Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e302e302f32322d3232203d3e20323632373133.roa
File:                     3138362e3230382e302e302f32322d3232203d3e20323632373133.roa (raw, json)
Hash identifier:          YQFMoLqnwwphlY6plQXH1YAWznDiKdtQJwGtJJfS0O4=
Subject key identifier:   36:39:F3:44:9C:DD:58:98:22:45:27:58:93:46:27:49:C8:3C:7B:08
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       31609FDA714AE14648C20EEF7B68C569BD01502E
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e302e302f32322d3232203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:52 +0000
ROA not before:           Wed 03 Apr 2024 18:25:52 +0000
ROA not after:            Wed 02 Apr 2025 18:30:52 +0000
asID:                     262713
IP address blocks:        186.208.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:60:9f:da:71:4a:e1:46:48:c2:0e:ef:7b:68:c5:69:bd:01:50:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:52 2024 GMT
            Not After : Apr  2 18:30:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:14:3a:78:ba:83:af:a5:07:6d:68:ce:8a:79:
                    b6:53:0d:93:a7:02:cb:07:67:39:73:f4:74:64:9f:
                    a6:b3:c4:21:56:dc:ec:6a:fc:fa:37:14:a2:61:ed:
                    a7:23:2b:04:9d:73:34:aa:35:07:d4:f3:ce:9d:96:
                    bc:4e:78:48:d4:4e:16:9d:ec:11:41:f5:19:ac:f0:
                    25:25:31:93:97:87:da:26:d6:71:e0:38:24:6e:7e:
                    b4:fd:72:c4:61:cd:44:95:69:20:ee:5b:ca:37:a9:
                    90:7f:b1:d8:ea:55:f2:f4:50:d2:56:72:ab:fe:65:
                    52:8f:35:4a:fb:05:e1:4c:b7:d0:4f:c2:94:58:a5:
                    82:8a:b9:91:8e:63:4b:a5:ca:e0:94:e7:fd:95:69:
                    78:1c:99:33:1e:5e:f7:16:11:6c:be:03:46:b7:b1:
                    03:6d:99:ab:e4:4b:00:5b:8d:2a:a5:73:c7:29:96:
                    0d:9e:94:a8:c3:d7:cd:99:70:61:74:ac:47:1c:75:
                    7a:81:ea:d5:17:a8:7a:30:7f:b4:a3:3a:f6:c2:f9:
                    b5:87:59:ab:27:eb:99:46:3e:36:b0:15:9f:29:e2:
                    b8:b7:97:71:d8:c0:ac:0a:09:53:13:b0:63:ac:27:
                    52:dc:35:44:6d:3a:ca:db:9e:5a:c4:f6:35:86:86:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:39:F3:44:9C:DD:58:98:22:45:27:58:93:46:27:49:C8:3C:7B:08
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e302e302f32322d3232203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:a6:ee:b4:6a:89:d8:c2:e6:23:f4:c9:6b:74:e6:a4:46:80:
         b8:2e:98:e0:27:34:9e:bd:0a:68:0a:21:d7:df:2f:bd:30:b9:
         88:4b:2f:4a:49:80:95:b1:a1:87:9b:67:71:dd:91:c6:6d:66:
         1a:76:c6:eb:d2:83:89:b7:6e:01:0c:36:7a:a2:64:b6:fd:98:
         c8:78:e3:a5:5e:fa:4d:50:87:fd:7f:4b:a0:ea:96:a8:71:7a:
         27:7c:9e:76:10:f3:e6:58:a0:e5:b7:2f:ce:a0:20:0c:14:8b:
         1d:9a:07:10:9b:72:c5:53:46:70:fb:a2:60:cf:de:c0:ed:8f:
         a2:e7:e9:a2:37:fa:c6:06:65:69:20:d3:b5:67:3f:d6:a4:25:
         24:89:b6:7a:b5:62:41:e4:fa:49:cb:93:72:e2:16:82:93:1b:
         34:1c:de:d2:9c:80:37:99:c0:38:bd:17:9a:d7:d5:6c:a6:c2:
         98:67:79:79:46:4a:b3:7b:01:75:34:c6:4c:72:e0:e3:b5:d4:
         f0:e2:57:a6:c7:59:20:50:d6:a7:ae:b3:d6:a6:72:5a:a2:25:
         8b:1f:0f:8e:16:a9:c3:61:dd:3b:34:66:0b:fe:6a:40:d8:3e:
         ce:0a:97:0a:ee:a9:bc:85:ff:15:9a:e0:e4:2e:d6:5f:89:2f:
         93:22:ca:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:33 2024 by rpki-client on console-ams.rpki-client.org