Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e382e302f32332d3233203d3e20323632373133.roa
File:                     3138362e3230382e382e302f32332d3233203d3e20323632373133.roa (raw, json)
Hash identifier:          x2LBU7iIm43fT5ygLvr/L7te4pRDZdjD9bjiKsdfCns=
Subject key identifier:   3C:72:9D:FA:0F:F3:68:6A:4E:22:F2:3E:15:1A:E4:29:20:F6:A0:41
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       32EC984BFE9A486E930802249104542EB846B884
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e382e302f32332d3233203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     262713
IP address blocks:        186.208.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ec:98:4b:fe:9a:48:6e:93:08:02:24:91:04:54:2e:b8:46:b8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=3082010A0282010100EF750F732F63CC064FC48F6E333598FA0DBB170EF5E93B754248A4B0513D42E3D35A5FEEC776CAF848AE196AE7B50DAF261D6F274A6A03CFB560EAFE38299D66CDBA644488313CF4F3EEDA064A79A75DC4AE8DF51DF92788FBFF777AEE8E9A8E883B2F990B34392941991A3B511564889C21BBB2694714BF01E752EE2D2415A05A9AD3D43F2B7367582345246AA0E098437EDB9991330A0A906CDEF1F7713C9680B4B9757FC15E7A57C9A808D93CE1B99A235672A93394779ABD04498983A08D6A7CC75872F13486CAF6F9E0B834DD8F441550652A9DBEEBDBD790C773BE2625A7CB0C3AA399083EBCB227E09C0A050FE6CB92A7820D33BC4F4E97BFE65D14F10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:75:0f:73:2f:63:cc:06:4f:c4:8f:6e:33:35:
                    98:fa:0d:bb:17:0e:f5:e9:3b:75:42:48:a4:b0:51:
                    3d:42:e3:d3:5a:5f:ee:c7:76:ca:f8:48:ae:19:6a:
                    e7:b5:0d:af:26:1d:6f:27:4a:6a:03:cf:b5:60:ea:
                    fe:38:29:9d:66:cd:ba:64:44:88:31:3c:f4:f3:ee:
                    da:06:4a:79:a7:5d:c4:ae:8d:f5:1d:f9:27:88:fb:
                    ff:77:7a:ee:8e:9a:8e:88:3b:2f:99:0b:34:39:29:
                    41:99:1a:3b:51:15:64:88:9c:21:bb:b2:69:47:14:
                    bf:01:e7:52:ee:2d:24:15:a0:5a:9a:d3:d4:3f:2b:
                    73:67:58:23:45:24:6a:a0:e0:98:43:7e:db:99:91:
                    33:0a:0a:90:6c:de:f1:f7:71:3c:96:80:b4:b9:75:
                    7f:c1:5e:7a:57:c9:a8:08:d9:3c:e1:b9:9a:23:56:
                    72:a9:33:94:77:9a:bd:04:49:89:83:a0:8d:6a:7c:
                    c7:58:72:f1:34:86:ca:f6:f9:e0:b8:34:dd:8f:44:
                    15:50:65:2a:9d:be:eb:db:d7:90:c7:73:be:26:25:
                    a7:cb:0c:3a:a3:99:08:3e:bc:b2:27:e0:9c:0a:05:
                    0f:e6:cb:92:a7:82:0d:33:bc:4f:4e:97:bf:e6:5d:
                    14:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:72:9D:FA:0F:F3:68:6A:4E:22:F2:3E:15:1A:E4:29:20:F6:A0:41
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3138362e3230382e382e302f32332d3233203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:e7:77:09:14:15:1a:7e:50:e4:28:03:c3:67:bf:aa:13:4d:
         f9:cc:99:ea:5f:7d:76:f2:27:c9:5f:b2:aa:e5:80:c9:a7:9e:
         42:08:be:d2:51:d4:ee:a4:c9:be:ef:46:2a:fb:17:1d:24:24:
         a1:9b:6b:49:25:8f:04:ed:cf:1f:b0:d9:7b:74:f5:62:4e:61:
         1a:4d:28:d0:0c:37:1c:43:18:10:e9:40:11:bb:5f:18:d7:a3:
         b1:45:e8:9a:bc:3c:ed:f0:44:ac:92:3b:88:1c:10:b7:43:b0:
         8d:bf:70:b5:2e:c3:f3:3b:d8:51:95:15:c7:9e:f9:d2:03:99:
         8d:60:1b:2c:20:dc:68:75:44:d1:94:eb:7f:6a:ed:c4:d8:ec:
         c4:26:c6:4d:ad:db:0c:62:a2:07:f5:c5:03:47:59:32:6c:32:
         e9:33:76:48:6d:f5:03:d9:a4:98:a4:45:99:ba:f1:e7:e3:1e:
         c2:17:b8:98:42:fb:94:96:dc:e3:9f:32:4b:ed:ba:a7:07:1b:
         59:95:aa:54:bd:a4:8c:bb:55:f4:35:8d:e6:a2:26:f5:93:df:
         de:21:f4:98:a2:71:34:b4:65:2e:4c:e5:c6:f2:5f:10:6a:00:
         76:27:a1:c3:55:78:6c:02:56:42:75:07:a2:8e:13:50:c4:4f:
         9c:a3:04:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 18:20:04 2024 by rpki-client on console-fra.rpki-client.org