Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e352e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e352e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          BDImb9y6gyjIKgZdnXjQvkDAXB8DGScJtTfNozoeCu0=
Subject key identifier:   60:36:20:A9:7B:31:06:EE:EC:86:B0:EC:51:80:E7:E9:DA:AB:CC:07
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       2665A8E87D8F3BE0A28B36F07636ECD53DC0402C
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e352e302f32342d3234203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:47 +0000
ROA not before:           Wed 03 Apr 2024 18:25:47 +0000
ROA not after:            Wed 02 Apr 2025 18:30:47 +0000
asID:                     262713
IP address blocks:        186.208.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:65:a8:e8:7d:8f:3b:e0:a2:8b:36:f0:76:36:ec:d5:3d:c0:40:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:47 2024 GMT
            Not After : Apr  2 18:30:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:f7:c7:5a:4a:32:e0:4f:09:da:f1:09:1a:
                    7b:d8:2e:b1:6e:32:31:90:ef:cf:fe:e4:e9:6a:65:
                    4e:f1:74:6f:7a:b2:8e:83:27:44:b3:99:69:af:90:
                    e4:f5:9d:72:55:52:4c:08:57:e4:0a:bd:4a:f4:db:
                    70:63:3b:3b:cc:4c:91:b8:47:05:bf:fb:39:60:7f:
                    12:2f:09:6d:39:2e:b8:ce:03:1b:8d:95:08:58:18:
                    e6:bd:92:25:8d:c3:d2:04:da:9c:9c:0e:51:2d:2a:
                    b4:04:79:4b:0e:71:60:04:4a:c0:84:8d:5a:4e:f8:
                    c2:a2:41:e5:74:7e:ff:24:25:b1:0a:75:ac:c8:f3:
                    48:56:e1:0a:8a:0c:e4:17:f2:fd:74:2b:49:e7:1c:
                    8e:ea:7a:46:3b:b5:9c:31:99:72:7d:1f:d4:c8:d8:
                    b8:25:62:f8:8e:5f:b7:06:7e:b9:21:b0:93:8a:e2:
                    f1:da:81:ee:4c:04:8a:18:83:10:a0:62:ee:af:50:
                    b8:60:8d:90:00:9e:07:8d:c6:63:93:9d:9f:a0:e2:
                    c1:74:13:5f:ae:e6:0f:47:1f:e6:dd:0a:49:4f:f9:
                    fd:dc:d7:56:d2:64:e5:57:ea:cb:40:a5:4c:8b:a0:
                    17:d4:22:1f:c6:26:c2:a1:e5:b6:9b:96:9d:9a:e7:
                    35:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:36:20:A9:7B:31:06:EE:EC:86:B0:EC:51:80:E7:E9:DA:AB:CC:07
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e352e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:17:fe:05:e7:e5:9f:35:9e:b9:53:7c:35:06:ee:23:ea:d7:
         63:88:82:b7:9d:37:db:02:6c:55:2d:a2:7f:ef:4f:67:56:f4:
         4a:44:90:7c:97:8f:27:e8:09:66:bc:21:f5:7c:f0:9c:97:20:
         59:8d:60:53:81:b7:bb:aa:c8:97:61:6f:35:c1:55:40:81:8f:
         50:b1:17:3e:e4:f9:14:42:18:45:87:30:85:aa:b4:8f:f1:77:
         cc:90:bc:6b:f2:36:3b:d1:25:24:65:3a:42:4c:01:19:b5:51:
         ab:93:39:6e:62:20:a5:af:a0:58:2c:cc:27:15:e4:06:cf:46:
         03:9e:0a:d7:b9:80:56:db:b6:f8:a1:69:2f:c4:e1:53:19:31:
         57:b3:e7:5f:99:0b:2b:e3:b3:8b:12:a7:fa:9b:1a:dc:3b:3f:
         11:32:09:b6:c6:52:da:37:4e:bb:4e:61:a4:61:54:3c:0d:48:
         ad:f2:2a:c7:ba:29:7c:32:5a:34:80:d3:29:07:2c:55:1c:80:
         fa:e7:41:24:cf:34:21:b3:e6:de:d8:24:72:f0:4c:02:11:e6:
         01:a4:8f:0e:51:ba:2d:e4:37:3f:f3:ed:12:04:17:46:f1:a9:
         1f:6c:03:9b:a7:56:9f:3e:6d:02:55:27:db:de:74:c0:a2:da:
         2b:2b:b6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 19:31:33 2024 by rpki-client on console-ams.rpki-client.org