Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31302e302f32332d3233203d3e20323632373133.roa
File:                     3138362e3230382e31302e302f32332d3233203d3e20323632373133.roa (raw, json)
Hash identifier:          LkLU1liaO5P5jK8kseTOBgSbRNc4Ye8uLDXmTs1WUrI=
Subject key identifier:   45:00:1E:3D:C9:C1:4B:EA:C4:5C:25:2B:7A:22:C8:EE:1B:C1:23:43
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       6D01A2950CC130E61996F9F874385776EA36DE2D
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31302e302f32332d3233203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:47 +0000
ROA not before:           Wed 03 Apr 2024 18:25:47 +0000
ROA not after:            Wed 02 Apr 2025 18:30:47 +0000
asID:                     262713
IP address blocks:        186.208.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:01:a2:95:0c:c1:30:e6:19:96:f9:f8:74:38:57:76:ea:36:de:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:47 2024 GMT
            Not After : Apr  2 18:30:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:6c:f9:27:a6:f4:dd:bd:47:2e:99:de:de:
                    5c:52:20:cf:1a:4e:d3:7b:06:e5:dc:75:dc:73:84:
                    01:47:43:67:a1:14:f5:1a:44:dd:4d:4e:7a:fb:9e:
                    74:ec:1f:4e:87:58:73:65:03:18:09:fd:62:9b:23:
                    a3:5a:c0:cf:e2:a5:83:88:6f:d7:2b:f3:eb:9e:1a:
                    db:6c:23:c9:ea:3a:51:28:e0:75:8e:97:fd:d6:1d:
                    03:9b:36:45:9b:4a:f0:ed:ad:c7:08:9c:65:c2:15:
                    16:b0:4a:5e:9d:bd:2e:42:e4:39:f2:34:d5:ca:3a:
                    d3:dd:5c:e8:db:f0:f3:6c:50:50:94:fa:55:37:07:
                    b6:ea:1e:d9:3e:e9:27:bf:5e:9c:5e:73:41:8e:87:
                    e1:ad:12:8d:13:ee:20:48:0b:67:da:77:e8:bb:a6:
                    f4:cd:bc:df:33:81:15:b1:cd:75:0c:01:b5:9d:f1:
                    34:47:22:cd:97:99:f4:6c:5c:0e:a0:18:50:35:15:
                    da:ce:f5:31:c6:76:7f:88:a9:ec:2c:75:59:d7:58:
                    ed:1b:19:9a:c6:9c:48:b7:a6:0f:c8:fa:20:f8:70:
                    7f:83:d6:50:c2:b4:f2:0a:b5:49:1f:7c:27:6b:1b:
                    18:99:ae:fa:1e:4d:61:08:48:5a:18:c8:19:f3:cb:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:00:1E:3D:C9:C1:4B:EA:C4:5C:25:2B:7A:22:C8:EE:1B:C1:23:43
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31302e302f32332d3233203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:f9:e5:64:f0:86:48:c2:52:7a:e3:fd:55:cd:d5:65:a6:c2:
         56:32:8f:34:b4:38:bf:31:47:6f:87:2e:90:74:be:f4:ba:2a:
         b5:6d:dd:a0:63:16:26:1a:6a:96:75:c5:23:ac:b5:e8:e9:7f:
         74:8e:2d:da:07:fe:ac:f3:af:30:3a:7c:dc:98:26:d1:7f:6a:
         9a:e5:1a:bc:58:1d:b7:37:9d:53:2d:cf:6b:d6:8b:f6:f6:78:
         40:38:f4:96:8c:90:dc:da:5b:99:4e:60:f1:e6:1c:14:6c:6e:
         cd:4e:68:7f:77:38:a2:e8:ae:ee:2b:9c:a2:f9:db:ca:90:40:
         47:1b:5a:8d:09:6f:63:5d:c7:e0:01:6a:d2:e9:ab:2c:f6:16:
         81:5b:23:71:2a:1d:76:eb:55:31:b1:30:fb:44:79:c1:e8:0f:
         21:25:67:ad:02:ee:c3:50:bb:bb:3f:64:80:c1:84:41:fe:a6:
         ea:a0:00:bb:1e:9f:17:77:48:68:d8:68:9e:17:2a:69:2d:13:
         4b:f1:5a:6c:36:a8:d0:cd:32:95:3c:43:cf:eb:89:a9:4f:52:
         30:0c:b1:3c:fe:1e:38:2d:32:f4:a0:97:9e:cc:b3:54:f8:00:
         f4:21:18:f3:a9:10:16:3b:82:23:ca:c5:37:f8:98:a6:87:36:
         51:b6:08:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:33 2024 by rpki-client on console-ams.rpki-client.org