cd:27:00:c2:83:
                    12:ca:27:ce:81:96:b5:7d:44:f0:55:f9:9d:27:59:
                    b8:93:79:da:cd:f8:5e:40:83:c4:b2:73:6e:18:5a:
                    82:c2:67:43:95:03:f3:ed:0f:a9:39:65:cc:a6:c1:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F0:93:10:BC:83:A3:8A:EA:E0:95:57:EB:6B:FB:68:35:BA:64:15
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e342e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:d9:73:a5:4b:6a:17:dd:87:39:73:79:f5:55:d8:08:44:54:
         95:a1:0f:bc:f7:ca:1f:24:cc:4f:73:21:90:5e:5c:f4:69:48:
         63:89:8b:44:0b:54:79:bd:1a:0f:ec:d0:ce:68:43:3a:6f:4f:
         9e:56:cb:aa:c0:38:42:da:24:0f:b7:74:5d:43:bc:35:88:bf:
         67:a2:2c:d0:c0:ea:b3:bf:9a:b3:98:8e:2c:e6:21:52:f1:1b:
         b5:a1:a9:a6:41:ea:8a:4f:bd:e2:aa:82:21:27:27:7b:81:65:
         ad:87:17:e2:80:fb:30:70:42:0e:47:ba:3f:35:f9:f9:26:3d:
         30:2a:29:07:82:e9:ec:4a:66:2e:4e:2d:08:b2:09:d1:bf:ac:
         14:45:03:aa:fe:6f:8c:69:d1:e3:f0:4d:73:ea:ab:3b:5e:c1:
         0b:ee:58:1a:b5:1c:ad:a3:79:8b:b9:8a:0a:5e:d2:98:05:a1:
         ad:a3:a3:9d:6f:55:2b:89:28:98:74:2e:fc:12:d6:8c:df:aa:
         b4:18:c8:11:2f:7c:ba:02:be:0b:23:65:40:3a:97:97:db:f2:
         db:d8:eb:74:5c:7e:1c:0d:ce:39:5d:ba:bb:2d:26:c3:32:59:
         54:02:cb:64:04:11:23:59:a8:b3:45:ad:b0:4a:50:14:97:11:
         0b:03:eb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org