Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e312e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e312e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          cRYvLtKtAd4+awOIo7I5zb7m5gVwJonKIPA3oOc+EWw=
Subject key identifier:   88:C5:92:DC:71:A0:56:91:B0:E4:81:53:BF:7A:60:E1:C3:2F:8A:DA
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       6B7E04386B4B86EC86E998727110F08CB12B98F7
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e312e302f32342d3234203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:52 +0000
ROA not before:           Wed 03 Apr 2024 18:25:52 +0000
ROA not after:            Wed 02 Apr 2025 18:30:52 +0000
asID:                     262713
IP address blocks:        186.208.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7e:04:38:6b:4b:86:ec:86:e9:98:72:71:10:f0:8c:b1:2b:98:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:52 2024 GMT
            Not After : Apr  2 18:30:52 2025 GMT
        Subject: CN=3082010A0282010100AE8EFFE5E5F2CED843C2F821A081959C19D5D4DA4D63767C8FDB7303A02C005CE2F1A5F7061CC09306350A62F357A7095D02251F1489F32BBDBF88CDE788425619FE2DC72F8E84DBBAABBD05D6E467C13A4053EAA1B314DDD7C508FE3D1A4041D5183DB21A61A2959CF051452D75EA815D0A0E967B57E21307F30BF2E5DA8E48F7A2BA2A017805B32F099E0131182B27DDD78EAF70EDF44E881F6C42B7DF7610D77EA2AA86C99519DDDF8A135E8290DA6F2A3F510A50B46976C993A7F58BCEC1344D81322C1623F1D978D9B670F358AFAF7F02CA695750372635E242CA35183576A235BC931B27580F7E2F6249890421B5C7FDC75EDE5DDE7857D2673FF2710B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:ff:e5:e5:f2:ce:d8:43:c2:f8:21:a0:81:
                    95:9c:19:d5:d4:da:4d:63:76:7c:8f:db:73:03:a0:
                    2c:00:5c:e2:f1:a5:f7:06:1c:c0:93:06:35:0a:62:
                    f3:57:a7:09:5d:02:25:1f:14:89:f3:2b:bd:bf:88:
                    cd:e7:88:42:56:19:fe:2d:c7:2f:8e:84:db:ba:ab:
                    bd:05:d6:e4:67:c1:3a:40:53:ea:a1:b3:14:dd:d7:
                    c5:08:fe:3d:1a:40:41:d5:18:3d:b2:1a:61:a2:95:
                    9c:f0:51:45:2d:75:ea:81:5d:0a:0e:96:7b:57:e2:
                    13:07:f3:0b:f2:e5:da:8e:48:f7:a2:ba:2a:01:78:
                    05:b3:2f:09:9e:01:31:18:2b:27:dd:d7:8e:af:70:
                    ed:f4:4e:88:1f:6c:42:b7:df:76:10:d7:7e:a2:aa:
                    86:c9:95:19:dd:df:8a:13:5e:82:90:da:6f:2a:3f:
                    51:0a:50:b4:69:76:c9:93:a7:f5:8b:ce:c1:34:4d:
                    81:32:2c:16:23:f1:d9:78:d9:b6:70:f3:58:af:af:
                    7f:02:ca:69:57:50:37:26:35:e2:42:ca:35:18:35:
                    76:a2:35:bc:93:1b:27:58:0f:7e:2f:62:49:89:04:
                    21:b5:c7:fd:c7:5e:de:5d:de:78:57:d2:67:3f:f2:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C5:92:DC:71:A0:56:91:B0:E4:81:53:BF:7A:60:E1:C3:2F:8A:DA
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e312e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:5e:5c:9f:33:e8:19:87:fd:35:44:c1:a1:69:1f:95:d3:ab:
         de:17:b6:02:3e:ec:a2:ed:5d:7e:73:f3:bb:32:48:89:4f:fa:
         e8:05:98:4d:df:bf:4b:7c:e2:02:d8:f0:d3:73:8a:b8:e1:63:
         43:4c:52:fa:16:7c:df:b1:df:46:63:3e:49:a1:50:c7:e3:67:
         24:e4:1d:b5:f1:3e:f2:16:b3:21:64:2c:02:9c:a8:4c:d4:4b:
         da:04:cc:a8:bb:96:c9:a6:58:23:bd:49:67:2e:3e:72:a1:7e:
         84:a1:64:f4:24:16:45:bf:83:b5:9b:b6:5c:77:65:f6:d8:c0:
         8d:05:c9:93:dc:7f:e0:2f:05:d5:e9:d4:38:3a:e3:f8:1f:7c:
         56:04:91:7d:ad:19:4c:3b:77:67:1d:a8:53:2a:1f:72:b8:36:
         83:42:a6:f1:92:28:d2:50:2f:23:d0:cf:10:ad:71:c9:15:0c:
         f1:14:e5:58:e0:6e:36:02:1b:71:a6:b8:71:9a:04:78:53:c3:
         3e:6b:5d:c3:06:69:4a:43:3d:d7:5c:86:ea:07:39:97:d2:54:
         80:e9:5e:3d:88:a8:dc:01:81:1e:63:c7:54:0f:df:c0:ff:fd:
         22:c9:bb:bf:fd:d9:0f:b9:53:a6:0c:98:32:8c:36:08:5f:59:
         11:4d:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 18:20:04 2024 by rpki-client on console-fra.rpki-client.org