Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31332e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e31332e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          +Lp7PqiHmANiEoNr8mQfIECpcoiGjNtUQKuqt0pQNTs=
Subject key identifier:   33:41:03:6B:1D:BE:EE:81:F4:5D:75:43:68:AB:01:BD:0A:40:78:C1
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       360E44F408B62DBE0313A10C210FC6D9479DC6A4
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31332e302f32342d3234203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:44 +0000
ROA not before:           Wed 03 Apr 2024 18:25:44 +0000
ROA not after:            Wed 02 Apr 2025 18:30:44 +0000
asID:                     262713
IP address blocks:        186.208.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0e:44:f4:08:b6:2d:be:03:13:a1:0c:21:0f:c6:d9:47:9d:c6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:44 2024 GMT
            Not After : Apr  2 18:30:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:46:4b:2b:97:06:d6:e7:ea:ef:b9:d4:2b:
                    9f:09:0d:b2:2d:fc:12:b3:b8:33:27:77:af:27:84:
                    29:b2:cd:0b:af:04:24:f3:35:d6:c7:01:71:39:3f:
                    fd:9f:6d:2d:a8:b0:61:14:c5:86:ca:4f:9a:83:0b:
                    27:80:0e:5f:82:97:8b:57:1d:8f:0a:d7:b9:99:cd:
                    fc:af:77:1a:06:bd:60:90:38:09:66:0a:16:64:af:
                    39:6e:56:77:01:09:f5:58:1f:8b:4b:09:0f:9d:47:
                    c3:9f:4e:c6:74:3e:08:6c:2e:8d:51:81:d0:39:76:
                    84:7d:de:28:7c:c2:f6:d9:f9:15:68:ab:41:39:c0:
                    f9:c9:5c:f6:67:63:e4:20:bc:13:b8:77:c6:5e:7a:
                    41:41:70:c8:05:eb:94:45:ae:b3:a8:98:e0:bb:77:
                    cd:56:50:56:28:be:0c:bb:94:ee:f2:e9:43:7d:e5:
                    42:f2:c3:e8:12:12:26:bc:24:3c:b2:8b:80:41:92:
                    7d:b2:6e:b0:d2:8b:d3:36:91:11:fd:52:5a:e3:23:
                    c0:b8:01:b7:4f:5d:08:1c:1e:71:c2:d9:fd:86:dc:
                    2b:00:14:71:66:0d:54:cc:eb:23:6b:0a:e8:0e:2d:
                    ac:3f:29:fc:2e:08:a6:71:ec:41:62:a9:bf:1a:2e:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:41:03:6B:1D:BE:EE:81:F4:5D:75:43:68:AB:01:BD:0A:40:78:C1
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e31332e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:f7:3c:34:91:d2:22:19:f8:41:36:f7:3b:ca:ab:ca:f9:04:
         0c:6d:72:01:d7:3a:52:d0:ba:38:22:65:c3:45:12:11:45:15:
         ca:e4:d3:96:0f:2a:01:f5:9e:3f:58:1f:09:b8:d4:a5:aa:fe:
         75:6f:e3:04:d5:9f:29:da:60:47:d4:45:48:73:6d:bb:eb:c1:
         d2:17:15:c1:c4:4e:88:d1:37:7d:ef:de:61:86:a5:b7:fb:9b:
         63:21:a9:be:1a:10:4c:35:2a:bf:5e:d6:91:40:9b:f1:aa:c1:
         a8:62:4f:b9:b4:4f:f4:f9:95:55:eb:cd:18:fa:41:23:5c:cc:
         9c:2f:b3:65:16:0e:ac:6a:3e:8d:3d:a0:15:82:76:df:17:6f:
         85:7d:a9:38:f4:c0:e1:e8:58:ee:45:bf:72:b2:53:24:a2:80:
         df:fb:92:ee:d0:d8:66:c4:16:4e:51:35:b1:bd:df:54:6a:d6:
         6f:45:13:0e:6a:48:10:de:ec:ce:92:8a:ae:6e:e1:4f:6c:da:
         08:35:3b:f3:89:e4:ab:bc:91:36:42:a9:b3:49:bf:47:71:23:
         c2:f0:c9:7e:56:43:03:a3:2b:57:79:ed:ba:35:f7:af:ef:e9:
         8d:4c:34:ee:b5:f4:4c:1b:fb:fd:6f:56:52:cb:22:b7:42:83:
         32:34:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 18:20:04 2024 by rpki-client on console-fra.rpki-client.org