Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e362e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e362e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          t9ioJ16dW248jloYC5do9cdeI68oFBI6RrJOHwAn604=
Subject key identifier:   1B:9A:33:B7:40:3E:A4:50:29:8F:7B:71:2E:62:DE:BC:AE:3C:2C:3A
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       0E0CB55061269F69A4DF831D489A283C118865FC
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e362e302f32342d3234203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:07 +0000
ROA not before:           Tue 12 Sep 2023 04:55:07 +0000
ROA not after:            Tue 10 Sep 2024 05:00:07 +0000
asID:                     262713
IP address blocks:        186.208.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0c:b5:50:61:26:9f:69:a4:df:83:1d:48:9a:28:3c:11:88:65:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:07 2023 GMT
            Not After : Sep 10 05:00:07 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:f4:99:35:e2:8f:1c:c2:6e:15:ab:2d:73:
                    f5:1c:16:1a:ac:ae:ff:85:57:4d:4d:d7:bc:6b:13:
                    61:f6:06:ef:f8:76:7c:b7:fd:e0:a2:a4:fc:81:50:
                    a9:a8:f4:a9:a4:b1:9b:6e:1e:ed:48:c4:fc:9e:f8:
                    19:01:e4:c9:9e:17:fd:d0:35:6d:1a:67:7e:ed:fc:
                    73:7b:c0:24:11:c0:7e:55:a0:b8:7b:6f:0e:31:54:
                    cc:e6:82:a1:84:fd:0e:85:52:90:4f:58:69:f1:d9:
                    1c:41:4c:cb:8e:d1:ca:57:d1:72:b9:f1:9a:08:61:
                    c9:fb:ff:ae:67:4f:61:7e:7f:d1:cb:34:39:7d:c5:
                    db:e8:c4:54:22:ea:29:25:b8:9d:d3:ce:b5:32:7c:
                    52:39:cc:19:2c:3f:61:ac:7b:46:65:cb:c9:f5:41:
                    25:71:2f:cf:59:27:32:86:74:ca:39:97:10:a4:e1:
                    03:a0:22:f2:d6:19:a5:90:ba:d9:77:d3:9b:8d:12:
                    e7:33:62:5a:c4:3d:15:78:53:8c:e3:36:52:5a:40:
                    e5:ec:2e:0b:6a:46:b6:a5:3f:9a:a5:99:70:4f:f4:
                    3f:58:c3:62:2f:e4:cd:1f:f9:40:28:6a:a6:50:f9:
                    02:d8:74:57:69:1e:5c:41:c0:ac:91:8e:50:bb:76:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9A:33:B7:40:3E:A4:50:29:8F:7B:71:2E:62:DE:BC:AE:3C:2C:3A
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e362e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:48:27:74:6b:31:d6:ca:dc:b7:ef:79:33:56:a7:82:08:2c:
         4b:f4:a4:46:64:7e:18:69:b0:65:6d:41:0b:45:cd:6b:ac:23:
         05:d7:8d:67:ce:f2:fe:4b:6c:07:89:2c:ff:0b:0b:0a:da:45:
         2e:1f:35:e4:5c:0b:61:b8:3f:5e:5d:6b:ae:0c:55:b4:1f:40:
         5f:27:57:b8:a2:9e:10:1b:56:f6:09:4c:12:65:15:00:72:7c:
         42:7a:ee:2f:eb:3c:27:4f:ce:80:6c:d6:cc:28:09:52:4f:20:
         d9:1d:49:2b:ab:71:a4:82:2e:ef:2d:f2:f7:7e:8c:63:b6:77:
         92:62:5c:18:79:fa:d3:e3:63:d8:8b:de:56:88:ca:3a:a4:94:
         f8:b3:6a:51:1e:b4:25:fb:a5:ea:15:9b:28:60:e5:2b:30:73:
         86:ac:7f:61:92:a2:bc:81:7e:ff:b0:05:b6:9f:d8:83:38:d7:
         b1:56:bd:d7:e3:06:34:57:a4:9d:b3:92:a5:ae:e0:f5:61:96:
         54:3f:16:f9:21:9f:81:f1:ed:ad:2d:57:1d:45:d1:8d:95:22:
         b7:f2:25:44:f9:59:a0:d5:88:c0:c6:7e:9f:6d:c7:e0:98:54:
         94:09:40:9c:85:4b:c5:d9:37:cb:22:d2:fe:4d:05:6a:ae:b6:
         90:ab:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org