Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e362e302f32342d3234203d3e20323632373133.roa
File:                     3138362e3230382e362e302f32342d3234203d3e20323632373133.roa (raw, json)
Hash identifier:          6V+2i6WVRYEDCOmBBvs4C+EehQ0RulaVPXq8DWhAG/w=
Subject key identifier:   C2:13:A0:B4:7B:8B:6A:9E:0E:30:A7:B4:95:BD:35:DC:D3:B2:33:B9
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       579DD7FEFF6750B665F2AF6786C67D79D969D478
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e362e302f32342d3234203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:49 +0000
ROA not before:           Wed 03 Apr 2024 18:25:49 +0000
ROA not after:            Wed 02 Apr 2025 18:30:49 +0000
asID:                     262713
IP address blocks:        186.208.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9d:d7:fe:ff:67:50:b6:65:f2:af:67:86:c6:7d:79:d9:69:d4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:49 2024 GMT
            Not After : Apr  2 18:30:49 2025 GMT
        Subject: CN=3082010A0282010100B2B74E93550D7202CCAA082CB0A3832491C0291EC18D14DBFFE0B348E3EFB53A90B8CDC00A2B63986DD6A94AC416F6B954F8D4830BD27A33094D205C3333872137CAB479F679C63174E7F4C424E1E6C4BAE1F5D0F8E08A532EBC48AC9226A1BF03853F48ED6ABBA230A0B9DA1AFA9AC22C0E774A24001AFB7CBAA52EE5B70762756038B07A7EA66751D7561A6765DA43C7D533E758B960FFFB4C2505B895BBFAC5C317F28F267944E54061C49D66990C75C7AE4D6009E01B1014897A051704232F682C96A49D75D4B54BE881F2D825EC6438147CA68E9873A635F17D706B37F24BB44AE333D5054B3C2D17BFDA2B45F9E917DCB44781CEB1B766848200A2CA030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:4e:93:55:0d:72:02:cc:aa:08:2c:b0:a3:
                    83:24:91:c0:29:1e:c1:8d:14:db:ff:e0:b3:48:e3:
                    ef:b5:3a:90:b8:cd:c0:0a:2b:63:98:6d:d6:a9:4a:
                    c4:16:f6:b9:54:f8:d4:83:0b:d2:7a:33:09:4d:20:
                    5c:33:33:87:21:37:ca:b4:79:f6:79:c6:31:74:e7:
                    f4:c4:24:e1:e6:c4:ba:e1:f5:d0:f8:e0:8a:53:2e:
                    bc:48:ac:92:26:a1:bf:03:85:3f:48:ed:6a:bb:a2:
                    30:a0:b9:da:1a:fa:9a:c2:2c:0e:77:4a:24:00:1a:
                    fb:7c:ba:a5:2e:e5:b7:07:62:75:60:38:b0:7a:7e:
                    a6:67:51:d7:56:1a:67:65:da:43:c7:d5:33:e7:58:
                    b9:60:ff:fb:4c:25:05:b8:95:bb:fa:c5:c3:17:f2:
                    8f:26:79:44:e5:40:61:c4:9d:66:99:0c:75:c7:ae:
                    4d:60:09:e0:1b:10:14:89:7a:05:17:04:23:2f:68:
                    2c:96:a4:9d:75:d4:b5:4b:e8:81:f2:d8:25:ec:64:
                    38:14:7c:a6:8e:98:73:a6:35:f1:7d:70:6b:37:f2:
                    4b:b4:4a:e3:33:d5:05:4b:3c:2d:17:bf:da:2b:45:
                    f9:e9:17:dc:b4:47:81:ce:b1:b7:66:84:82:00:a2:
                    ca:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:13:A0:B4:7B:8B:6A:9E:0E:30:A7:B4:95:BD:35:DC:D3:B2:33:B9
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e362e302f32342d3234203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:7e:67:bc:9c:44:9a:74:6d:06:48:92:86:d6:bf:10:20:bd:
         98:f5:ab:13:2a:2e:b7:f0:a8:30:b0:e0:4a:b9:fe:9d:77:a3:
         16:08:00:28:49:b1:1b:d7:07:00:e4:d9:16:40:d7:29:a0:49:
         da:7a:58:b4:a7:3d:27:bf:15:41:ee:cd:fe:56:00:b9:41:60:
         00:03:6d:a8:bd:29:6f:31:6a:b7:5d:be:ae:a9:ea:22:2e:41:
         89:5f:f6:10:bc:de:3d:ac:e2:28:4f:18:4f:17:af:9e:d6:f5:
         16:93:8b:af:5e:bd:44:bd:98:95:ab:2e:c9:4c:09:6b:68:83:
         dd:30:f4:90:37:36:a6:86:d7:0b:6b:29:b0:1c:db:e4:34:f8:
         29:e4:5c:65:2d:14:5c:5c:ff:e2:eb:58:b8:40:1a:dd:4e:69:
         ef:8f:03:a6:64:e3:39:4a:76:82:99:38:d8:bf:cb:09:f3:61:
         c9:54:31:e6:98:ef:c5:2b:bf:ac:48:59:8d:fc:53:b0:dd:e9:
         54:96:72:49:8a:45:2e:d1:5e:e4:dc:d7:49:67:ee:56:c6:24:
         7c:7e:1f:33:fa:df:0e:79:54:86:5a:64:32:af:7a:b5:9a:91:
         0d:45:3b:f6:00:ff:45:6a:47:31:c1:9f:7d:6b:19:08:56:e5:
         ea:77:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 18:20:04 2024 by rpki-client on console-fra.rpki-client.org