Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e362e302f32332d3233203d3e20323632373133.roa
File:                     3138362e3230382e362e302f32332d3233203d3e20323632373133.roa (raw, json)
Hash identifier:          ih9usdmHuQVJyLXPt2anU1VRNGiXPcUqxGaFTlbFZpI=
Subject key identifier:   BA:4C:CB:36:D9:F9:77:F0:C9:37:A4:A0:14:1F:31:61:3E:4E:1F:DB
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       4B2FE0501EE70ADC0F840CF2D62CDA5593938C0F
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e362e302f32332d3233203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:11 +0000
ROA not before:           Tue 12 Sep 2023 04:55:11 +0000
ROA not after:            Tue 10 Sep 2024 05:00:11 +0000
asID:                     262713
IP address blocks:        186.208.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2f:e0:50:1e:e7:0a:dc:0f:84:0c:f2:d6:2c:da:55:93:93:8c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:11 2023 GMT
            Not After : Sep 10 05:00:11 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:9d:48:2d:8d:d3:f2:13:e1:b1:93:7d:d4:
                    98:bd:91:2b:69:37:e4:e4:a0:8e:cb:1b:b5:61:cf:
                    a3:c8:e1:f9:08:dc:f6:07:d3:95:dd:36:e1:4e:6e:
                    dc:00:91:b2:b1:fb:4a:32:0e:d2:68:2f:3a:27:1a:
                    48:fd:82:26:4e:b6:99:52:5b:bb:7e:53:70:65:4f:
                    db:c7:39:bd:44:fe:21:b5:c6:ae:1b:43:3a:3a:58:
                    50:13:53:bd:9b:d9:79:ce:10:61:d4:b1:41:3b:5f:
                    02:cb:05:c7:65:02:19:73:bf:01:6d:a6:f2:6f:9c:
                    d3:b5:35:e5:ec:86:9f:03:37:fc:f4:a6:9d:0a:69:
                    40:a5:cf:e8:d4:59:b6:29:33:21:87:72:6b:2a:ee:
                    d2:1c:9a:4e:6f:f3:97:fa:c3:c9:cf:08:38:6f:cb:
                    d9:5d:51:1b:66:e4:11:43:f2:db:3b:44:98:6c:9b:
                    aa:b7:03:e2:df:67:d5:8f:db:9d:52:65:6a:9a:47:
                    02:1f:cf:33:52:90:21:1e:d1:db:e9:71:09:99:2a:
                    f8:6e:3a:9b:e6:c7:30:d4:df:5d:1f:0b:6a:56:af:
                    af:0d:f8:8a:fb:7b:24:88:ff:9f:53:d2:d3:8b:f1:
                    36:f6:46:66:0f:02:70:b2:bd:db:2c:3a:6f:3e:67:
                    e0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4C:CB:36:D9:F9:77:F0:C9:37:A4:A0:14:1F:31:61:3E:4E:1F:DB
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e362e302f32332d3233203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:c6:c1:7a:0e:fe:58:60:a4:fd:2a:09:3b:3e:2f:b6:ea:db:
         09:b9:69:bc:41:90:42:4e:a2:23:a2:8d:ba:19:e4:62:ae:ec:
         ea:0e:7f:31:8b:5a:ae:54:d9:38:d7:a3:ec:da:40:f1:73:44:
         bc:eb:07:a6:b0:d4:b3:34:f4:57:4a:af:b2:00:25:01:ac:98:
         bf:ce:0b:fb:6d:43:a0:4e:75:d1:33:cf:48:70:ae:41:5b:d2:
         02:77:cb:44:50:7c:d6:96:4c:01:6d:8e:dc:cc:29:c3:e0:c5:
         31:6f:aa:7b:77:2a:56:b5:c5:ec:aa:d8:9a:f0:5a:97:45:a9:
         09:86:12:1d:23:68:82:2e:c2:d1:4f:8a:93:c2:c9:d2:9c:a0:
