Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e322e302f32332d3233203d3e20323632373133.roa
File:                     3138362e3230382e322e302f32332d3233203d3e20323632373133.roa (raw, json)
Hash identifier:          0G97J53WriwXv5fUVKMrrjM2YPhiMYe45r2YegtNdvE=
Subject key identifier:   A8:74:C5:B1:FB:BF:87:D6:1F:A7:81:BC:6A:CF:C8:65:EA:9C:D4:29
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       46C55D0EF4BB6BC77861EA878A9AA5A493B35223
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e322e302f32332d3233203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:52 +0000
ROA not before:           Wed 03 Apr 2024 18:25:52 +0000
ROA not after:            Wed 02 Apr 2025 18:30:52 +0000
asID:                     262713
IP address blocks:        186.208.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c5:5d:0e:f4:bb:6b:c7:78:61:ea:87:8a:9a:a5:a4:93:b3:52:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:52 2024 GMT
            Not After : Apr  2 18:30:52 2025 GMT
        Subject: CN=3082010A0282010100B5485E4CB710671FEE147C82CCE58CF25739952296FD7DF73577066CD73715170DD65E777EC64FBFF418DE47E5E51869C3B58DCF2CBA751FFBA048760376AF8ADCF79E32FA088B080DAC5A1148420A2C563CC1E342A06E71E0DEA63DF3912036AD203A64AE80DEB9013D20FD47BCDE4E5C84F19F6A9413883A1EE563860D68683F59635F1710B56C75524C47B16D6844573157F091ADDD911E7201AB2DACB0A740EE4FC5917DB3FE2F67687FABED07741F292483B894D72425307E538B0DEAFCA5A4105D9B5BBAE841FBC17670017024782F4A97DDAB0C6AB14458B4C8466CFD5104FB2E780412C322B6147262E3B11F5244A209D3304ED915FF5FCF826972170203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:5e:4c:b7:10:67:1f:ee:14:7c:82:cc:e5:
                    8c:f2:57:39:95:22:96:fd:7d:f7:35:77:06:6c:d7:
                    37:15:17:0d:d6:5e:77:7e:c6:4f:bf:f4:18:de:47:
                    e5:e5:18:69:c3:b5:8d:cf:2c:ba:75:1f:fb:a0:48:
                    76:03:76:af:8a:dc:f7:9e:32:fa:08:8b:08:0d:ac:
                    5a:11:48:42:0a:2c:56:3c:c1:e3:42:a0:6e:71:e0:
                    de:a6:3d:f3:91:20:36:ad:20:3a:64:ae:80:de:b9:
                    01:3d:20:fd:47:bc:de:4e:5c:84:f1:9f:6a:94:13:
                    88:3a:1e:e5:63:86:0d:68:68:3f:59:63:5f:17:10:
                    b5:6c:75:52:4c:47:b1:6d:68:44:57:31:57:f0:91:
                    ad:dd:91:1e:72:01:ab:2d:ac:b0:a7:40:ee:4f:c5:
                    91:7d:b3:fe:2f:67:68:7f:ab:ed:07:74:1f:29:24:
                    83:b8:94:d7:24:25:30:7e:53:8b:0d:ea:fc:a5:a4:
                    10:5d:9b:5b:ba:e8:41:fb:c1:76:70:01:70:24:78:
                    2f:4a:97:dd:ab:0c:6a:b1:44:58:b4:c8:46:6c:fd:
                    51:04:fb:2e:78:04:12:c3:22:b6:14:72:62:e3:b1:
                    1f:52:44:a2:09:d3:30:4e:d9:15:ff:5f:cf:82:69:
                    72:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:74:C5:B1:FB:BF:87:D6:1F:A7:81:BC:6A:CF:C8:65:EA:9C:D4:29
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e322e302f32332d3233203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:7d:31:7a:df:b8:26:b6:1c:df:a4:a4:a1:95:3b:af:22:a5:
         af:5c:8d:26:d8:1b:79:66:66:e5:2a:89:d3:0a:58:be:de:15:
         dc:dc:5f:69:82:1c:c4:6f:10:37:a0:09:68:29:f6:f0:35:f4:
         b0:ee:73:1b:0b:46:30:06:49:89:e8:ae:ca:79:ff:c8:53:a0:
         0d:2e:74:13:f4:ca:63:92:68:5c:b3:ee:c4:0e:9c:26:44:49:
         d8:6c:5b:77:11:5a:47:40:09:a0:38:b5:e3:c2:99:69:3c:54:
         11:37:4b:83:ce:a3:3a:f2:e3:99:96:86:ad:a7:58:da:ba:14:
         56:36:9b:96:5a:e9:ef:53:51:82:42:3f:d6:55:8e:30:00:fc:
         b4:90:85:bc:c0:c8:37:9f:fa:f6:8c:b9:52:05:7d:a4:2c:64:
         95:0f:56:ce:70:e5:6a:5b:d8:d3:17:3b:28:a7:49:58:3a:7e:
         65:85:b0:bf:9c:42:1d:15:0d:9e:43:ef:8a:ce:b5:80:19:fc:
         63:2f:05:fa:51:cb:91:d0:c7:ac:9a:f3:72:a9:37:49:a2:13:
         91:ab:3b:2f:ae:c4:49:3b:35:4a:c7:cc:c8:dc:d2:39:56:47:
         a2:66:88:3b:5e:7b:bd:06:f8:d1:43:d8:9a:f8:b1:1d:7f:8f:
         b5:b3:23:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:33 2024 by rpki-client on console-ams.rpki-client.org