Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e382e302f32312d3231203d3e20323632373133.roa
File:                     3138362e3230382e382e302f32312d3231203d3e20323632373133.roa (raw, json)
Hash identifier:          k02POGHoraSrN2PgYrLcrdVew+7eTsY6lGK/B8GrLaA=
Subject key identifier:   4C:7E:0A:A9:02:7D:9D:12:09:48:0F:24:87:16:34:FD:46:BD:1B:F1
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       7C48621C22EE93982C95D788F7912BE67BF79EC4
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e382e302f32312d3231203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:51 +0000
ROA not before:           Wed 03 Apr 2024 18:25:51 +0000
ROA not after:            Wed 02 Apr 2025 18:30:51 +0000
asID:                     262713
IP address blocks:        186.208.8.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:48:62:1c:22:ee:93:98:2c:95:d7:88:f7:91:2b:e6:7b:f7:9e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:51 2024 GMT
            Not After : Apr  2 18:30:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:fa:2a:78:06:6d:f2:52:c9:c6:f5:5c:9b:
                    01:40:a5:aa:57:a1:0b:22:65:a8:ce:55:7f:72:15:
                    91:df:af:0c:40:29:2e:dd:40:fb:ce:c1:37:c6:2c:
                    af:de:bf:ee:85:1f:c3:0f:fe:90:f7:e0:e6:50:2a:
                    4b:eb:94:e2:9e:66:9a:ce:1f:70:34:26:01:b4:e2:
                    23:d9:8f:bd:df:8e:4e:2e:a2:10:b3:50:b0:f0:d8:
                    d6:e9:18:a4:de:24:eb:85:99:ab:1c:5b:01:d6:24:
                    5e:b4:55:a1:6b:bf:9d:7d:12:97:16:d1:74:5a:bb:
                    fa:50:56:e3:62:ef:3a:4e:1b:1c:6b:8e:b1:ed:ac:
                    83:79:23:ab:e0:45:ea:92:72:92:89:4c:f6:ed:4c:
                    78:44:cc:77:b9:48:f6:2c:e4:c8:87:5e:b7:3a:75:
                    48:eb:b8:4a:8b:68:e7:bb:32:23:4c:33:42:e6:f4:
                    a7:8f:26:ff:ad:28:d8:1c:a9:4b:24:f1:2b:06:18:
                    db:9d:2c:b1:3b:51:6d:0c:d8:02:af:e3:bb:f0:ab:
                    ea:d4:84:7b:8e:2f:24:08:33:75:1d:22:15:13:d3:
                    c2:5a:94:dd:cf:a1:5c:8b:52:be:a3:8f:66:0f:5a:
                    4b:16:53:21:52:9a:e3:b5:0b:d1:f2:a4:f0:a4:09:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7E:0A:A9:02:7D:9D:12:09:48:0F:24:87:16:34:FD:46:BD:1B:F1
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e382e302f32312d3231203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:81:30:6e:84:13:90:ab:37:a8:c4:da:0e:33:5c:c1:e2:e5:
         61:f8:10:4d:21:3d:b5:66:4e:8c:1f:e8:72:9e:b4:39:c1:89:
         77:53:bc:89:d1:3c:06:69:2e:de:93:6f:51:1c:08:7b:f1:f6:
         a2:aa:a3:5f:19:c8:07:89:fd:ef:e6:61:6f:fe:e7:55:a5:e4:
         f4:44:54:97:b1:ad:3f:82:c5:4a:81:7a:7b:53:21:6d:70:95:
         f4:8e:35:d6:0e:4f:0f:c9:d8:74:39:a1:ab:98:26:78:c7:a0:
         10:4e:49:0f:b6:ec:0a:48:73:15:f3:19:44:44:98:b9:99:06:
         bd:2c:77:7c:99:4f:54:35:b7:f4:44:3e:6f:a9:50:a4:9a:9a:
         34:fb:fc:7d:d2:30:68:54:2a:83:cf:a8:7b:71:a1:05:73:b3:
         46:2c:06:62:96:39:9a:a3:86:de:5e:8d:9d:7d:f5:e6:ac:c9:
         9b:c6:a0:24:be:b3:d4:47:ef:9d:af:1a:ec:47:68:0c:58:8e:
         77:74:a5:8a:03:6b:7e:65:71:44:ba:67:b4:13:4b:95:1b:49:
         7d:1e:1e:cc:5c:bc:01:ea:ac:c0:08:73:e9:87:45:0b:8b:3a:
         93:a3:ea:db:4c:47:a5:b8:4d:e1:71:0b:56:0c:aa:2b:a4:95:
         4d:ed:e9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 18:20:04 2024 by rpki-client on console-fra.rpki-client.org