         bf:40:e2:85:40:f4:49:c7:da:f0:9b:a3:53:4c:a4:82:37:e4:
         e5:cf:20:3e:88:28:66:69:33:33:4d:f4:1d:d0:ae:d0:a7:83:
         2b:64:7c:9b:2d:22:d6:96:58:45:e7:92:3e:50:ad:55:9d:e4:
         25:22:3a:27:f7:f8:39:ae:50:c0:e2:8b:60:76:c3:c3:67:dc:
         e5:21:e4:32:05:3e:d9:6c:27:74:8b:ce:e0:db:d8:30:b4:aa:
         3f:d6:1c:d7:35:2b:70:46:cc:b5:3c:50:21:f0:4d:d9:0c:f6:
         3f:31:3d:e0
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUSy/gUB7nCtwPhAzy1izaVZOTjA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDNkI4QzUzN0FDMDYzQ0U1MTA3NUM2QjgxNkUzMzUz
RTU3NDc1QzAeFw0yMzA5MTIwNDU1MTFaFw0yNDA5MTAwNTAwMTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTRBRTlENDgyRDhERDNGMjEz
RTFCMTkzN0RENDk4QkQ5MTJCNjkzN0U0RTRBMDhFQ0IxQkI1NjFDRkEzQzhFMUY5
MDhEQ0Y2MDdEMzk1REQzNkUxNEU2RURDMDA5MUIyQjFGQjRBMzIwRUQyNjgyRjNB
MjcxQTQ4RkQ4MjI2NEVCNjk5NTI1QkJCN0U1MzcwNjU0RkRCQzczOUJENDRGRTIx
QjVDNkFFMUI0MzNBM0E1ODUwMTM1M0JEOUJEOTc5Q0UxMDYxRDRCMTQxM0I1RjAy
Q0IwNUM3NjUwMjE5NzNCRjAxNkRBNkYyNkY5Q0QzQjUzNUU1RUM4NjlGMDMzN0ZD
RjRBNjlEMEE2OTQwQTVDRkU4RDQ1OUI2MjkzMzIxODc3MjZCMkFFRUQyMUM5QTRF
NkZGMzk3RkFDM0M5Q0YwODM4NkZDQkQ5NUQ1MTFCNjZFNDExNDNGMkRCM0I0NDk4
NkM5QkFBQjcwM0UyREY2N0Q1OEZEQjlENTI2NTZBOUE0NzAyMUZDRjMzNTI5MDIx
MUVEMURCRTk3MTA5OTkyQUY4NkUzQTlCRTZDNzMwRDRERjVEMUYwQjZBNTZBRkFG
MERGODhBRkI3QjI0ODhGRjlGNTNEMkQzOEJGMTM2RjY0NjY2MEYwMjcwQjJCRERC
MkMzQTZGM0U2N0UwMTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApK6dSC2N0/IT4bGTfdSYvZEraTfk5KCOyxu1Yc+jyOH5CNz2B9OV
3TbhTm7cAJGysftKMg7SaC86JxpI/YImTraZUlu7flNwZU/bxzm9RP4htcauG0M6
OlhQE1O9m9l5zhBh1LFBO18CywXHZQIZc78Bbabyb5zTtTXl7IafAzf89KadCmlA
pc/o1Fm2KTMhh3JrKu7SHJpOb/OX+sPJzwg4b8vZXVEbZuQRQ/LbO0SYbJuqtwPi
32fVj9udUmVqmkcCH88zUpAhHtHb6XEJmSr4bjqb5scw1N9dHwtqVq+vDfiK+3sk
iP+fU9LTi/E29kZmDwJwsr3bLDpvPmfgFQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FLpMyzbZ+XfwyTekoBQfMWE+Th/bMB8GA1UdIwQYMBaAFPTGuMU3rAY85RB1xrgW
4zU+V0dcMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdON2lUVDRxRzU0b3Jh
U2N0ZTgxY2tWUVk4cU1hd0IycEYzMVg1NUU2WDkxLzAvRjRDNkI4QzUzN0FDMDYz
Q0U1MTA3NUM2QjgxNkUzMzUzRTU3NDc1Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GNEM2QjhDNTM3QUMwNjNDRTUxMDc1QzZCODE2RTMzNTNFNTc0
NzVDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby83TjdpVFQ0cUc1NG9yYVNjdGU4
MWNrVlFZOHFNYXdCMnBGMzFYNTVFNlg5MS8wLzMxMzgzNjJlMzIzMDM4MmUzNjJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjM3MzEzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrQ
BjANBgkqhkiG9w0BAQsFAAOCAQEAh8bBeg7+WGCk/SoJOz4vturbCblpvEGQQk6i
I6KNuhnkYq7s6g5/MYtarlTZONej7NpA8XNEvOsHprDUszT0V0qvsgAlAayYv84L
+21DoE510TPPSHCuQVvSAnfLRFB81pZMAW2O3Mwpw+DFMW+qe3cqVrXF7KrYmvBa
l0WpCYYSHSNogi7C0U+Kk8LJ0pygv0DihUD0Scfa8JujU0ykgjfk5c8gPogoZmkz
M030HdCu0KeDK2R8my0i1pZYReeSPlCtVZ3kJSI6J/f4Oa5QwOKLYHbDw2fc5SHk
MgU+2WwndIvO4NvYMLSqP9Yc1zUrcEbMtTxQIfBN2Qz2PzE94A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org