Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e372e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e372e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          ECc43MhVxSHjpq2YMd1H57N8ka+49ApQ1XSkLW17FWc=
Subject key identifier:   F7:B7:F7:37:D4:B8:4F:06:38:73:56:8D:A4:87:5E:24:21:A8:13:29
Certificate issuer:       /CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
Certificate serial:       284DDFFEB8817FB45E054C72C4C79CD41BB02175
Authority key identifier: F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e372e302f32342d3234203d3e20323632373133.roa
Signing time:             Tue 12 Sep 2023 05:00:04 +0000
ROA not before:           Tue 12 Sep 2023 04:55:04 +0000
ROA not after:            Tue 10 Sep 2024 05:00:04 +0000
asID:                     262713
IP address blocks:        186.208.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4d:df:fe:b8:81:7f:b4:5e:05:4c:72:c4:c7:9c:d4:1b:b0:21:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4C6B8C537AC063CE51075C6B816E3353E57475C
        Validity
            Not Before: Sep 12 04:55:04 2023 GMT
            Not After : Sep 10 05:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3a:23:07:f7:6f:ac:72:c0:d6:fa:47:9b:b4:
                    3c:4b:8a:4a:4d:a2:ca:a5:f8:cc:42:c6:4b:a0:b0:
                    43:5a:fd:49:16:6d:4e:1e:4f:ed:06:85:9d:9c:52:
                    39:86:09:bf:c6:35:b2:b9:8b:03:1e:09:0d:e5:53:
                    fc:8e:3d:4c:7c:c1:8e:a3:11:51:50:f8:1e:30:b8:
                    a0:d7:0f:b4:81:27:bd:39:8d:47:bb:c7:dc:d4:0e:
                    c4:e1:6b:cd:25:b2:97:22:78:e3:9b:60:50:e9:3c:
                    66:b3:e5:c0:49:19:79:a6:40:f0:18:50:30:c4:7e:
                    43:9e:89:3f:ae:1d:5b:c8:a6:1d:4e:82:34:a6:53:
                    d3:20:1f:46:14:cf:52:eb:e0:81:10:58:7e:22:7d:
                    42:a9:1b:df:ec:b5:22:c3:7a:0a:32:c9:bd:09:0d:
                    83:9a:08:0a:b3:3a:22:a9:e7:f7:c0:75:78:20:9b:
                    ba:4b:34:47:f9:d4:a0:e6:f4:4c:f7:f4:39:f1:ad:
                    eb:ce:83:72:9e:27:ab:ff:f2:7d:63:dd:b4:41:bd:
                    36:77:b7:ce:29:0d:52:10:19:3a:63:9a:7e:4d:34:
                    7e:71:d1:e3:08:90:ac:a2:99:92:4c:ff:fa:cd:8e:
                    b9:c3:4b:83:94:5c:10:5f:62:66:08:ae:e2:de:4c:
                    86:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B7:F7:37:D4:B8:4F:06:38:73:56:8D:A4:87:5E:24:21:A8:13:29
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B8:C5:37:AC:06:3C:E5:10:75:C6:B8:16:E3:35:3E:57:47:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4C6B8C537AC063CE51075C6B816E3353E57475C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/0/3138362e3230382e372e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:5f:29:9a:60:2c:69:b3:99:b1:72:4a:5b:ef:11:94:64:8a:
         f3:cb:5c:d8:91:f4:bf:42:79:58:61:34:91:d4:13:20:8e:fb:
         e8:b5:ee:76:28:51:b8:ae:09:78:57:73:e7:de:71:60:cb:96:
         64:45:af:74:ef:a2:df:cb:04:f4:ba:71:dc:c5:8e:cc:81:04:
         f0:ba:aa:ef:0d:8e:19:ec:b1:94:06:a3:d4:90:a9:b5:97:cb:
         50:d3:06:e0:fb:43:49:86:98:0d:24:d8:61:fc:27:91:e0:f1:
         03:ca:eb:5f:d5:22:38:66:63:a0:1f:06:51:4f:06:7d:66:51:
         d1:08:6f:8c:13:e1:6f:d1:44:0d:00:2d:6f:28:77:68:0f:ff:
         55:4a:99:80:d4:60:88:ce:44:a4:3b:a0:d9:48:37:42:74:d5:
         0f:1b:a1:33:2c:81:fb:3a:19:c7:48:f7:ae:43:fb:1e:5a:f0:
         68:7b:b8:3a:f2:32:b8:c7:87:68:99:ce:f2:4a:1d:26:4f:71:
         b3:70:fa:8e:28:57:91:0f:c4:96:08:ed:b8:2b:da:a1:78:83:
         02:28:de:8e:7d:f9:6d:f6:27:1c:65:a8:b6:f5:02:b6:bb:ed:
         a6:10:c0:b8:c9:0d:ef:a4:f4:5d:32:21:f9:92:cd:c8:38:8e:
         8c:ed:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org